Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: xTDFwuRPdh72TYesSBoyfhJLZEXbBw9UgcLcjrxVM6o=
Subject key identifier: 28:D6:84:CD:B6:8D:CB:CC:F6:34:BE:38:BA:09:56:C9:46:77:D0:BA
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 42AD60F12C647F2CF798549ABED944B01B0CB60D
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
Signing time: Tue 26 Mar 2024 19:14:38 +0000
ROA not before: Tue 26 Mar 2024 19:09:38 +0000
ROA not after: Tue 25 Mar 2025 19:14:38 +0000
asID: 211604
IP address blocks: 2a12:dd47:3def::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ad:60:f1:2c:64:7f:2c:f7:98:54:9a:be:d9:44:b0:1b:0c:b6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Mar 26 19:09:38 2024 GMT
Not After : Mar 25 19:14:38 2025 GMT
Subject: CN=28D684CDB68DCBCCF634BE38BA0956C94677D0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:e7:33:b6:ce:b6:d2:56:bc:ef:c7:25:e1:
f0:1b:2c:66:ea:13:a7:16:fe:35:b4:f0:b9:2c:84:
1c:ea:04:f6:ce:ce:f1:03:5d:24:f5:66:20:2e:2b:
7f:22:e6:59:da:27:2b:a3:0d:8c:16:49:db:80:db:
c4:fb:a4:8c:47:c5:11:b6:a3:c0:3d:50:48:9e:4a:
3b:7f:02:dd:00:f1:ab:a1:9b:32:26:99:00:b5:3c:
64:81:79:52:59:3c:0e:7a:e9:b3:12:b3:e6:6b:db:
db:63:ab:0a:1b:91:96:e9:20:d1:95:fa:83:16:e5:
be:e6:32:43:f5:d5:d0:6a:36:27:bd:92:f5:95:b6:
66:fa:3a:22:02:07:a2:24:3b:18:a7:09:50:19:ac:
7d:cd:94:04:b1:0b:5b:f5:31:c7:e6:26:4c:56:42:
53:61:20:42:9d:a4:82:cf:32:60:31:ca:87:c3:14:
5b:07:f5:76:9c:ca:88:01:a6:3e:cd:2c:9d:94:65:
5c:ef:b4:aa:1f:37:06:c6:02:6c:fa:b6:48:53:12:
14:7c:ae:02:fc:00:1e:66:09:5f:ec:69:82:4e:ac:
ab:44:01:88:01:59:89:3e:58:58:3d:76:eb:0a:62:
64:77:d6:2f:82:b0:f1:6b:a3:14:b0:12:80:cf:22:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:84:CD:B6:8D:CB:CC:F6:34:BE:38:BA:09:56:C9:46:77:D0:BA
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3def::/48
Signature Algorithm: sha256WithRSAEncryption
4f:ea:39:4d:7b:ee:cc:a4:e2:91:9e:c8:e9:51:75:45:c9:a4:
83:60:d1:43:80:4f:ad:b7:85:3c:d5:9b:bf:12:fc:e8:cd:70:
25:d1:7f:ea:e6:75:03:e3:d3:86:53:dd:59:57:6c:5b:d3:a3:
6f:a3:29:85:9f:89:75:0b:1d:9f:7b:85:f6:ab:71:39:54:bc:
3a:c9:ae:5a:d5:4b:73:90:96:1c:15:19:e8:c8:66:de:b7:3f:
c4:c2:1a:36:a8:1c:9a:c1:ee:1f:ff:38:be:0f:14:b0:f8:bb:
8a:61:28:ba:bb:b0:32:81:67:c7:57:ea:a9:34:ce:9a:33:4b:
1c:13:11:34:ef:8b:a8:54:2d:3a:80:a0:6e:a0:2f:a9:42:80:
8e:44:0b:b5:da:91:e7:5b:63:78:04:c6:0a:d6:bd:79:7c:2d:
8a:31:97:70:db:5a:be:0f:97:56:42:2b:e2:fa:0e:1d:50:7e:
4f:a6:28:a3:eb:24:92:5c:95:5c:36:6f:81:33:53:b8:39:31:
99:12:38:6f:1a:9b:4b:5d:9c:b9:93:fd:93:77:04:cc:8a:7b:
ec:a7:07:e9:aa:5c:69:fd:b1:0f:b3:ba:74:cf:43:a8:56:10:
7d:48:36:7d:27:e5:35:f8:fd:07:78:87:1d:2d:af:28:77:99:
d4:ed:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:32:12 2024 by rpki-client on console-fra.rpki-client.org