Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS49519.roa
File: AS49519.roa (raw, json)
Hash identifier: QI0Mh12CwxB5om8n8rtFf/xqoGHHjtLgWj42+AbHXgU=
Subject key identifier: A6:52:E3:E1:45:05:93:2B:9D:6C:CF:32:8A:90:9D:1B:A0:E7:B7:D9
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 15FF8C797BE7BEEE040071E740579FC6169CB2EE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS49519.roa
Signing time: Mon 10 Apr 2023 03:31:33 +0000
ROA not before: Mon 10 Apr 2023 03:26:33 +0000
ROA not after: Mon 08 Apr 2024 03:31:33 +0000
asID: 49519
IP address blocks: 2a12:dd47:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ff:8c:79:7b:e7:be:ee:04:00:71:e7:40:57:9f:c6:16:9c:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:33 2023 GMT
Not After : Apr 8 03:31:33 2024 GMT
Subject: CN=A652E3E14505932B9D6CCF328A909D1BA0E7B7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:0e:21:f3:0c:6c:ec:e2:dc:2d:be:06:64:
2c:3e:73:32:fc:7a:98:d0:34:27:d8:90:33:b7:7f:
8c:62:ec:ed:16:94:43:e8:10:36:a9:a1:89:ac:fb:
78:b0:2c:94:d2:9e:8f:05:0c:3a:d0:16:e6:31:18:
a0:97:28:4b:1e:7e:c9:e5:10:45:01:f5:b6:11:83:
5d:6a:4c:18:c3:4f:bb:c7:8f:5e:0b:00:a7:8a:e5:
27:97:fe:2b:ba:1a:7c:ad:72:bb:1e:49:9f:13:cf:
fe:c7:e1:b6:7f:cd:4c:b3:d6:ee:07:98:e6:98:14:
aa:7d:1b:e5:f2:dd:3e:cd:95:c6:80:3c:2c:67:08:
46:62:56:3c:14:ed:05:03:96:11:dc:5a:77:43:ce:
2f:72:f0:8c:f0:8f:37:90:e2:13:e6:ec:2a:6e:95:
86:41:bb:84:2f:9c:40:09:74:05:11:61:5a:c4:ac:
35:2b:5b:63:c8:7a:35:e4:1f:f3:3c:d7:d7:b1:2a:
02:d6:51:f3:a3:30:9c:18:28:67:71:5f:d9:03:18:
6d:3c:21:fc:e6:51:a0:4e:6f:54:c8:f6:a3:ad:96:
69:60:83:33:8a:f9:b0:fe:94:30:a2:09:d8:8c:3d:
70:6b:d6:0d:80:1b:79:5f:1a:96:ea:7f:3b:7d:ad:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:E3:E1:45:05:93:2B:9D:6C:CF:32:8A:90:9D:1B:A0:E7:B7:D9
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS49519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:9000::/36
Signature Algorithm: sha256WithRSAEncryption
5c:8e:64:49:0d:83:9d:16:4d:4d:ee:34:18:a0:41:f5:20:94:
ff:1e:5e:ee:08:e6:55:ff:da:5b:dc:9f:cd:c0:cf:be:88:5f:
2c:e6:35:83:dd:bf:5a:70:fa:93:c0:d9:68:63:1a:9f:f2:9b:
59:41:be:2c:6d:c8:c5:a9:fd:fa:0b:d9:ac:32:6b:55:9a:31:
4c:86:ac:35:17:b9:6d:11:8f:da:40:a1:b5:ef:c6:f6:91:da:
a8:7b:c0:e9:dd:4c:67:2e:93:a9:d8:09:e7:bf:29:21:a9:56:
32:ee:46:51:f6:6c:17:09:33:9d:95:bd:47:b2:20:bb:50:8a:
a9:73:b1:19:37:38:7d:c2:e8:e4:fd:86:5d:cc:67:9a:d4:19:
23:e6:db:7f:14:9b:21:69:e8:5d:a8:99:1e:a2:3a:8f:22:79:
89:e6:81:c7:f8:5f:91:eb:b0:de:04:46:b7:4e:94:40:de:d5:
cd:15:8d:cf:7d:ba:28:0c:cb:1e:23:77:ae:19:e6:c8:56:c5:
3c:97:f6:06:00:9e:26:a4:dc:61:37:df:08:68:0d:da:bf:d5:
b1:8b:50:85:99:8e:8a:69:d9:17:88:51:fa:82:ce:73:5e:ac:
84:62:29:08:6e:7c:27:32:10:db:42:c7:ad:68:4d:88:22:69:
f7:a8:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:49 2023 by rpki-client on console-ams.rpki-client.org