Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa
File: 326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa (raw, json)
Hash identifier: Qjby29vfdE7TcMGFUb7P3ZY36wD3AsMu7W1JHnEl9g0=
Subject key identifier: 36:01:91:92:18:99:D5:60:BE:B3:78:38:40:A9:BA:61:EB:97:86:D0
Certificate issuer: /CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
Certificate serial: 6208E1EF587A0E3B758B9AA998BE1CE2D9984FBB
Authority key identifier: 33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
Authority info access: rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
Subject info access: rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa
Signing time: Fri 15 Mar 2024 15:14:23 +0000
ROA not before: Fri 15 Mar 2024 15:09:23 +0000
ROA not after: Fri 14 Mar 2025 15:14:23 +0000
asID: 199376
IP address blocks: 2a12:dd47:3900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:08:e1:ef:58:7a:0e:3b:75:8b:9a:a9:98:be:1c:e2:d9:98:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
Validity
Not Before: Mar 15 15:09:23 2024 GMT
Not After : Mar 14 15:14:23 2025 GMT
Subject: CN=360191921899D560BEB3783840A9BA61EB9786D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:53:0e:52:b3:53:36:1f:d9:8f:73:6d:d4:
79:0d:d9:8d:19:f3:a4:a9:e8:4e:8c:0f:01:5f:c9:
92:b7:34:5f:43:96:7b:7e:8d:7c:3a:78:5b:4f:63:
3e:1c:dd:0d:ab:25:21:6c:95:75:08:ed:3f:15:f4:
81:ae:77:b3:66:42:8b:67:f3:11:4a:64:c6:7f:90:
7b:03:5d:cb:4d:61:e6:45:78:b1:f8:12:a5:0d:12:
cb:c4:ad:da:8f:5e:b3:bd:34:e7:84:3f:a2:ab:31:
94:b4:23:07:f5:2e:19:fd:ef:34:1e:c8:d7:1f:9c:
58:98:9d:e6:0f:5e:d8:64:26:ff:c8:38:ff:c6:57:
d1:d8:c7:5c:b4:4b:7b:c7:ab:49:59:4a:dc:c8:f8:
ff:fd:ff:94:ec:2e:fd:c8:99:e5:d6:54:5c:3a:f2:
a2:21:2e:a9:0d:a6:76:66:0c:0b:c8:6f:1e:4d:fa:
ba:d0:32:7f:4c:0b:c9:a8:49:e6:ad:26:9e:e7:72:
4b:8a:3e:1b:30:0d:b9:8d:5a:91:06:9d:b8:d7:f9:
5d:23:6d:ad:e6:20:87:b8:23:92:53:a9:ea:83:3a:
f8:cb:e1:8f:1a:a6:bf:95:43:76:15:ae:88:1f:71:
ba:51:b8:24:27:ca:8c:34:70:69:fa:27:da:af:02:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:91:92:18:99:D5:60:BE:B3:78:38:40:A9:BA:61:EB:97:86:D0
X509v3 Authority Key Identifier:
keyid:33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3900::/40
Signature Algorithm: sha256WithRSAEncryption
4d:fd:44:23:5e:ec:4c:9d:6d:47:2a:bd:de:c8:29:59:ad:2d:
1c:54:d6:b2:3a:5b:98:4c:53:df:f1:04:71:5c:74:94:4a:d8:
7a:38:df:e3:2b:c4:10:df:f4:72:e6:ed:0b:7f:e9:50:00:a5:
fc:89:2c:27:28:bf:02:37:5b:0d:cd:29:d7:2e:d6:7c:74:6e:
3b:0a:47:51:b9:09:7c:34:a9:de:7b:99:7d:df:e9:a8:10:3f:
6c:fc:2d:53:44:5e:c3:5c:7e:a7:45:db:32:61:7c:9c:8f:3c:
cd:c8:b2:f4:64:bc:dc:4f:7f:cf:70:e3:8a:98:e2:91:d5:5d:
01:21:80:f7:f1:fd:8c:d1:fe:43:05:9f:ec:bf:8d:cf:e6:70:
74:f6:b5:eb:e5:97:43:ee:24:3d:de:77:c1:f4:c3:89:cc:09:
ae:32:95:68:77:3b:66:82:c9:c1:5f:e1:c9:8a:53:92:77:32:
2f:ac:07:97:02:1d:70:30:c4:17:a6:1a:3a:f9:f9:d2:30:33:
67:8a:1a:9a:b2:ea:6f:b5:39:60:5a:a6:f1:97:5d:4e:65:75:
77:3b:16:0e:96:c9:ca:81:1c:88:6c:0b:34:04:f3:38:2f:e5:
36:40:8c:f8:56:20:c2:e7:49:b1:bb:05:c8:44:e0:aa:e9:ff:
00:16:ca:52
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUYgjh71h6Djt1i5qpmL4c4tmYT7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMyRDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NF
M0VCQjBDMjAeFw0yNDAzMTUxNTA5MjNaFw0yNTAzMTQxNTE0MjNaMDMxMTAvBgNV
BAMTKDM2MDE5MTkyMTg5OUQ1NjBCRUIzNzgzODQwQTlCQTYxRUI5Nzg2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebFMOUrNTNh/Zj3Nt1HkN2Y0Z
86Sp6E6MDwFfyZK3NF9Dlnt+jXw6eFtPYz4c3Q2rJSFslXUI7T8V9IGud7NmQotn
8xFKZMZ/kHsDXctNYeZFeLH4EqUNEsvErdqPXrO9NOeEP6KrMZS0Iwf1Lhn97zQe
yNcfnFiYneYPXthkJv/IOP/GV9HYx1y0S3vHq0lZStzI+P/9/5TsLv3ImeXWVFw6
8qIhLqkNpnZmDAvIbx5N+rrQMn9MC8moSeatJp7nckuKPhswDbmNWpEGnbjX+V0j
ba3mIIe4I5JTqeqDOvjL4Y8apr+VQ3YVrogfcbpRuCQnyow0cGn6J9qvAs7lAgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQUNgGRkhiZ1WC+s3g4QKm6YeuXhtAwHwYDVR0j
BBgwFoAUMy0N24ve9Mx5hHTJWXn9zOPrsMIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMTk5NzYyLzIvMzMy
RDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NFM0VCQjBDMi5jcmwwZQYIKwYB
BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xLzMzMkQwRERCOEJERUY0Q0M3OTg0NzRDOTU5NzlGRENDRTNFQkIwQzIuY2Vy
MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jby9y
ZXBvL0FTMTk5NzYyLzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzM5MzAzMDNhM2Ey
ZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uc5
MA0GCSqGSIb3DQEBCwUAA4IBAQBN/UQjXuxMnW1HKr3eyClZrS0cVNayOluYTFPf
8QRxXHSUSth6ON/jK8QQ3/Ry5u0Lf+lQAKX8iSwnKL8CN1sNzSnXLtZ8dG47CkdR
uQl8NKnee5l93+moED9s/C1TRF7DXH6nRdsyYXycjzzNyLL0ZLzcT3/PcOOKmOKR
1V0BIYD38f2M0f5DBZ/sv43P5nB09rXr5ZdD7iQ93nfB9MOJzAmuMpVodztmgsnB
X+HJilOSdzIvrAeXAh1wMMQXpho6+fnSMDNnihqasupvtTlgWqbxl11OZXV3OxYO
lsnKgRyIbAs0BPM4L+U2QIz4ViDC50mxuwXIROCq6f8AFspS
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:50 2024 by rpki-client on console-fra.rpki-client.org