Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
File: 326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa (raw, json)
Hash identifier: Af4uhebmVy2AjCfocGUvXP3IatqBYBHWddXqVKWTGhA=
Subject key identifier: 38:A7:91:86:A6:AF:72:01:7A:AE:E5:E6:FA:1B:35:61:B1:95:E9:53
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 65FA05BC7C6E3450CC3BED7EB271E36A47B6D6D8
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
Signing time: Mon 10 Apr 2023 03:31:24 +0000
ROA not before: Mon 10 Apr 2023 03:26:24 +0000
ROA not after: Mon 08 Apr 2024 03:31:24 +0000
asID: 199471
IP address blocks: 2a13:c007:8012::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fa:05:bc:7c:6e:34:50:cc:3b:ed:7e:b2:71:e3:6a:47:b6:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Apr 10 03:26:24 2023 GMT
Not After : Apr 8 03:31:24 2024 GMT
Subject: CN=38A79186A6AF72017AAEE5E6FA1B3561B195E953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:79:c6:ee:71:df:39:77:e7:61:e0:47:b3:6e:
43:a2:fe:21:07:38:a3:16:4f:99:2d:5a:76:5d:4c:
72:65:e5:0a:92:3e:ee:0f:3a:f9:14:92:d7:a2:f2:
9b:ec:71:bd:57:d1:61:11:4e:cc:bf:84:e3:92:1f:
35:b5:15:b7:2d:08:35:8b:01:f6:6d:47:1b:69:15:
51:42:46:e2:c2:2d:c3:b7:6a:b3:f3:6b:a9:82:5e:
ac:e1:d0:ba:2d:87:b7:76:22:38:17:f8:d4:78:73:
d4:c6:be:a6:bc:76:e5:83:18:b4:f7:70:4b:8e:94:
1c:90:2a:8a:fa:14:93:d6:1a:45:0f:2d:d9:a6:d5:
89:00:9e:ae:05:fc:03:bc:ae:6d:6a:4e:5f:80:17:
b4:8e:3a:e4:d9:3a:5f:d6:a6:ff:b0:72:d5:8b:47:
3f:af:55:43:74:ff:b0:0f:5e:aa:9d:15:8c:e3:e9:
ea:99:9b:8d:49:7a:2f:fe:ac:08:3b:52:d6:67:fb:
4e:c8:2e:92:9f:b8:83:59:2d:5f:35:2e:1a:ad:b5:
63:87:b6:51:cd:08:fd:28:a2:db:c8:06:dc:dd:cc:
9b:2f:32:93:39:1e:57:95:32:d4:d6:2b:75:04:c8:
cf:9c:e6:bc:5e:67:b8:de:90:25:2d:b1:16:e0:dc:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:91:86:A6:AF:72:01:7A:AE:E5:E6:FA:1B:35:61:B1:95:E9:53
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8012::/48
Signature Algorithm: sha256WithRSAEncryption
3a:63:e0:fe:aa:33:e0:6b:23:57:7b:9d:07:fa:80:75:a5:1a:
a2:87:38:a8:9d:cb:d4:b9:be:83:27:16:4a:9b:7b:79:52:3d:
c2:f3:d6:60:67:89:6b:16:d2:c0:23:f2:b3:26:97:21:0e:ca:
81:6c:f7:7e:dd:62:15:8a:6e:0d:5c:d1:f7:9e:d9:14:13:2d:
cc:54:a3:53:8c:69:b9:fc:ca:a4:b0:58:06:38:44:91:aa:9b:
18:13:80:34:31:0e:2b:10:6d:09:d5:43:78:8b:9c:5e:80:50:
30:7d:c0:6f:08:34:c3:37:93:57:98:63:f1:27:55:8d:04:f9:
af:b7:a0:8d:84:91:85:3a:3e:29:41:64:59:05:22:87:f0:05:
3d:d4:a9:4d:bd:42:09:60:ff:4f:cf:4f:8f:d4:83:57:4a:2c:
c3:d7:6b:20:bc:1b:46:f5:58:6c:96:60:7e:8c:ff:11:1c:3b:
b5:15:50:a9:67:e1:9e:31:e4:21:f0:6c:fc:d8:26:10:42:d1:
82:f2:1d:75:13:08:e4:ca:cf:da:72:1d:00:b6:e2:4f:0a:7a:
70:f9:f2:be:f7:84:e9:d0:e4:7a:81:0e:47:fb:da:fc:d8:90:
58:99:ba:5c:66:b4:90:33:6e:a6:73:cd:62:40:a3:12:96:d1:
f7:b7:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:17 2025 by rpki-client