Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS56731.roa
File: AS56731.roa (raw, json)
Hash identifier: HeeN6boHaYsN+3+4Y7PMcfyh3qE8t/yHDNAteQnnB+0=
Subject key identifier: 62:85:46:F6:F2:52:02:4A:68:BB:75:96:DE:4D:90:02:98:64:64:F8
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 24E220B1B63F263E5503F43CE1879825A8A6859C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS56731.roa
Signing time: Mon 10 Apr 2023 03:31:42 +0000
ROA not before: Mon 10 Apr 2023 03:26:42 +0000
ROA not after: Mon 08 Apr 2024 03:31:42 +0000
asID: 56731
IP address blocks: 2a12:dd47:8e20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e2:20:b1:b6:3f:26:3e:55:03:f4:3c:e1:87:98:25:a8:a6:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:42 2023 GMT
Not After : Apr 8 03:31:42 2024 GMT
Subject: CN=628546F6F252024A68BB7596DE4D9002986464F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:c5:4d:3b:3a:f7:ce:00:a4:b2:df:b1:5d:
56:3c:02:39:ac:6a:cd:7a:c0:bd:f5:16:b6:1a:fc:
bc:c3:c5:d1:67:9c:86:c9:a4:aa:23:d7:7a:bd:86:
cf:73:1f:2d:6f:22:9f:2e:18:75:69:92:71:5d:61:
a0:0e:26:e2:67:7f:34:73:1d:c3:6e:50:15:39:66:
3f:77:04:81:e4:22:f5:8c:35:60:8f:33:70:8d:7e:
f0:86:e4:19:47:cd:fe:03:59:be:01:a6:47:5c:85:
07:ff:1b:c4:0c:70:95:ce:4d:c8:99:ce:75:42:b2:
9b:40:7a:fd:eb:12:10:3f:c6:0e:cd:cf:f1:ea:fa:
1f:07:d1:45:37:c1:12:88:76:88:8c:6c:80:8c:b4:
4c:63:16:0c:6b:e8:8f:6c:1a:a0:21:3c:41:c1:a3:
05:3d:16:69:36:e7:e6:7a:23:4e:2d:9d:2b:fa:57:
a5:22:a4:84:33:e4:dc:3d:2e:8f:6c:de:18:d4:06:
3b:18:63:6f:52:e8:0e:3c:55:40:93:32:f1:16:3e:
ac:44:9a:73:3e:71:11:41:3f:07:d8:b4:7c:72:58:
e8:b0:38:0d:d9:27:1b:fc:d2:3d:80:24:ab:2a:b6:
ca:b8:89:54:b8:14:f7:a7:0d:b7:cf:b6:e0:6a:86:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:46:F6:F2:52:02:4A:68:BB:75:96:DE:4D:90:02:98:64:64:F8
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS56731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8e20::/44
Signature Algorithm: sha256WithRSAEncryption
5f:37:2a:5f:97:da:5b:c0:ad:14:97:77:3e:af:1f:24:88:c5:
22:03:47:85:6b:af:f1:44:f4:95:49:b2:74:b8:27:5a:25:c6:
69:c8:31:65:3a:14:bb:4e:8b:1e:c2:2a:e2:a8:d7:11:fe:b8:
44:65:d0:fb:1b:51:1a:77:8f:16:c3:32:00:89:f6:a5:70:bd:
12:d0:0e:98:bb:23:2b:b6:03:cc:a5:ce:89:47:3f:c6:f1:b9:
9f:ba:fa:96:85:f6:48:4f:74:5c:4a:22:dc:49:a0:8c:b1:d8:
8c:26:f9:3d:09:b2:3c:c4:6b:97:e7:85:ce:c0:82:01:ba:9f:
97:73:f4:48:d4:75:76:02:7a:fa:df:68:37:d8:4a:b5:a2:29:
f3:42:69:26:88:85:9c:a8:23:f8:bb:19:f1:80:bf:38:5e:64:
31:08:e1:49:30:a3:29:01:d1:83:27:dd:56:f5:73:8d:0a:8a:
a0:26:79:00:16:42:3e:df:34:a0:9a:2d:65:55:4c:28:54:c7:
3e:e8:f2:dd:27:75:87:5e:63:3f:aa:05:d0:7d:8a:8f:54:9c:
b3:06:9e:72:9b:52:cf:f6:6e:69:c6:c9:3a:4f:86:85:a2:84:
dd:81:8b:5a:ff:f1:85:ba:c9:b9:f1:48:1b:18:f8:62:00:4e:
85:3f:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:03 2025 by rpki-client