Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030313a3a2f33322d3332203d3e20393435.roa
File: 326131333a633030313a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier: M7+XbV6w/qiMVeHmlxvxaxMfQzEYRRhAi4aJVnLLtw8=
Subject key identifier: 23:80:ED:4A:C1:7D:75:5F:CE:9E:FA:0E:02:10:BE:11:E8:57:80:77
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 70D34B7D21840852AD86256D303A1A6BA20687EA
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030313a3a2f33322d3332203d3e20393435.roa
Signing time: Mon 10 Apr 2023 03:31:25 +0000
ROA not before: Mon 10 Apr 2023 03:26:25 +0000
ROA not after: Mon 08 Apr 2024 03:31:25 +0000
asID: 945
IP address blocks: 2a13:c001::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d3:4b:7d:21:84:08:52:ad:86:25:6d:30:3a:1a:6b:a2:06:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Apr 10 03:26:25 2023 GMT
Not After : Apr 8 03:31:25 2024 GMT
Subject: CN=2380ED4AC17D755FCE9EFA0E0210BE11E8578077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:94:9e:2b:b6:3f:06:2d:2f:06:80:c4:73:
67:e4:d3:e9:16:a0:6f:b0:b0:68:3d:ad:d5:07:03:
5b:97:c8:2f:9a:46:79:9e:19:16:e0:57:76:1a:ae:
b4:a0:14:90:3e:4c:a5:3d:70:e0:a3:56:6e:39:6e:
06:db:66:09:51:7a:72:97:d6:e1:92:ee:ce:9a:1f:
b7:cb:95:88:25:15:7a:87:5c:11:6d:a7:fb:d1:b4:
58:db:00:6b:95:7e:38:fe:6d:c7:8a:be:dc:3b:d2:
25:41:12:93:a4:68:25:71:c8:9b:94:f1:51:87:73:
51:5d:cd:8d:7a:74:59:7b:91:d6:3c:83:0e:42:80:
5d:bf:a0:51:1f:22:7a:07:41:28:c1:f8:2d:81:2e:
1e:f8:35:74:a6:c2:bd:bc:08:09:71:23:88:8c:53:
26:20:59:c3:af:94:a2:df:b7:5f:c1:8c:c5:6f:c7:
6c:f4:7a:fd:d1:07:bd:6e:fa:39:ff:94:af:51:ec:
a7:ea:10:0a:82:bc:ca:f6:d5:74:00:86:c8:ab:d6:
0e:a8:ac:6c:c6:ee:d2:49:1f:14:bf:1a:e8:16:cb:
e8:47:95:8f:39:0a:52:d9:e5:8d:e0:91:00:b4:82:
cd:15:b8:50:3a:a4:db:67:4c:bb:c8:21:72:69:00:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:ED:4A:C1:7D:75:5F:CE:9E:FA:0E:02:10:BE:11:E8:57:80:77
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030313a3a2f33322d3332203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c001::/32
Signature Algorithm: sha256WithRSAEncryption
6a:d3:c8:66:51:a5:12:95:ef:8a:b4:15:96:ca:a4:1a:5b:cc:
ff:83:bc:78:ea:9c:51:83:ee:71:6b:e2:1e:c7:9f:1b:b4:c7:
c9:3f:57:13:20:5d:30:3b:8d:23:fd:f3:f7:9a:4c:e1:bc:98:
8a:08:f7:20:34:df:ec:3e:d8:22:06:eb:8e:37:76:62:af:8b:
0a:d8:c9:5f:d4:e2:fe:14:7b:1a:88:34:2b:4f:29:fa:59:52:
00:c1:eb:64:b7:f4:0e:c5:0f:65:26:b1:71:ee:ec:fd:f9:27:
1e:f7:d3:5e:bf:29:cc:4e:9e:e7:4a:f9:d6:08:cc:1e:bf:32:
1c:e5:c7:a0:f4:70:ba:65:ce:dd:e4:f7:9f:8f:1a:53:36:9d:
ba:2f:51:c4:6c:7b:74:e0:45:2d:42:87:7e:a7:2c:e5:28:88:
11:68:ab:d6:4c:9d:e1:96:87:7e:e9:a5:00:c2:71:b3:0c:e1:
08:08:be:98:a9:fb:53:78:31:e4:11:3a:55:2e:b5:e5:dd:f3:
7a:71:2e:d8:3c:d0:79:81:f0:65:22:06:3d:2e:75:74:79:dd:
f8:22:41:d5:6a:a1:be:14:d1:f5:48:2a:96:61:26:f0:dd:c3:
52:ca:9c:ef:1b:0e:08:47:d1:f3:95:74:b3:bf:4e:19:58:84:
95:fe:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:06 2025 by rpki-client