Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430373a3a2f34382d3438203d3e20323136343732.roa
File: 326131323a646434373a336430373a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier: ikeBg7cvcwL+MSyBBxCJf0UmEv5tbJPfUO2ycgXVD5Q=
Subject key identifier: C0:91:CF:70:64:9E:6D:48:77:E3:03:3E:B3:5C:3D:08:27:FF:49:82
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 56FFC22127E942A254B2FB00594ECA21312A1E06
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430373a3a2f34382d3438203d3e20323136343732.roa
Signing time: Sat 01 Jun 2024 23:05:57 +0000
ROA not before: Sat 01 Jun 2024 23:00:57 +0000
ROA not after: Sat 31 May 2025 23:05:57 +0000
asID: 216472
IP address blocks: 2a12:dd47:3d07::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ff:c2:21:27:e9:42:a2:54:b2:fb:00:59:4e:ca:21:31:2a:1e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Jun 1 23:00:57 2024 GMT
Not After : May 31 23:05:57 2025 GMT
Subject: CN=C091CF70649E6D4877E3033EB35C3D0827FF4982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:b4:34:bf:83:4a:5f:e3:b0:0e:e1:7a:23:
cb:d1:07:ae:af:02:03:bf:b2:57:e6:c4:0b:f7:9a:
ce:ff:4d:6c:66:e4:af:48:45:b0:9c:a5:12:e0:60:
5b:14:2f:80:5e:e7:ea:ea:b4:88:d0:37:a6:b9:d9:
89:8e:13:ef:ea:7f:b4:72:11:b6:94:4e:c7:62:d9:
7d:68:97:64:e3:8d:de:0e:97:d8:a0:1b:26:fa:c7:
ab:80:78:d8:f7:43:b7:a8:e8:94:81:0f:4f:e0:63:
0e:e8:2e:ff:21:37:9d:27:eb:32:6a:c4:58:dc:ac:
b2:54:ff:bb:c6:81:27:22:14:64:23:ff:b0:ad:2f:
4e:ae:cb:86:01:37:21:f3:94:26:9a:c7:26:3b:d3:
30:b7:6c:ad:03:08:94:87:2a:ac:9b:ef:6e:f7:54:
8e:d9:3d:fd:f1:e0:be:55:c8:fe:45:d0:db:68:3d:
bf:ed:24:3e:88:b3:9d:c8:14:6a:5e:a6:27:00:d9:
59:45:6d:01:c3:f1:64:55:63:0c:d1:1a:e1:68:35:
9c:3d:2b:18:5f:83:d9:8b:63:ee:aa:9c:d8:dd:4f:
e1:ca:42:eb:f2:31:95:19:e5:2e:fd:58:74:d6:1c:
f8:cd:e9:95:29:33:25:fc:ca:89:e7:f2:5c:29:27:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:CF:70:64:9E:6D:48:77:E3:03:3E:B3:5C:3D:08:27:FF:49:82
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430373a3a2f34382d3438203d3e20323136343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3d07::/48
Signature Algorithm: sha256WithRSAEncryption
66:02:d4:bb:71:62:d3:43:40:11:5d:9a:56:65:23:a2:bc:6d:
ff:03:72:63:21:5b:dc:85:4f:7a:21:c8:28:17:10:50:36:7d:
ed:36:32:b6:95:05:4a:2f:b2:23:45:76:dd:48:ad:81:3a:fa:
7e:4f:be:25:19:42:70:ef:29:65:3e:8c:16:72:f2:7f:4e:62:
ad:61:a7:38:d8:1a:11:22:6d:f6:c4:25:9a:45:72:d4:c4:c6:
5d:9a:40:4d:ef:38:f2:33:94:f3:98:07:8e:83:82:0f:60:3e:
b6:a1:af:ba:90:0c:4e:55:e6:b0:fa:49:da:e1:0a:43:9d:cb:
03:52:61:22:ba:38:6c:3d:c7:19:23:b5:d1:59:2e:32:22:56:
db:bd:46:30:cf:3b:10:dc:b0:d3:21:df:9d:dd:d3:c3:8f:f4:
d9:d6:d6:ab:d6:2f:20:1a:d3:f6:ed:a0:fa:e6:f8:20:e5:59:
29:71:98:dc:c3:d6:5f:67:84:64:ef:9f:0c:1f:de:49:35:20:
1a:19:3c:6f:f4:f0:23:f9:4e:30:57:fe:83:7e:0e:13:37:ad:
2d:7d:0f:e9:be:2d:bf:aa:cd:da:f9:41:92:3a:f2:af:72:49:
d3:87:98:4f:c5:7f:fb:5e:c5:a4:39:3f:d0:79:55:73:76:f6:
e1:33:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:25:02 2024 by rpki-client on console-fra.rpki-client.org