Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS213086.roa
File: AS213086.roa (raw, json)
Hash identifier: 5BWJcdk71PLbe0LX7OG8nBM+NDdiZ3gbPqI969ICpsk=
Subject key identifier: C3:0F:84:BA:DE:C5:65:DC:A4:78:92:66:80:BB:AB:71:86:C3:08:63
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 646B16D95F384622ACD108C90DB20CE1AF015511
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS213086.roa
Signing time: Mon 10 Apr 2023 03:34:05 +0000
ROA not before: Mon 10 Apr 2023 03:29:05 +0000
ROA not after: Mon 08 Apr 2024 03:34:05 +0000
asID: 213086
IP address blocks: 2a12:dd47:d800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6b:16:d9:5f:38:46:22:ac:d1:08:c9:0d:b2:0c:e1:af:01:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:29:05 2023 GMT
Not After : Apr 8 03:34:05 2024 GMT
Subject: CN=C30F84BADEC565DCA478926680BBAB7186C30863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:77:97:03:23:3b:99:05:9a:f5:b1:87:51:
f8:0e:d8:82:ae:98:95:b1:3b:d7:75:4a:10:8e:35:
8a:a0:0f:7b:43:36:78:d0:0c:4e:c0:f1:90:2a:f8:
ce:1a:00:9e:47:de:d3:f4:a2:f0:b5:6a:0a:c0:52:
aa:95:07:90:e7:7e:e4:7f:af:db:d1:17:ac:4b:80:
a8:16:4a:e7:3e:b8:8d:60:7e:57:03:9c:7f:c8:d5:
55:2a:6b:ed:74:88:e3:df:56:79:15:1c:e3:cd:46:
02:a5:a2:f7:00:01:ab:83:ad:66:5e:7a:ee:09:a5:
91:fe:3a:5a:ad:d8:e1:19:47:67:49:4c:41:0e:90:
9d:2b:c4:5b:05:79:dd:e3:37:e6:c5:25:44:3d:57:
30:01:f4:e7:cb:c0:03:0d:e0:66:6a:10:3e:be:ea:
a3:df:1b:ef:83:00:79:32:14:d3:0b:90:83:4e:4a:
d6:b3:f2:62:08:83:bc:1d:35:d8:8a:49:da:9e:d7:
ee:7a:52:cd:d7:35:89:f3:4e:7e:8f:93:0a:28:69:
33:6c:15:13:01:06:76:df:5d:87:69:e6:0f:4c:ea:
88:55:62:81:c2:9d:ac:95:60:e6:df:c4:5b:12:b0:
95:e9:88:30:04:30:91:2b:81:2f:99:2b:0e:9b:8a:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:84:BA:DE:C5:65:DC:A4:78:92:66:80:BB:AB:71:86:C3:08:63
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:d800::/40
Signature Algorithm: sha256WithRSAEncryption
2a:31:38:7c:59:fd:ef:8d:ec:bb:7a:c3:c1:18:22:2b:97:95:
7b:cc:0f:a5:0f:e3:6b:f3:99:08:b0:26:ca:63:3f:d7:2b:58:
7e:da:12:5f:d4:48:cc:f5:bc:4c:15:5c:31:d6:1f:0e:4d:5d:
d3:0e:4a:db:aa:31:71:80:80:af:54:a1:05:6f:3c:dd:aa:d3:
a6:66:e4:9d:c5:f0:8f:87:3b:34:2b:4e:a6:65:cb:79:73:50:
51:cb:cc:06:38:5d:2a:ff:18:12:48:a0:c1:5b:9d:57:ca:47:
9c:81:a4:c5:ed:27:3e:1f:49:55:e7:67:54:cb:13:36:e7:3b:
72:ae:8a:da:2b:19:5f:5c:2c:fd:a2:c2:df:76:41:30:18:68:
6a:b8:d8:d0:50:ad:87:5e:89:95:49:e6:48:69:b0:50:eb:86:
7c:7c:73:c7:b3:9f:c8:69:1a:7f:62:7d:cb:5f:73:dc:3c:2b:
6d:28:e7:e2:3a:9a:c3:bf:38:b5:45:8d:04:9e:ef:bd:1e:15:
4a:71:6e:53:22:ed:0a:7a:ac:c4:dc:bb:6d:47:0a:18:30:3a:
23:89:1c:d2:c8:06:d0:d0:a2:36:3c:d9:3d:8c:1f:34:bc:2f:
73:03:1c:81:8e:3e:82:a3:44:f6:eb:0b:c6:ac:36:83:56:98:
fd:8d:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:57:51 2025 by rpki-client