Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa
File: 323630323a666266363a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier: k9UyGIM/vKYzAXBhbEJc2rTQchoV7Au2/4F99Jlq/L8=
Subject key identifier: AC:03:E3:D5:2D:1F:63:F5:AA:6C:E8:DB:00:FF:13:C8:FC:FB:E7:87
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 4F2B5DC33D29E5122796BE2BD4D0D50AC1A8D5E8
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 03:31:30 +0000
ROA not before: Mon 10 Apr 2023 03:26:30 +0000
ROA not after: Mon 08 Apr 2024 03:31:30 +0000
asID: 50058
IP address blocks: 2602:fbf6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2b:5d:c3:3d:29:e5:12:27:96:be:2b:d4:d0:d5:0a:c1:a8:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:30 2023 GMT
Not After : Apr 8 03:31:30 2024 GMT
Subject: CN=AC03E3D52D1F63F5AA6CE8DB00FF13C8FCFBE787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:36:91:1a:f6:c5:9c:1c:b5:ef:cc:8a:c6:
d9:ef:ff:1f:82:05:d2:ab:ef:28:b4:b8:1e:ae:d3:
23:cb:85:2d:03:9f:bc:f4:a4:22:03:1c:a3:ca:1b:
76:f5:c6:d7:ec:87:94:d1:64:ec:d9:eb:e7:d1:c7:
c9:2d:5a:72:e1:53:a8:1e:62:7c:45:81:13:9d:7c:
95:e3:14:70:32:a7:6a:5f:94:78:b5:98:47:14:fa:
32:e5:aa:14:89:dc:b8:a1:67:72:03:ed:6a:a5:7d:
19:b1:58:5d:fb:eb:10:c6:c3:97:ce:e4:ae:7e:a7:
e5:0b:59:df:88:12:45:8b:bb:e8:2a:35:91:38:82:
bb:ba:d4:bd:79:9d:3c:1f:ab:7a:05:f2:dd:9d:c0:
38:25:9c:09:17:d2:d2:5b:ad:56:15:61:b5:fb:12:
26:a4:db:a5:06:07:ca:08:cc:d3:8d:8b:25:c7:15:
39:7a:5a:ed:b4:13:85:25:d9:89:99:88:1e:d9:90:
49:f4:c3:34:96:ce:dd:f5:00:85:94:ea:f7:07:5e:
49:26:e9:fa:5a:78:26:60:ae:d4:43:b7:29:19:38:
e9:2f:a1:40:b2:da:bb:05:4d:75:d9:a8:b7:15:bc:
fc:26:d5:ca:c0:3d:f6:e0:cc:b8:14:2c:a1:f2:b3:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:E3:D5:2D:1F:63:F5:AA:6C:E8:DB:00:FF:13:C8:FC:FB:E7:87
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fbf6::/32
Signature Algorithm: sha256WithRSAEncryption
47:62:5e:d4:4d:ee:e2:42:8f:cd:4f:8b:33:05:7d:a3:02:aa:
dc:c2:4d:60:3e:8c:e9:4d:e8:99:84:d1:62:85:cb:d7:67:5e:
e1:49:9d:1f:cd:f9:e3:40:66:01:92:e6:90:98:28:b4:46:0d:
5d:a5:fd:9c:4c:1e:e6:72:6c:d9:35:f5:80:1c:67:ac:21:08:
11:85:10:b2:b0:66:29:67:3c:78:06:0b:f4:d6:21:db:b9:ac:
64:d1:22:2f:74:ba:a2:0d:0f:5b:39:12:59:6c:1f:9a:ba:8d:
4a:91:ab:cf:ec:a9:79:49:7f:38:94:11:e1:95:66:33:7a:01:
64:51:e3:32:8b:4e:6f:97:af:11:eb:07:23:0f:20:16:95:18:
10:ea:63:5f:cd:9c:1d:39:01:24:73:35:d0:19:bf:a3:32:cd:
03:14:c8:0a:60:d0:c9:94:d6:4a:01:a7:ec:01:b2:ec:a5:1e:
3c:17:f9:f9:4a:0b:ac:97:d7:d3:12:f1:9c:af:26:81:50:2e:
2d:63:3b:9f:aa:2d:19:67:ea:5b:8a:7f:95:f4:49:ec:b3:c6:
bb:7a:f0:74:d7:5c:20:23:bd:10:7b:da:b6:56:20:73:db:5b:
fa:ee:f1:05:2d:c3:e0:82:77:9e:e5:d9:60:95:2e:7c:fd:d2:
7f:47:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:18 2025 by rpki-client