Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
File: 323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa (raw, json)
Hash identifier: 6ONBkevyT1V/yt1U4xPL0xoTwGushOkBHQN9EfoN0TY=
Subject key identifier: BF:2E:60:7E:49:1B:1A:D2:6C:76:A9:E2:33:F7:13:81:A4:85:82:CD
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 2994DECD662E32CF1CB2950C9E2958E7F1F72C2A
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
Signing time: Fri 07 Jul 2023 04:26:12 +0000
ROA not before: Fri 07 Jul 2023 04:21:12 +0000
ROA not after: Fri 05 Jul 2024 04:26:12 +0000
asID: 51818
IP address blocks: 2001:7f8:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:94:de:cd:66:2e:32:cf:1c:b2:95:0c:9e:29:58:e7:f1:f7:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Jul 7 04:21:12 2023 GMT
Not After : Jul 5 04:26:12 2024 GMT
Subject: CN=BF2E607E491B1AD26C76A9E233F71381A48582CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:c1:90:fe:12:61:14:ce:e1:37:f1:42:45:
57:10:74:01:98:6e:30:bd:75:f4:9b:c1:c1:12:7f:
85:9b:a1:00:56:3d:0c:ab:45:14:b7:fe:bd:a9:74:
c6:b7:94:5f:b9:50:90:00:73:3d:5c:a5:7f:b5:98:
d7:fd:b6:86:cd:32:ff:64:71:55:03:de:d4:3c:21:
69:eb:99:ab:fe:4e:d9:60:73:ce:2c:07:58:76:1e:
79:8e:14:e6:2a:1e:bc:0e:17:5a:f6:4b:d0:b8:fd:
8e:95:7d:4a:58:4b:07:8a:cc:e4:22:69:25:d3:c4:
88:65:e3:0a:52:d1:51:32:85:20:0f:7a:1b:a2:9e:
8f:eb:3f:5a:d0:c6:e6:0e:9c:bf:9b:9e:b5:0a:fd:
0b:d7:03:91:16:f4:c0:98:ae:f0:b9:fd:c2:5e:81:
12:6e:1b:92:37:00:8f:04:48:1d:cf:38:6c:2f:52:
fe:a4:81:07:88:46:48:f1:09:23:92:64:f7:d7:d2:
8e:ac:44:7a:56:9a:1b:c9:ae:44:4a:01:12:33:97:
97:27:80:39:f1:eb:ec:0c:f8:4b:bf:42:61:02:2b:
d9:57:ec:79:c4:8c:3a:b0:4d:f6:a2:70:c9:41:fd:
a3:04:6b:e3:6d:b0:7d:35:93:18:6e:1d:57:fc:62:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:60:7E:49:1B:1A:D2:6C:76:A9:E2:33:F7:13:81:A4:85:82:CD
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:2::/48
Signature Algorithm: sha256WithRSAEncryption
c9:da:c2:6b:59:ae:79:44:d8:6d:8a:c3:fe:22:d7:8f:de:c7:
59:7c:0b:1e:dc:26:a0:80:b6:e5:9e:d2:b1:e9:96:52:a1:14:
e4:5d:77:96:69:96:59:59:c8:1c:ef:7f:d2:19:62:cb:e9:84:
59:71:09:63:7d:4a:e8:be:86:d9:c2:35:4b:aa:31:e9:31:2e:
26:c6:e2:97:50:55:db:bb:06:64:b6:b6:8a:1a:71:c1:b0:f8:
29:b0:4b:fe:2e:8b:f9:41:cf:db:0a:e3:b3:12:72:03:b1:9f:
8d:ee:2c:cf:fe:63:d4:68:dc:88:b5:95:d0:82:22:45:43:de:
40:be:92:3c:61:70:e5:d9:db:3c:d1:43:ac:a9:8d:63:47:94:
5a:ee:7c:9b:a6:ea:27:ce:cf:5e:09:40:ac:c8:19:f7:3c:97:
29:b9:84:fc:9b:f2:8a:40:31:d0:01:51:47:36:38:be:22:3d:
d5:63:d6:69:12:11:1b:79:dc:7e:e9:38:49:fd:8b:d6:05:6c:
b7:44:99:0f:29:86:8c:ce:50:2b:c5:01:27:2f:26:42:97:36:
7f:a7:23:82:25:83:cb:e5:59:ce:3f:26:d2:fa:16:12:16:52:
1b:e3:d4:46:57:31:7f:0c:d1:1c:a6:69:78:2d:2d:45:4d:7c:
a1:00:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:39 2025 by rpki-client