Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS203470.roa
File: AS203470.roa (raw, json)
Hash identifier: PzaWMvu1LVr3ILomMrVL/v5cHUGxMz7nRa02o5MOApk=
Subject key identifier: AA:BB:FD:69:17:40:A7:D3:27:56:EB:01:49:36:AF:37:86:B6:E0:89
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 0CEE5D052E7CEE31D79CE6B16F9327CB4CC82763
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS203470.roa
Signing time: Mon 10 Apr 2023 03:31:40 +0000
ROA not before: Mon 10 Apr 2023 03:26:40 +0000
ROA not after: Mon 08 Apr 2024 03:31:40 +0000
asID: 203470
IP address blocks: 2a12:dd47:80e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ee:5d:05:2e:7c:ee:31:d7:9c:e6:b1:6f:93:27:cb:4c:c8:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:40 2023 GMT
Not After : Apr 8 03:31:40 2024 GMT
Subject: CN=AABBFD691740A7D32756EB014936AF3786B6E089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:2d:c0:9d:50:7b:e3:11:ab:a6:c1:58:f2:
45:32:8a:1e:35:16:37:d8:fc:3f:8e:34:34:37:ca:
95:4b:11:d7:09:50:55:e3:bc:57:65:7e:a8:06:4b:
2b:f3:d7:f1:c4:b9:11:8d:38:a4:ee:40:b4:53:73:
24:20:48:4d:ad:68:03:da:bc:23:6b:29:c4:d6:6e:
44:f8:38:9a:78:57:d8:8b:bc:13:5f:08:47:30:ae:
3b:9a:a3:99:da:48:78:27:25:54:a3:1d:e0:2a:d9:
23:27:12:73:79:b7:14:5c:1d:e1:be:02:a5:e8:ef:
c5:60:b4:fd:34:2a:cd:e9:f1:ff:2f:5f:24:78:2e:
77:cf:ae:62:dc:d9:d0:f6:fd:19:bd:e1:6a:81:73:
e6:ab:06:a6:1c:0d:2d:e9:0b:30:ea:47:60:9e:d8:
ff:59:3a:6c:36:fc:d7:c7:8d:dc:d3:56:40:af:bc:
74:71:75:15:0d:ff:75:50:87:38:33:ee:85:ce:1f:
49:08:8c:d1:2f:ad:9f:9d:2b:4e:8b:f2:ec:f1:82:
5b:d5:1e:fa:82:49:ca:65:29:2e:b1:b8:e7:86:32:
a2:73:e3:ea:ab:05:e2:69:01:e2:d4:bd:35:5c:5f:
c4:c3:7f:a8:bd:8b:20:d8:c6:a3:de:f7:7a:a1:34:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:FD:69:17:40:A7:D3:27:56:EB:01:49:36:AF:37:86:B6:E0:89
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:80e8::/48
Signature Algorithm: sha256WithRSAEncryption
1e:f9:98:dd:91:b4:e2:04:1e:c0:e9:f4:1b:ba:33:94:04:20:
36:11:3e:ae:3e:b2:65:37:50:5e:c5:c7:02:ef:5e:4a:6b:37:
44:f1:1b:28:87:c6:71:e0:e0:78:18:cf:f6:3e:21:7d:9a:bc:
d2:b9:5d:e6:d0:66:c9:85:fa:35:bb:a1:14:ec:96:a7:15:89:
a4:ef:08:85:54:b7:7b:cd:26:3c:99:01:b7:b0:ae:12:a8:7d:
73:6b:a2:ff:6e:de:ad:e2:2b:16:74:06:3a:2d:16:64:ea:fd:
20:24:e5:f9:fe:c0:a4:c2:46:39:97:00:cf:2d:f1:d5:23:1a:
70:69:8c:f1:1c:b2:2a:4b:ba:5a:e4:41:c9:0e:43:b4:2d:5a:
49:0d:bc:b8:5c:08:85:2c:06:53:e1:10:61:04:8f:5d:c3:1c:
bb:7d:57:98:77:b0:d0:60:c2:79:47:a0:17:a3:9f:cc:37:2b:
b7:47:b7:1c:c9:5e:1b:78:9d:94:36:76:55:d6:f6:ca:ad:46:
0a:88:35:40:71:da:a1:51:24:90:9a:a6:3a:42:f5:c6:bf:93:
d5:c4:d3:c3:0f:f0:d2:b6:2c:80:c7:21:35:79:47:7a:71:91:
b8:46:e7:dc:12:94:97:92:19:0f:4d:19:35:44:4a:1e:42:e2:
ed:fa:e3:c7
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUDO5dBS587jHXnOaxb5Mny0zIJ2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDBaFw0yNDA0MDgwMzMxNDBaMDMxMTAvBgNV
BAMTKEFBQkJGRDY5MTc0MEE3RDMyNzU2RUIwMTQ5MzZBRjM3ODZCNkUwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbS3AnVB74xGrpsFY8kUyih41
FjfY/D+ONDQ3ypVLEdcJUFXjvFdlfqgGSyvz1/HEuRGNOKTuQLRTcyQgSE2taAPa
vCNrKcTWbkT4OJp4V9iLvBNfCEcwrjuao5naSHgnJVSjHeAq2SMnEnN5txRcHeG+
AqXo78VgtP00Ks3p8f8vXyR4LnfPrmLc2dD2/Rm94WqBc+arBqYcDS3pCzDqR2Ce
2P9ZOmw2/NfHjdzTVkCvvHRxdRUN/3VQhzgz7oXOH0kIjNEvrZ+dK06L8uzxglvV
HvqCScplKS6xuOeGMqJz4+qrBeJpAeLUvTVcX8TDf6i9iyDYxqPe93qhNKfRAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUqrv9aRdAp9MnVusBSTavN4a24IkwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDM0NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgOgwDQYJKoZIhvcNAQEL
BQADggEBAB75mN2RtOIEHsDp9Bu6M5QEIDYRPq4+smU3UF7FxwLvXkprN0TxGyiH
xnHg4HgYz/Y+IX2avNK5XebQZsmF+jW7oRTslqcViaTvCIVUt3vNJjyZAbewrhKo
fXNrov9u3q3iKxZ0BjotFmTq/SAk5fn+wKTCRjmXAM8t8dUjGnBpjPEcsipLulrk
QckOQ7QtWkkNvLhcCIUsBlPhEGEEj13DHLt9V5h3sNBgwnlHoBejn8w3K7dHtxzJ
Xht4nZQ2dlXW9sqtRgqINUBx2qFRJJCapjpC9ca/k9XE08MP8NK2LIDHITV5R3px
kbhG59wSlJeSGQ9NGTVESh5C4u3648c=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:52:54 2025 by rpki-client