![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS200226.roa
File: AS200226.roa (raw, json)
Hash identifier: oIbYxAA5j232LrVOYuFo7DBp3XZY6i0cz+9r6JkCY/I=
Subject key identifier: 31:11:13:35:D5:AD:5D:05:5A:BE:CB:07:13:88:F9:92:91:75:9C:5C
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 52030AED88288EE91068E55FAB5BA3F858750A99
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS200226.roa
Signing time: Mon 10 Apr 2023 03:31:52 +0000
ROA not before: Mon 10 Apr 2023 03:26:52 +0000
ROA not after: Mon 08 Apr 2024 03:31:52 +0000
asID: 200226
IP address blocks: 2a12:dd47:5e00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:03:0a:ed:88:28:8e:e9:10:68:e5:5f:ab:5b:a3:f8:58:75:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:52 2023 GMT
Not After : Apr 8 03:31:52 2024 GMT
Subject: CN=31111335D5AD5D055ABECB071388F99291759C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:ca:b2:09:ce:0f:42:08:96:ca:6e:29:73:
43:3e:b0:07:a7:ec:7d:32:99:2d:43:14:17:04:d5:
59:a6:df:6f:e1:98:12:46:09:ea:3b:c5:c8:11:6c:
d4:43:30:2a:d0:04:0e:c3:cd:d3:97:15:13:78:be:
33:36:05:d7:c5:34:62:93:8c:cf:ee:5d:d5:c9:85:
37:54:5a:91:f5:3b:32:6a:10:3c:9f:ff:30:6f:ed:
2f:41:97:c1:82:b4:ff:d4:1b:8e:8f:c4:d9:0d:88:
c9:c1:b9:49:dd:ec:7c:3d:e0:31:03:92:74:3f:ad:
1c:2e:b3:79:29:b1:53:c2:a4:89:ee:85:da:97:e3:
c9:2c:0b:22:6e:dd:d9:7a:51:6e:74:a8:af:a6:26:
7d:1f:da:d5:a3:14:c9:33:85:af:65:22:38:71:ef:
a2:59:52:c6:06:52:cc:ef:5c:fd:9b:55:80:6c:c9:
97:5e:45:9a:fe:a9:35:cf:6a:10:50:00:84:21:a4:
7b:55:51:be:bf:f7:33:57:3b:96:d2:0a:cf:29:c8:
60:3a:15:38:81:b4:59:49:df:76:eb:41:d3:bb:d9:
ff:4c:1b:56:01:17:65:0e:64:0e:a0:10:94:4f:7e:
a3:fa:fe:ac:9c:95:2f:83:1d:d5:dc:5d:9b:d4:1e:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:13:35:D5:AD:5D:05:5A:BE:CB:07:13:88:F9:92:91:75:9C:5C
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5e00::/44
Signature Algorithm: sha256WithRSAEncryption
97:43:96:a5:70:7d:b1:2b:78:3c:3d:e7:1d:c0:b2:90:60:68:
54:14:3d:62:ce:bc:0b:95:6f:e5:cb:7a:9f:aa:1e:2b:91:51:
32:7b:7f:78:ee:99:54:1a:6c:66:a1:3f:30:3a:af:34:66:4c:
0a:96:8b:8b:4d:41:cd:d3:e3:40:a6:7a:d5:45:06:b9:2e:00:
6f:ad:ea:41:02:d0:c2:c6:6d:18:5b:40:d0:15:bd:a4:70:18:
5e:6b:17:71:dc:23:7a:3f:21:5b:b3:d0:98:f0:78:30:00:e7:
69:0a:04:51:ae:1b:f2:27:87:7f:98:53:99:4d:a3:2a:83:94:
13:45:7f:e2:c6:c7:0f:c5:85:c8:e0:31:0e:76:54:aa:0d:d3:
4b:c5:34:c4:a6:0a:ed:57:44:af:c2:de:73:3d:f9:bd:16:fe:
90:f4:b8:22:38:5e:f3:b1:90:54:e2:71:27:4f:a1:ce:49:17:
61:5c:b9:48:36:01:d1:91:26:8d:83:62:98:6e:b4:68:21:c7:
3b:bf:4b:48:82:8e:7e:f1:07:45:51:d1:2c:7f:23:4b:81:89:
2e:de:ce:8c:18:4e:d8:27:b4:ae:d6:55:ba:4f:ae:90:c5:56:
94:44:a6:f8:54:03:f4:44:ac:d7:93:87:36:1b:04:82:14:df:
e0:8d:f1:67
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUUgMK7YgojukQaOVfq1uj+Fh1CpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NTJaFw0yNDA0MDgwMzMxNTJaMDMxMTAvBgNV
BAMTKDMxMTExMzM1RDVBRDVEMDU1QUJFQ0IwNzEzODhGOTkyOTE3NTlDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbMqyCc4PQgiWym4pc0M+sAen
7H0ymS1DFBcE1Vmm32/hmBJGCeo7xcgRbNRDMCrQBA7DzdOXFRN4vjM2BdfFNGKT
jM/uXdXJhTdUWpH1OzJqEDyf/zBv7S9Bl8GCtP/UG46PxNkNiMnBuUnd7Hw94DED
knQ/rRwus3kpsVPCpInuhdqX48ksCyJu3dl6UW50qK+mJn0f2tWjFMkzha9lIjhx
76JZUsYGUszvXP2bVYBsyZdeRZr+qTXPahBQAIQhpHtVUb6/9zNXO5bSCs8pyGA6
FTiBtFlJ33brQdO72f9MG1YBF2UOZA6gEJRPfqP6/qyclS+DHdXcXZvUHqv5AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUMRETNdWtXQVavssHE4j5kpF1nFwwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDAyMjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HXgAwDQYJKoZIhvcNAQEL
BQADggEBAJdDlqVwfbEreDw95x3AspBgaFQUPWLOvAuVb+XLep+qHiuRUTJ7f3ju
mVQabGahPzA6rzRmTAqWi4tNQc3T40CmetVFBrkuAG+t6kEC0MLGbRhbQNAVvaRw
GF5rF3HcI3o/IVuz0JjweDAA52kKBFGuG/Inh3+YU5lNoyqDlBNFf+LGxw/Fhcjg
MQ52VKoN00vFNMSmCu1XRK/C3nM9+b0W/pD0uCI4XvOxkFTicSdPoc5JF2FcuUg2
AdGRJo2DYphutGghxzu/S0iCjn7xB0VR0Sx/I0uBiS7ezowYTtgntK7WVbpPrpDF
VpREpvhUA/RErNeThzYbBIIU3+CN8Wc=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:57:46 2025 by rpki-client