Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa
File: 326131333a633030343a3a2f33312d3331203d3e20393435.roa (raw, json)
Hash identifier: ZrfAmCOrXBZkftr7JtIxs1DCiH7zIa0oVecFua10HEo=
Subject key identifier: A2:74:7C:08:35:00:DE:A6:EF:C9:BC:E7:EF:90:47:11:B4:61:0D:BF
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 2E02E0B0DEF6CAFA2323E6F38AF70B7DC4A46441
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa
Signing time: Mon 10 Apr 2023 03:31:20 +0000
ROA not before: Mon 10 Apr 2023 03:26:20 +0000
ROA not after: Mon 08 Apr 2024 03:31:20 +0000
asID: 945
IP address blocks: 2a13:c004::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:02:e0:b0:de:f6:ca:fa:23:23:e6:f3:8a:f7:0b:7d:c4:a4:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Apr 10 03:26:20 2023 GMT
Not After : Apr 8 03:31:20 2024 GMT
Subject: CN=A2747C083500DEA6EFC9BCE7EF904711B4610DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:db:6f:8a:16:44:c1:43:ee:9d:78:60:c3:
d4:06:d8:09:b8:aa:2e:1a:c9:6f:24:af:2f:06:f8:
87:13:5f:16:23:ad:b1:33:a2:ab:e7:98:17:b4:07:
e9:aa:06:07:bb:e0:cb:2f:d0:4a:39:88:b5:14:84:
38:a5:db:01:90:b1:c7:ae:2e:97:5c:d7:fd:88:0a:
2a:b4:32:06:c6:da:26:2a:fd:79:90:48:47:ae:4e:
ce:e4:b5:23:15:e2:7f:75:8e:cc:1c:ae:72:a3:97:
03:45:98:43:e3:cd:a7:3a:d4:0e:23:40:c4:35:30:
44:7c:7f:8a:95:0e:93:48:db:5b:43:58:d3:e6:ba:
e2:6a:f2:44:d5:84:94:2c:72:5b:fa:fd:85:95:f8:
3d:c3:f6:ed:0b:c8:d2:54:55:55:23:4d:dc:7c:bd:
01:e4:0c:89:69:90:89:e9:b4:9e:2f:48:61:27:66:
25:d8:e7:3e:a7:3d:06:34:1a:e5:8a:b4:9a:ad:f3:
2f:de:ce:84:83:ab:0a:d5:d7:a5:e8:6c:b9:25:ab:
3a:7e:2f:f4:b5:52:9c:54:da:21:3d:0a:0a:da:d5:
64:2b:70:85:6d:45:3c:ee:be:0f:18:62:5f:46:fd:
ee:d5:4d:57:80:45:93:98:3e:45:a1:62:46:af:65:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:7C:08:35:00:DE:A6:EF:C9:BC:E7:EF:90:47:11:B4:61:0D:BF
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c004::/31
Signature Algorithm: sha256WithRSAEncryption
59:65:5e:bb:74:08:c5:5a:d5:9f:3b:05:9e:19:87:36:fc:ee:
ed:86:6f:3f:06:42:7b:68:9e:03:76:37:bd:6d:8e:f8:33:af:
fd:fc:6e:fb:44:4b:39:0c:df:3a:ad:f8:ec:1a:b0:ed:46:25:
91:19:ba:26:68:eb:d6:7b:2b:3c:f3:59:b6:e8:f9:5a:1c:89:
20:7e:04:ce:a2:e2:ce:fc:40:2f:5c:61:1b:f2:54:63:c0:1e:
d4:08:08:27:46:a0:8d:65:d6:4d:ca:fc:0f:e4:f9:75:25:7a:
3e:12:de:5f:d5:4d:14:4e:16:ea:25:84:c3:bc:06:5d:2f:b9:
5b:8f:c5:d0:51:8a:55:b4:ac:b3:9a:fb:65:47:07:b3:71:f6:
7f:b6:ae:4a:c7:0b:05:66:8b:f3:10:5e:36:66:89:dd:ee:5a:
89:7f:6e:ed:e3:f2:a7:92:c4:cc:dd:e7:35:cd:57:41:9b:8a:
b7:27:9c:f5:20:aa:f4:91:ff:f6:73:ba:a6:eb:8c:b3:69:b7:
17:07:3d:37:20:fe:28:84:99:8e:3f:db:4f:d3:9c:3f:74:02:
4e:aa:26:b0:a9:3b:88:4a:d4:78:28:7c:0c:13:14:ca:18:37:
fa:0e:76:50:47:06:1a:55:a9:6f:26:c9:03:58:35:1e:91:95:
61:a1:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:10 2025 by rpki-client