Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS213045.roa
File: AS213045.roa (raw, json)
Hash identifier: XBjJB8PQrmOx+hPBj2CQiMbCgx9wBXeFQe8YCRHsyu8=
Subject key identifier: 7D:DE:BB:4A:9F:4B:86:96:73:35:FB:B2:CF:E8:E5:88:60:5A:79:20
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 18F7065E68249296248D546342AC179982C16F5A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS213045.roa
Signing time: Mon 10 Apr 2023 03:31:35 +0000
ROA not before: Mon 10 Apr 2023 03:26:35 +0000
ROA not after: Mon 08 Apr 2024 03:31:35 +0000
asID: 213045
IP address blocks: 2a12:dd47:8075::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:06:5e:68:24:92:96:24:8d:54:63:42:ac:17:99:82:c1:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:35 2023 GMT
Not After : Apr 8 03:31:35 2024 GMT
Subject: CN=7DDEBB4A9F4B86967335FBB2CFE8E588605A7920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:5c:16:be:60:0d:ac:3b:95:fd:10:98:dc:
61:a0:d0:90:95:54:de:ff:5f:f3:5c:9a:d3:fb:5b:
05:13:dd:35:f4:3d:71:57:08:0e:82:e2:2b:96:c4:
98:47:15:d4:c7:75:4e:6a:71:b4:f0:85:73:d5:f5:
7a:29:8f:d6:5a:ee:73:64:10:5d:40:0b:21:0a:cb:
7d:71:14:f7:d8:37:c1:46:50:7b:e4:67:1a:7d:c7:
38:02:07:c3:42:30:e3:05:d2:0c:13:b5:f1:8c:77:
8c:1c:8b:fb:d7:72:c7:f5:b3:c7:d7:06:3c:1d:7e:
ec:2f:71:b9:07:00:f0:32:47:5a:77:55:91:bb:97:
c5:5d:46:e4:d5:54:6d:f5:6c:bd:6f:66:b9:66:ce:
f9:39:c4:03:4a:37:66:2b:12:ba:e5:22:a1:ea:43:
bc:3e:bb:40:de:d6:1b:4b:83:34:b5:79:e4:d8:f3:
98:f5:12:22:f3:80:fe:ee:9d:80:4b:41:19:fa:d4:
55:f9:8a:a6:cd:9b:b9:d7:61:10:d2:42:1c:28:4e:
bf:a4:15:02:dc:71:d3:7d:8c:1a:5d:6f:1d:7d:8e:
0d:8b:21:ae:03:40:d8:e7:61:f0:48:45:3d:fc:df:
f3:28:79:74:8a:41:55:86:38:8d:a6:6d:cf:ea:7e:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:BB:4A:9F:4B:86:96:73:35:FB:B2:CF:E8:E5:88:60:5A:79:20
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8075::/48
Signature Algorithm: sha256WithRSAEncryption
b3:31:d9:b6:97:e1:4f:34:e4:65:ac:73:c9:a9:ac:db:c6:b2:
32:1b:e7:32:ca:5a:7a:54:bd:ba:50:57:ef:44:31:67:c8:5a:
d5:4e:ac:39:24:b7:18:02:5d:57:df:af:fa:ab:0b:18:54:db:
e3:aa:ad:20:be:7c:b5:0b:08:cd:64:a6:90:4c:15:27:c8:9a:
c5:aa:eb:91:5f:15:ed:24:28:b4:f6:a7:df:c2:d8:62:fc:6f:
bc:e8:7f:ed:8d:bf:e8:9f:a6:cb:6a:dd:0e:89:16:79:d5:68:
4c:a2:13:6e:5b:32:10:08:e5:11:87:7f:09:ad:28:db:2b:9c:
0f:b4:c4:b5:a0:91:00:09:36:25:e1:66:91:68:51:9c:3e:22:
d8:93:4a:38:2b:be:ad:32:56:8b:52:16:d4:fe:7a:88:06:46:
cc:b3:4f:e5:26:d6:c3:fe:22:66:f6:f4:dc:c8:eb:70:fc:83:
d0:71:c9:43:34:79:ba:a1:5a:76:94:89:3b:ea:27:f2:69:b9:
a7:c7:09:73:a5:4f:76:c0:f7:0f:bf:79:7d:4c:7b:a9:95:28:
e2:4d:2b:ca:d0:a4:89:98:5a:63:0c:16:e7:1c:67:72:1c:ab:
e6:d4:31:62:c4:c8:4e:45:ed:27:a5:9b:9d:57:7c:0b:21:6a:
6f:ef:42:38
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUGPcGXmgkkpYkjVRjQqwXmYLBb1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzVaFw0yNDA0MDgwMzMxMzVaMDMxMTAvBgNV
BAMTKDdEREVCQjRBOUY0Qjg2OTY3MzM1RkJCMkNGRThFNTg4NjA1QTc5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq0FwWvmANrDuV/RCY3GGg0JCV
VN7/X/NcmtP7WwUT3TX0PXFXCA6C4iuWxJhHFdTHdU5qcbTwhXPV9Xopj9Za7nNk
EF1ACyEKy31xFPfYN8FGUHvkZxp9xzgCB8NCMOMF0gwTtfGMd4wci/vXcsf1s8fX
BjwdfuwvcbkHAPAyR1p3VZG7l8VdRuTVVG31bL1vZrlmzvk5xANKN2YrErrlIqHq
Q7w+u0De1htLgzS1eeTY85j1EiLzgP7unYBLQRn61FX5iqbNm7nXYRDSQhwoTr+k
FQLccdN9jBpdbx19jg2LIa4DQNjnYfBIRT383/MoeXSKQVWGOI2mbc/qfq5NAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUfd67Sp9LhpZzNfuyz+jliGBaeSAwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTMwNDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgHUwDQYJKoZIhvcNAQEL
BQADggEBALMx2baX4U805GWsc8mprNvGsjIb5zLKWnpUvbpQV+9EMWfIWtVOrDkk
txgCXVffr/qrCxhU2+OqrSC+fLULCM1kppBMFSfImsWq65FfFe0kKLT2p9/C2GL8
b7zof+2Nv+ifpstq3Q6JFnnVaEyiE25bMhAI5RGHfwmtKNsrnA+0xLWgkQAJNiXh
ZpFoUZw+ItiTSjgrvq0yVotSFtT+eogGRsyzT+Um1sP+Imb29NzI63D8g9BxyUM0
ebqhWnaUiTvqJ/JpuafHCXOlT3bA9w+/eX1Me6mVKOJNK8rQpImYWmMMFuccZ3Ic
q+bUMWLEyE5F7Selm51XfAsham/vQjg=
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org