![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: KfjEnOqLxlmHC0rtFNfQrNj9q2ihrHR8t9My+xjgGzI=
Subject key identifier: 8A:F7:B7:20:FA:24:65:B8:27:D8:A7:48:C3:72:D0:71:D3:CB:E9:F9
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 1FF3FB6BD577970ACE9B89BF1D7018DA952FE6BA
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 18 Mar 2024 01:14:25 +0000
ROA not before: Mon 18 Mar 2024 01:09:25 +0000
ROA not after: Mon 17 Mar 2025 01:14:25 +0000
asID: 211604
IP address blocks: 2a12:dd47:3daa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f3:fb:6b:d5:77:97:0a:ce:9b:89:bf:1d:70:18:da:95:2f:e6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Mar 18 01:09:25 2024 GMT
Not After : Mar 17 01:14:25 2025 GMT
Subject: CN=8AF7B720FA2465B827D8A748C372D071D3CBE9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:b1:f8:07:cb:32:ab:e6:53:56:37:f3:13:
66:ba:1f:f4:8e:b5:f7:9a:7c:3a:d0:a4:98:01:7e:
39:ce:b0:45:35:09:78:af:61:ac:73:bf:2f:02:66:
a0:5f:54:cd:30:c7:75:21:37:d5:d7:c5:55:53:a0:
20:da:cc:72:46:30:81:c6:7e:06:d6:29:80:30:75:
7e:3f:b7:94:71:00:ee:69:86:b6:bc:76:d1:23:e3:
d9:52:72:30:2c:18:a4:56:1c:e2:cf:a5:c9:bf:b2:
06:a9:59:35:29:38:56:18:d4:8a:22:fd:85:82:94:
b8:58:30:a3:b2:36:a7:9d:34:92:d7:bb:23:8f:e5:
25:6c:c5:c9:b9:df:22:4c:58:5b:40:ea:34:5d:cd:
bf:9a:fa:cb:10:e2:26:c2:c7:fe:2d:3b:5f:f9:aa:
50:5e:93:09:15:54:c0:ec:64:aa:ec:16:69:39:d1:
b3:ca:99:d9:10:99:88:cc:28:81:7d:02:65:df:ca:
bf:62:cd:1b:34:91:77:a2:06:3d:8f:fc:a1:78:6b:
ed:07:67:a2:cd:25:47:47:70:16:6f:3d:f5:6f:44:
9d:ad:45:ef:8c:e0:50:07:1e:a8:d8:ae:ab:49:4e:
37:6a:66:fd:fe:6a:32:67:4a:cf:79:36:02:6e:73:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:B7:20:FA:24:65:B8:27:D8:A7:48:C3:72:D0:71:D3:CB:E9:F9
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3daa::/48
Signature Algorithm: sha256WithRSAEncryption
38:ae:e6:cd:a8:d5:42:2c:e6:e4:50:a4:c7:65:ef:77:5b:80:
5e:2b:a5:a7:94:49:b8:9f:ff:9b:d1:c3:12:31:10:26:2f:ea:
f7:a0:1a:85:f1:41:de:38:97:1b:8f:47:e2:2c:25:a9:4d:69:
75:76:6f:b1:07:34:e3:c5:1b:8c:3e:a6:93:8d:2f:59:e3:66:
9b:7f:7e:f8:44:8b:96:a4:e6:86:48:8d:86:1b:d9:5b:ea:76:
9f:aa:0f:ea:a4:ae:7e:b0:fa:95:b0:74:f1:e2:9d:4b:27:60:
75:14:ce:9e:43:4f:ae:41:73:c6:40:e9:9d:3e:4e:58:69:62:
67:bf:66:5d:11:37:29:d5:ab:e4:86:3c:53:83:83:00:1d:5a:
73:aa:14:57:9b:05:bb:13:fa:96:ba:2d:fd:9f:00:0c:6f:bc:
0e:79:f9:18:4b:d2:07:04:9c:e7:06:4e:a8:e3:13:55:c4:fc:
6c:b1:77:7d:50:ca:4d:08:33:ff:25:2f:ec:7c:31:7c:1b:98:
72:33:b2:fa:fa:44:26:91:78:c2:01:79:c7:0c:a5:5c:79:cd:
a1:0f:b8:18:a5:aa:e1:06:a2:3c:e7:4a:e1:b8:4a:28:b1:7b:
6d:46:e2:e9:6e:90:78:da:15:05:bc:ed:26:67:df:91:b0:ad:
d6:23:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:51:07 2024 by rpki-client on console-fra.rpki-client.org