Route Origin Authorization
$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
File: 326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa (raw, json)
Hash identifier: NZSA6Qt///36kSMBZAI7S/JPGgy7nwPx37QHLw1gGiA=
Subject key identifier: 60:CF:4D:64:F5:95:84:A8:B8:CF:88:23:FB:F7:26:19:4C:69:80:74
Certificate issuer: /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial: 5F3D50D529CCEA573EBD18B4392A83C160A9512E
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access: rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
Signing time: Wed 26 Jun 2024 11:08:21 +0000
ROA not before: Wed 26 Jun 2024 11:03:21 +0000
ROA not after: Wed 25 Jun 2025 11:08:21 +0000
asID: 203867
IP address blocks: 2a07:54c1:8400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3d:50:d5:29:cc:ea:57:3e:bd:18:b4:39:2a:83:c1:60:a9:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Validity
Not Before: Jun 26 11:03:21 2024 GMT
Not After : Jun 25 11:08:21 2025 GMT
Subject: CN=60CF4D64F59584A8B8CF8823FBF726194C698074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:5e:5f:90:5f:be:34:91:f3:95:55:e2:13:
4f:b3:28:08:71:ea:ab:50:2b:01:b5:51:a5:54:9f:
00:5c:ca:e9:20:d0:b1:15:e5:60:a3:02:7b:56:b9:
4d:3b:e7:a6:a2:f7:b1:e0:f3:72:1d:0c:61:d9:ee:
fa:03:15:20:2b:aa:5f:bd:a8:e0:9f:75:8c:e4:e9:
0e:ea:43:bb:c3:a1:11:4d:3a:6c:a0:96:ad:0e:cb:
8b:45:c9:be:6d:d5:6c:01:e4:d7:6f:93:24:7f:5d:
6f:be:f5:89:e2:81:57:56:ac:2d:2d:f8:f4:95:fe:
5d:96:c3:43:28:d6:fe:f8:8b:65:e7:89:ae:1d:35:
6c:35:6e:c1:83:64:ae:5c:85:f1:30:41:d4:5f:5e:
79:92:28:09:17:e2:65:dc:6f:fc:d1:c6:9d:06:55:
f1:8a:0c:2c:64:43:e9:28:f3:7e:79:05:23:61:42:
e4:13:7d:ab:11:e1:66:c4:f5:e1:16:25:7d:f8:f6:
ab:b9:03:dd:ca:08:ef:7c:0e:c5:0f:9c:2c:60:e3:
48:6f:33:15:c3:79:40:cc:c5:6e:09:f3:f6:54:11:
28:d6:3f:f1:a5:f5:01:5f:94:a4:f3:e4:ad:ae:b9:
19:0c:1e:0a:f3:ba:23:a1:9b:82:70:d9:fe:4a:40:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:4D:64:F5:95:84:A8:B8:CF:88:23:FB:F7:26:19:4C:69:80:74
X509v3 Authority Key Identifier:
keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
62:a2:a6:be:36:8f:dd:5a:b7:93:d2:bd:3e:4d:21:7e:c4:d5:
8c:df:d0:4c:d0:91:6f:09:a1:70:7a:96:51:77:34:a6:c0:f3:
87:33:e8:12:ee:75:9f:90:77:47:5d:d8:27:52:70:f4:d8:57:
4e:88:1b:7e:39:8c:26:ec:30:ba:6d:30:eb:67:8d:ce:14:f4:
30:0c:63:81:64:1b:7b:ee:d5:2d:84:5a:ac:ec:a5:8e:5d:63:
86:7e:c0:4a:8d:ab:6f:52:2f:ed:b5:fc:cc:ce:c4:57:72:5b:
4c:8f:84:90:a1:61:c9:b9:99:bf:7f:77:aa:0b:8d:ae:d3:92:
93:b4:0b:ce:6d:71:3d:85:e5:3a:4f:d8:51:3d:30:00:c5:25:
33:2d:aa:bf:cb:7d:b5:ae:f5:52:a7:77:2e:9e:ad:a1:d5:fa:
5c:7d:a5:5a:cc:a3:d3:c8:7a:3b:b5:80:7a:a0:b9:53:1b:07:
f9:19:13:ee:d7:ea:2a:5c:59:99:4f:16:c2:4d:44:49:2a:e3:
c8:6a:fc:ea:f4:51:ca:84:c8:6e:54:b9:59:e0:41:fb:63:8c:
c3:02:15:2e:9d:3c:91:60:73:aa:7b:7f:a8:7f:76:3a:85:c6:
6e:27:fb:39:04:f8:99:4c:10:f0:68:1b:ad:be:5d:39:5d:d8:
bd:6c:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:44 2025 by rpki-client