Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
File: 326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa (raw, json)
Hash identifier: AUaf47cIJyQHz2WyFYkRZZVwrOlohwtGLQLlGF6X8sE=
Subject key identifier: CB:58:DC:57:00:57:D6:6F:B7:F9:CF:A0:4A:E6:1A:84:09:F2:DF:0E
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 30E3E804928AD57C4CAFFBDC7901292F52E5AB67
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
Signing time: Mon 10 Apr 2023 03:31:21 +0000
ROA not before: Mon 10 Apr 2023 03:26:21 +0000
ROA not after: Mon 08 Apr 2024 03:31:21 +0000
asID: 59486
IP address blocks: 2a13:c000:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e3:e8:04:92:8a:d5:7c:4c:af:fb:dc:79:01:29:2f:52:e5:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Apr 10 03:26:21 2023 GMT
Not After : Apr 8 03:31:21 2024 GMT
Subject: CN=CB58DC570057D66FB7F9CFA04AE61A8409F2DF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:d8:29:03:11:5f:c8:54:39:5c:ad:43:cd:
c6:89:14:e6:f5:d0:7f:6f:56:ff:0b:d1:46:5b:30:
22:9e:4e:a6:b4:ca:07:7b:07:1e:a8:91:e3:3b:5e:
e2:45:fa:51:52:04:8f:6a:b1:b5:6d:11:48:bc:48:
8f:e6:1d:08:97:28:2d:f1:f4:a7:a9:ab:58:7d:4f:
f2:9d:47:4e:75:3e:4a:2b:68:2d:2c:46:06:0d:7a:
51:77:11:fe:d0:03:88:3b:1e:d6:5a:e9:cc:b4:e1:
ba:d3:16:67:06:ce:a3:da:46:09:36:57:7f:b8:3f:
5b:6b:c1:db:90:9a:48:a5:23:55:69:85:7d:7b:05:
63:a8:95:2e:0e:01:70:31:d6:bf:9f:9d:c5:5b:7f:
51:d2:7b:cc:c5:d5:cc:b8:55:d5:8f:c2:62:fd:6f:
80:21:f5:9e:b0:cd:11:84:b1:36:74:28:8a:30:6c:
86:a1:79:98:aa:78:cb:d9:b8:5f:37:fd:79:f9:1b:
f8:43:1a:38:7f:7b:ab:cd:a8:2c:a7:e7:6c:38:59:
4a:ff:7a:22:2f:53:5c:bd:49:09:69:89:18:92:03:
1c:4b:59:57:d3:ec:df:c5:ba:65:7e:bf:85:58:75:
60:c1:1a:d0:68:1d:06:ad:57:cb:db:38:ea:1f:bd:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:DC:57:00:57:D6:6F:B7:F9:CF:A0:4A:E6:1A:84:09:F2:DF:0E
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c000:2000::/36
Signature Algorithm: sha256WithRSAEncryption
69:92:91:0c:b8:20:f7:38:17:68:f7:29:ef:d7:fe:83:21:50:
27:de:f8:fe:19:d0:1c:f5:9d:22:d1:cc:a7:67:72:e9:49:8d:
4c:a3:93:25:43:24:b1:75:94:ed:11:ad:a5:ef:4c:26:00:9a:
54:81:15:31:15:e7:f6:b8:bc:91:35:cb:68:fc:25:ba:35:4e:
d4:9a:99:61:eb:ac:3a:30:02:45:8c:1c:e0:6a:ab:c6:57:6a:
a2:da:11:b1:5c:73:82:ef:b8:e1:a5:09:ad:96:e7:99:9b:c6:
44:73:17:a7:4d:51:5d:cf:02:ce:15:ac:de:f3:a8:dd:9a:2a:
f3:68:63:45:e8:b3:bd:82:40:f4:e8:84:8d:3f:79:1a:22:d2:
51:63:48:02:a7:52:69:1a:90:fa:6d:da:74:93:96:51:ac:b3:
5f:83:43:d3:a8:32:38:a4:07:6e:2f:68:8b:d8:49:38:05:72:
e3:09:08:18:24:6a:59:ce:45:ec:f3:5e:6e:eb:30:6e:5a:2c:
f1:1d:66:4c:5d:3c:51:3e:70:69:95:4e:f5:fc:c3:7f:0d:32:
fd:3d:da:63:43:0f:1b:84:e4:e1:3f:de:db:ab:a9:49:df:20:
cd:10:c6:e3:05:88:cd:55:4c:34:28:c9:59:3a:87:fb:41:98:
99:df:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:25 2025 by rpki-client