Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
File: 326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa (raw, json)
Hash identifier: C1d8Cw9cNM5/94DgZB9BSpcl2FJQC3uhuSi/auSH+s4=
Subject key identifier: 2C:E5:DC:1E:28:BB:39:1C:1A:57:04:F8:37:1E:4A:CC:13:BB:B5:21
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 7679EA64C903F36B9B04D1BCB5335E95CB5A8DC4
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
Signing time: Mon 10 Apr 2023 03:31:21 +0000
ROA not before: Mon 10 Apr 2023 03:26:21 +0000
ROA not after: Mon 08 Apr 2024 03:31:21 +0000
asID: 61368
IP address blocks: 2a13:c007:8010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:79:ea:64:c9:03:f3:6b:9b:04:d1:bc:b5:33:5e:95:cb:5a:8d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Apr 10 03:26:21 2023 GMT
Not After : Apr 8 03:31:21 2024 GMT
Subject: CN=2CE5DC1E28BB391C1A5704F8371E4ACC13BBB521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:e9:ce:1e:42:c7:47:75:a4:14:02:24:72:
c8:92:5c:01:cd:b0:02:f3:c4:c1:f9:33:d0:47:b9:
67:15:57:2b:c9:54:de:11:90:d5:8c:85:da:dc:5a:
d2:e1:34:18:91:98:c6:0e:8d:15:ad:1d:4e:1b:32:
00:38:d9:72:30:a2:68:0c:ab:e2:b5:42:8a:b9:d7:
0a:18:16:90:f5:9f:a1:64:04:01:9d:63:d3:e8:ba:
3b:8e:07:3b:b5:4a:28:58:5f:c7:ca:8f:ff:6b:af:
93:9f:10:7d:3b:f7:96:46:45:08:3d:75:b3:e0:ad:
ed:87:52:e4:82:c9:95:52:0c:8f:a6:2b:b5:a0:c2:
5e:c4:8d:11:a5:6c:bd:50:c3:50:42:ce:f6:8a:2c:
09:85:42:bc:4b:30:e9:e2:f1:8d:37:dc:9e:40:0a:
8e:b7:d9:62:82:db:0b:ea:b1:52:32:b4:ad:14:a3:
1c:da:ac:a8:cc:99:8c:11:64:ac:99:40:b3:58:33:
82:cc:ed:36:6d:6b:44:14:d7:34:f6:82:30:e4:1b:
b2:4f:33:e0:2a:d1:63:ff:cc:8d:92:fb:73:38:27:
98:68:94:3a:90:dd:35:06:b9:97:f4:5e:41:08:82:
74:7a:13:32:99:72:7e:1c:16:a3:5c:ec:c7:65:62:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:DC:1E:28:BB:39:1C:1A:57:04:F8:37:1E:4A:CC:13:BB:B5:21
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8010::/48
Signature Algorithm: sha256WithRSAEncryption
ba:ce:94:7e:76:aa:d7:23:68:4c:52:e2:4a:d1:cd:54:80:7e:
31:07:84:b0:b7:83:da:18:3b:10:17:f0:94:66:ab:c3:fb:09:
cf:87:d4:27:e0:67:23:b7:e5:0f:bc:8b:59:99:aa:0b:1d:95:
bb:97:57:c5:d4:ba:9e:58:5d:e7:ac:f6:aa:d3:7e:17:6b:56:
66:bb:91:a7:05:ed:0d:93:d7:7c:24:80:a1:9a:90:cb:4b:ad:
26:1d:56:57:e8:e5:36:f0:5b:b7:4d:f5:f6:22:6c:b6:7b:03:
a2:a6:2a:59:9f:08:b6:a9:cf:bb:d9:d0:bb:4d:63:44:1d:2f:
4e:11:5f:3a:5b:ab:62:35:a1:9e:cf:95:f1:9b:1d:d3:d4:9b:
ac:14:92:8d:31:4b:03:48:f3:f9:d2:75:ef:df:4f:55:a5:e3:
c8:3b:9d:60:b1:f0:11:23:76:8c:2e:2d:9b:52:c2:b9:c9:bf:
ba:90:a2:53:70:88:a7:29:ca:cd:23:5b:69:4f:29:08:45:c3:
f6:df:60:12:90:d5:23:16:a8:e5:f9:57:ad:4b:93:8e:99:b2:
70:ec:cd:14:de:2b:df:7a:ae:67:a6:0c:41:d8:98:8b:a1:17:
ef:54:81:19:71:f9:b1:d8:a0:d1:f8:a0:53:a6:6b:1e:50:85:
6a:fd:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:14:08 2025 by rpki-client