Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS207320.roa
File: AS207320.roa (raw, json)
Hash identifier: 8Ty6T3u72yY3JK47afyOrxE+KUzsGm2oKVdY8RZNYGk=
Subject key identifier: 2B:03:9A:58:6A:16:BE:FD:39:6E:5F:57:97:4C:87:1D:5E:E3:56:53
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 7D9407D16A8EAB07CE55BD190C578258E7C3D1A6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS207320.roa
Signing time: Mon 10 Apr 2023 03:31:46 +0000
ROA not before: Mon 10 Apr 2023 03:26:46 +0000
ROA not after: Mon 08 Apr 2024 03:31:46 +0000
asID: 207320
IP address blocks: 2a12:dd47:82e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:94:07:d1:6a:8e:ab:07:ce:55:bd:19:0c:57:82:58:e7:c3:d1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:46 2023 GMT
Not After : Apr 8 03:31:46 2024 GMT
Subject: CN=2B039A586A16BEFD396E5F57974C871D5EE35653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:10:2e:85:01:e4:43:6c:e7:3b:48:d1:f2:
88:23:78:85:b0:85:ac:99:48:83:00:00:ae:d9:56:
85:11:60:cf:dc:2b:36:04:71:35:05:48:26:e4:79:
ad:d1:2b:2b:23:58:9b:a1:1c:87:b6:74:07:a1:fe:
78:c9:0e:0b:f3:10:58:51:4b:d9:2d:2e:c2:89:bd:
bd:4c:40:02:a5:19:ae:76:88:e4:22:d8:77:cf:64:
5b:4d:6b:87:f0:02:b6:4b:77:eb:e2:f4:48:55:8d:
3d:18:f8:7c:0f:fd:18:d0:a5:68:0d:07:af:c8:60:
2e:d8:00:fe:91:a8:27:14:95:97:8c:a4:92:ed:c0:
5b:95:ca:94:1c:58:ce:60:bb:27:56:30:b3:4c:71:
fe:1b:82:75:0a:24:ef:d9:5f:5c:1c:c0:2f:69:9f:
7a:7f:89:cc:e4:cd:5f:92:a5:3e:7d:84:cd:e5:26:
7e:05:d0:fa:50:27:f8:bb:69:de:04:fe:da:9f:89:
6d:0e:f9:4a:47:93:94:8b:c0:80:78:eb:2e:c1:a1:
fe:60:e5:7d:37:2f:8e:17:be:13:fc:f7:ec:53:c8:
14:76:99:7d:f3:7b:8c:16:e8:2c:f9:39:41:42:48:
05:8f:31:03:52:e3:fa:aa:79:25:35:ab:21:12:00:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:9A:58:6A:16:BE:FD:39:6E:5F:57:97:4C:87:1D:5E:E3:56:53
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:82e0::/44
Signature Algorithm: sha256WithRSAEncryption
35:34:55:b7:57:63:e9:12:eb:e6:ca:45:67:29:03:c3:2a:e0:
ed:08:53:71:61:12:7d:cb:51:b0:fe:d5:66:f6:c1:9f:a3:ec:
d4:ad:f6:59:19:7e:29:1f:96:05:4f:f0:ee:0d:3b:96:b1:50:
20:6c:ee:6f:a0:65:c2:72:33:e3:9c:48:8c:f0:e2:1b:8d:d2:
7f:88:e6:cf:30:22:5e:5b:22:c9:3c:da:83:17:68:29:49:b3:
cb:8d:2d:0b:7f:08:7f:cc:75:07:47:66:e7:c8:ef:bc:6c:88:
05:59:f5:a9:fc:2e:49:85:bb:b8:17:f5:c4:06:01:04:42:94:
66:5b:ac:e5:ee:09:e9:d5:3b:0b:b8:af:26:fd:56:15:88:59:
76:81:bd:f8:7d:50:0d:93:8f:0d:a6:83:9c:ca:e7:00:54:be:
da:e4:c0:68:03:d8:fd:04:9b:2a:bf:88:30:f2:f8:f9:d1:e9:
5d:5e:47:47:b0:74:4f:68:69:9a:61:d0:78:29:a4:43:cb:13:
61:c4:fc:33:aa:8a:b7:46:a3:5e:10:1a:31:b5:d9:d9:3c:e0:
0a:e2:25:76:94:de:5a:ba:3d:54:1b:11:a7:e0:2a:b0:45:c3:
ac:6b:2a:9f:49:fe:31:fa:3b:de:11:dd:06:ce:94:c8:a3:61:
d6:f2:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:55:55 2025 by rpki-client