Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: KV4Y7SJzSGckYbMLdGaeG9Me2UA05bVFA8PJ9QXHtdk=
Subject key identifier: F6:57:77:7E:60:F0:0B:65:42:C4:28:BA:00:44:5D:84:53:2D:8F:2F
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 66FCC1D96A1E4EF2D94033BCD80C62B8CAC0679E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS204844.roa
Signing time: Mon 10 Apr 2023 03:31:46 +0000
ROA not before: Mon 10 Apr 2023 03:26:46 +0000
ROA not after: Mon 08 Apr 2024 03:31:46 +0000
asID: 204844
IP address blocks: 2a12:dd47:8003::/48 maxlen: 48
2a12:dd47:8044::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fc:c1:d9:6a:1e:4e:f2:d9:40:33:bc:d8:0c:62:b8:ca:c0:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:46 2023 GMT
Not After : Apr 8 03:31:46 2024 GMT
Subject: CN=F657777E60F00B6542C428BA00445D84532D8F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:9b:b8:ef:71:05:f9:50:31:a1:f4:75:c2:
3d:01:0b:97:91:d0:8f:8a:59:b9:2d:5f:b7:d7:c6:
07:be:44:7b:b8:c8:83:34:af:41:70:4b:23:6d:71:
dd:13:8a:bb:58:49:85:f0:0a:41:38:fa:d2:f4:63:
89:82:5e:f0:da:83:bc:95:2f:ae:20:36:a3:a6:47:
31:fd:79:bc:c2:1d:17:0c:0e:d0:2a:d5:0a:b7:c3:
11:80:9f:ef:f4:ab:b7:64:c8:37:5c:e4:7e:fa:6b:
fa:88:60:50:e8:51:92:81:2f:2e:d8:1c:52:d6:3e:
be:f7:4b:6d:0c:94:d6:f7:10:19:78:4c:e3:85:27:
89:65:1d:47:2d:3b:0a:f6:c0:3e:07:3f:ea:37:75:
ca:d8:45:ac:19:2a:48:82:c4:2f:89:71:f7:b9:55:
ab:10:eb:e8:39:f1:89:88:fa:80:13:de:12:24:ab:
8b:c4:d5:5c:84:a8:6a:62:d3:55:4d:0d:78:a9:c5:
8f:bd:13:00:39:e6:d3:16:58:f7:64:1c:8b:3c:94:
6c:0b:8f:4f:f2:c8:9d:78:ee:45:ae:76:48:0f:77:
e6:59:f8:16:36:9a:8b:9a:fa:44:e3:1a:7c:66:4d:
81:c8:45:f3:a4:ea:da:d2:e4:d7:b4:19:6d:d3:92:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:77:7E:60:F0:0B:65:42:C4:28:BA:00:44:5D:84:53:2D:8F:2F
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8003::/48
2a12:dd47:8044::/48
Signature Algorithm: sha256WithRSAEncryption
57:81:52:1d:10:c3:38:cb:a9:84:68:40:96:b9:26:31:b2:08:
21:58:e2:b0:88:75:d9:35:44:12:c0:a0:01:9a:e7:d3:9d:2e:
a8:7d:75:19:17:49:e9:55:33:26:60:7a:d0:c2:95:ab:85:33:
1b:b7:b2:84:3e:76:61:70:c1:66:b1:af:5e:0f:8a:1e:fa:68:
b4:1a:c2:12:9a:24:22:e3:65:c5:f5:74:5e:80:19:22:53:b0:
87:99:a0:45:17:55:1f:64:ae:ee:d5:42:7d:30:42:15:eb:23:
7a:7f:6f:90:25:4e:a9:02:97:0a:1c:0f:93:7d:3c:f7:f0:85:
22:3a:12:37:ce:e7:a3:6a:18:c2:b3:11:a3:1e:69:cf:85:b4:
c2:56:41:af:6b:58:b3:fe:7d:b8:3a:04:f0:05:4d:49:f3:eb:
d2:fe:06:4d:58:33:3f:cc:67:1d:ee:6a:09:6d:44:0d:60:8b:
30:7b:95:7b:4e:d4:28:98:8d:2d:90:4c:95:19:37:18:63:db:
94:4b:fc:e9:02:40:8c:37:c7:bf:0d:54:09:cd:7a:a6:31:a9:
3f:bf:e2:99:2a:47:08:66:f9:94:0f:84:d6:1f:0e:c0:91:30:
b1:e1:0d:3a:43:9b:b1:e9:ab:43:7a:02:c7:95:b6:90:39:93:
1b:b4:2b:a3
-----BEGIN CERTIFICATE-----
MIIEnDCCA4SgAwIBAgIUZvzB2WoeTvLZQDO82AxiuMrAZ54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDZaFw0yNDA0MDgwMzMxNDZaMDMxMTAvBgNV
BAMTKEY2NTc3NzdFNjBGMDBCNjU0MkM0MjhCQTAwNDQ1RDg0NTMyRDhGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJpu473EF+VAxofR1wj0BC5eR
0I+KWbktX7fXxge+RHu4yIM0r0FwSyNtcd0TirtYSYXwCkE4+tL0Y4mCXvDag7yV
L64gNqOmRzH9ebzCHRcMDtAq1Qq3wxGAn+/0q7dkyDdc5H76a/qIYFDoUZKBLy7Y
HFLWPr73S20MlNb3EBl4TOOFJ4llHUctOwr2wD4HP+o3dcrYRawZKkiCxC+Jcfe5
VasQ6+g58YmI+oAT3hIkq4vE1VyEqGpi01VNDXipxY+9EwA55tMWWPdkHIs8lGwL
j0/yyJ147kWudkgPd+ZZ+BY2moua+kTjGnxmTYHIRfOk6trS5Ne0GW3TkqYTAgMB
AAGjggGmMIIBojAdBgNVHQ4EFgQU9ld3fmDwC2VCxCi6AERdhFMtjy8wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDQ4NDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqEt1HgAMDBwAqEt1HgEQwDQYJ
KoZIhvcNAQELBQADggEBAFeBUh0QwzjLqYRoQJa5JjGyCCFY4rCIddk1RBLAoAGa
59OdLqh9dRkXSelVMyZgetDClauFMxu3soQ+dmFwwWaxr14Pih76aLQawhKaJCLj
ZcX1dF6AGSJTsIeZoEUXVR9kru7VQn0wQhXrI3p/b5AlTqkClwocD5N9PPfwhSI6
EjfO56NqGMKzEaMeac+FtMJWQa9rWLP+fbg6BPAFTUnz69L+Bk1YMz/MZx3uaglt
RA1gizB7lXtO1CiYjS2QTJUZNxhj25RL/OkCQIw3x78NVAnNeqYxqT+/4pkqRwhm
+ZQPhNYfDsCRMLHhDTpDm7Hpq0N6AseVtpA5kxu0K6M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:55:58 2025 by rpki-client