Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS201398.roa
File: AS201398.roa (raw, json)
Hash identifier: 4fL0K69n3kzBq9pR2ZRswpHTHA3go3DvRoUqnWChXpc=
Subject key identifier: 0C:00:DE:79:54:B4:56:4F:14:BC:C0:38:CE:E1:0B:85:C4:F4:A8:1B
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 22260F0055427796E307354DC43C83FFB1AF1B1F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS201398.roa
Signing time: Mon 10 Apr 2023 03:38:57 +0000
ROA not before: Mon 10 Apr 2023 03:33:57 +0000
ROA not after: Mon 08 Apr 2024 03:38:57 +0000
asID: 201398
IP address blocks: 2a12:dd47:8e00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:26:0f:00:55:42:77:96:e3:07:35:4d:c4:3c:83:ff:b1:af:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:33:57 2023 GMT
Not After : Apr 8 03:38:57 2024 GMT
Subject: CN=0C00DE7954B4564F14BCC038CEE10B85C4F4A81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:ca:ce:82:13:7c:dd:9c:83:1c:47:f3:9c:
0d:42:bc:27:11:18:b0:f6:cc:5f:36:80:6b:3f:a5:
70:93:c2:f5:6f:c0:fb:b4:68:a2:ab:aa:7a:54:c6:
c0:e8:43:bb:e9:b0:d3:6c:43:b4:eb:f6:cb:fe:52:
d7:a9:f7:76:cc:e6:b3:bb:d6:23:43:84:be:42:d5:
b8:1c:da:77:ab:bd:2c:8d:df:26:be:ba:8d:fc:b7:
52:d5:12:0f:d6:fb:80:bc:e5:e7:5b:ab:39:29:eb:
0c:ae:7e:d3:1d:fc:86:3b:6a:89:79:ff:d1:d7:36:
5f:73:1a:8d:85:c2:ce:e7:e1:87:63:33:71:fd:1d:
65:c3:d8:c7:9f:59:f0:26:57:3e:af:e6:67:79:d8:
a4:35:84:f1:70:fb:c9:5c:8b:e6:8c:c1:83:04:a0:
7a:a7:e8:38:01:74:f5:fb:2e:ac:d8:82:4d:87:62:
90:82:3b:0b:e1:12:18:7c:21:cd:39:d6:b0:00:97:
52:89:24:8d:b2:e7:a8:fb:70:85:ce:ec:88:42:e1:
a6:f3:db:0f:f5:da:f1:af:f5:6d:87:c3:38:5e:37:
07:2e:6e:34:80:fa:bd:7b:a5:66:35:aa:8c:03:ea:
09:17:d6:d0:71:e7:bc:42:98:bd:63:63:f4:a9:94:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:DE:79:54:B4:56:4F:14:BC:C0:38:CE:E1:0B:85:C4:F4:A8:1B
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8e00::/44
Signature Algorithm: sha256WithRSAEncryption
60:2f:84:52:3c:46:bc:0f:75:eb:d2:bf:a8:64:33:97:c3:1f:
26:33:37:db:44:0a:c8:a4:38:a9:23:02:71:23:1c:e0:87:a8:
b0:39:2a:96:7c:66:08:9d:d7:54:85:3f:ac:45:4c:80:ad:10:
08:30:06:f2:08:b3:94:fd:bd:3c:76:cb:af:90:42:28:76:8f:
7b:17:3a:13:54:58:c4:ad:07:08:5a:a0:db:c8:83:42:94:2e:
0e:36:75:eb:e9:3a:35:e8:18:90:47:39:f9:36:ee:39:65:6a:
19:30:f3:51:37:fa:d4:b2:6e:b1:83:7a:46:5f:51:43:24:75:
a1:fe:4d:4e:33:4a:17:7a:d4:6e:79:f4:24:f1:0b:dc:4c:4d:
fd:7a:0d:3b:99:20:99:cb:9e:c1:e9:b8:05:69:4b:c2:d1:79:
24:67:b0:67:57:12:00:94:a3:81:78:8c:8a:0f:af:7f:2f:b5:
1b:99:94:58:41:19:44:21:d5:03:1a:c8:0a:05:e1:16:0f:76:
30:10:4e:d7:8c:de:f0:3d:3a:33:f2:1d:8b:00:a0:3e:f5:fb:
2e:4d:eb:2d:cb:bb:8d:06:14:e2:c1:35:11:2d:d1:a6:6b:87:
cd:8c:b5:97:03:eb:e0:e1:53:dd:9e:ce:30:d9:ea:ed:a4:79:
b3:c6:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:36 2025 by rpki-client