Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS61257.roa
File: AS61257.roa (raw, json)
Hash identifier: JUPT3523nRKONv8QUhct18NZGTKAgxfPPNWTmSFI1+M=
Subject key identifier: CA:A8:DC:F5:B2:E3:76:72:E9:51:72:B2:2F:17:3F:46:9B:89:97:D9
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 3E675A64DE66C9264CCF1EAB759DAC1DD7EF39D4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS61257.roa
Signing time: Mon 10 Apr 2023 03:31:45 +0000
ROA not before: Mon 10 Apr 2023 03:26:45 +0000
ROA not after: Mon 08 Apr 2024 03:31:45 +0000
asID: 61257
IP address blocks: 2a12:dd47:8300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:67:5a:64:de:66:c9:26:4c:cf:1e:ab:75:9d:ac:1d:d7:ef:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:45 2023 GMT
Not After : Apr 8 03:31:45 2024 GMT
Subject: CN=CAA8DCF5B2E37672E95172B22F173F469B8997D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:4f:b6:65:ee:fa:7a:cd:27:27:a3:6a:da:
2a:e8:d5:4f:a1:ed:00:6d:19:ac:05:66:6d:2a:98:
08:db:30:03:7d:a8:2c:28:3e:c2:92:91:9e:54:c8:
55:3b:38:96:d6:d4:2e:87:74:11:5a:67:6c:c6:84:
1e:53:c4:ba:b6:8f:89:60:e8:22:9b:4b:91:3e:55:
16:77:62:40:61:7e:fb:4a:1d:f4:8c:65:f7:48:14:
8f:c3:5b:89:34:15:3e:7e:b2:f6:fd:00:68:4c:2f:
c2:ad:e5:1b:12:23:4d:33:84:dd:45:71:88:78:65:
cb:55:77:ef:8d:fe:67:ef:96:37:bd:e8:c2:92:81:
eb:9c:45:d7:5e:f6:40:ef:1f:40:2c:c9:a6:c4:96:
56:49:b3:d9:b7:f4:e1:50:14:aa:bf:7e:26:96:6d:
78:54:ee:75:6a:8c:e9:89:0b:11:e7:c9:87:44:37:
0b:de:97:04:89:b2:0c:1d:be:2a:b6:10:00:a1:07:
d4:a6:0c:14:3b:67:a1:09:b1:72:07:de:6e:14:ea:
7d:54:f7:ae:21:56:07:60:5c:93:26:8d:8e:6a:6f:
3f:8d:39:7c:ee:09:52:eb:2b:d3:61:cb:b2:19:94:
57:26:6f:49:25:89:87:05:4b:70:7b:7e:51:92:43:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:DC:F5:B2:E3:76:72:E9:51:72:B2:2F:17:3F:46:9B:89:97:D9
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS61257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8300::/44
Signature Algorithm: sha256WithRSAEncryption
2b:52:86:79:5d:58:60:9d:ed:50:1c:80:3e:20:2d:c3:ff:e0:
50:88:78:fe:79:f5:69:ec:4a:1d:28:04:66:42:34:b0:b9:fb:
cc:cb:38:a5:1d:b3:7d:6d:28:dd:64:22:08:b6:64:69:77:2f:
9a:36:c0:4f:f9:bc:89:ab:90:d1:d7:db:eb:ba:4f:bb:fb:81:
cc:0f:d0:be:81:db:ce:c0:84:c7:31:20:6d:b7:1e:86:b0:d1:
c3:b6:22:f6:e7:0b:b8:2f:8c:91:23:71:46:b8:54:93:96:d6:
4d:cc:a6:a3:0c:9f:fa:a1:bd:ba:bb:88:60:2f:76:85:42:29:
d4:13:eb:62:48:7a:43:ad:5d:2e:ff:82:b8:7e:57:78:08:12:
f1:cb:5b:12:dd:a3:cc:c4:b8:a3:79:24:e9:f8:c2:e7:86:b1:
9d:5a:29:08:6b:5d:4b:ee:19:a3:ea:3a:ed:7e:07:36:b8:53:
0f:e0:4b:00:6c:3a:18:1d:2d:8d:1e:1f:11:80:3b:f6:28:24:
b9:c2:61:c6:df:4c:d4:38:85:c7:3f:cb:a9:01:5a:97:67:f7:
77:28:5f:06:58:57:1f:b5:51:28:3a:49:5a:f0:49:b4:1a:1b:
20:6f:49:1d:3a:29:a3:36:6f:22:4f:9d:5f:d6:ac:90:19:9c:
ef:08:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:19 2025 by rpki-client