Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS203418.roa
File: AS203418.roa (raw, json)
Hash identifier: fOVeWKVpk02Z+S89j02jqr3bt+9HgXzooQUkRL0ftPo=
Subject key identifier: F6:54:F7:2A:CD:82:C3:44:A4:1B:A4:3C:27:4D:4A:89:FF:09:B1:3E
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 4028F04ACF3EBC482CB946DC4940EA6636331AA4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS203418.roa
Signing time: Tue 11 Apr 2023 01:14:01 +0000
ROA not before: Tue 11 Apr 2023 01:09:01 +0000
ROA not after: Tue 09 Apr 2024 01:14:01 +0000
asID: 203418
IP address blocks: 2a12:dd47:807d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:28:f0:4a:cf:3e:bc:48:2c:b9:46:dc:49:40:ea:66:36:33:1a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 11 01:09:01 2023 GMT
Not After : Apr 9 01:14:01 2024 GMT
Subject: CN=F654F72ACD82C344A41BA43C274D4A89FF09B13E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:48:e3:d2:47:2f:55:39:62:e5:a6:c8:f7:
a6:ee:ae:6c:d0:6d:1c:0d:cf:b5:ea:35:f0:3c:99:
51:c6:8d:c5:b7:7b:e2:8f:fb:3c:13:b8:fa:53:20:
dc:5c:de:b5:b2:21:22:aa:b9:2b:b0:47:2a:41:1a:
6a:ac:da:5e:7b:89:cf:de:7c:ed:70:b3:5a:74:cd:
13:f8:13:d6:63:f0:aa:5f:e8:43:7c:e3:ab:ba:e1:
c9:8d:0a:09:f5:34:d3:48:ec:cd:1b:cd:da:7d:9a:
6b:ce:7d:33:78:96:99:6d:af:32:ee:55:b2:58:82:
d2:0e:db:7a:18:3b:8a:8d:46:2a:89:f3:11:55:25:
d5:f0:04:06:f1:b2:e2:79:dc:53:6a:2f:fb:20:19:
d3:da:46:b6:d7:33:cb:a2:69:94:2f:49:93:b0:05:
4f:68:54:fa:86:c1:10:7d:5c:7b:6a:41:e3:67:a9:
e3:9b:ed:b5:1f:57:65:ad:96:2e:7a:fe:42:8e:b7:
a1:f3:cb:fb:64:49:2a:e1:d5:c7:ec:bc:bb:13:36:
b7:f4:da:92:33:03:66:3d:3f:8d:2c:da:79:f2:4d:
60:61:67:45:84:03:4f:3b:91:36:64:6b:df:49:69:
5c:15:0d:3c:d2:59:f3:51:f5:b0:3d:12:e1:17:b8:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:F7:2A:CD:82:C3:44:A4:1B:A4:3C:27:4D:4A:89:FF:09:B1:3E
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:807d::/48
Signature Algorithm: sha256WithRSAEncryption
63:0b:7c:a3:28:e5:ee:51:51:af:6f:84:2d:17:e6:5c:c3:3f:
1a:2d:e9:05:e0:7d:11:37:e3:57:e3:b5:62:87:3b:35:ad:f6:
37:72:eb:16:53:07:0d:ae:13:e0:ae:2c:79:30:0b:d5:53:34:
a0:4b:c8:ea:70:00:4e:41:a7:4f:c6:5f:18:53:a6:42:52:9d:
68:65:2b:8e:5b:e6:41:2e:2c:55:02:7f:be:db:85:c7:f2:0e:
01:bc:fe:6e:53:9a:1f:94:c9:eb:8d:84:91:3f:5c:e5:9d:3f:
78:7e:fc:8c:79:df:ee:b1:5a:24:b2:99:40:6b:d0:93:28:80:
ac:83:93:3c:31:ed:d5:2f:45:8b:57:ef:ad:f0:a7:ed:d8:4c:
26:ca:b2:d7:3a:27:55:a4:ee:72:87:23:a1:73:33:63:bf:4d:
b7:ee:df:0c:bc:f1:46:96:66:af:8f:f6:a0:6c:3d:6a:80:cc:
9c:2c:f5:c7:06:1f:78:eb:cf:0f:4c:2f:2c:63:1c:55:c3:91:
b6:30:5d:59:62:ed:d0:96:26:95:de:a6:41:f3:86:c7:1a:e7:
57:cc:54:13:23:9a:ec:13:37:fc:0b:af:d6:26:72:b8:31:e6:
09:ab:dd:9f:ac:18:86:0a:34:1c:28:b9:b4:67:41:fd:0c:15:
83:ef:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:13 2025 by rpki-client