Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e203530303538.roa
File: 323630323a666139343a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier: kZpMud9KknMOtHPQX0kxMV3rvgOUOB3PxSOvOnyRymk=
Subject key identifier: 37:48:B4:D6:12:7C:78:44:3D:72:C2:3E:04:B0:C0:63:E9:95:27:0D
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 43D1F9587029AC34C51A754A0F15D9E02405E3CB
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 03:31:27 +0000
ROA not before: Mon 10 Apr 2023 03:26:27 +0000
ROA not after: Mon 08 Apr 2024 03:31:27 +0000
asID: 50058
IP address blocks: 2602:fa94::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d1:f9:58:70:29:ac:34:c5:1a:75:4a:0f:15:d9:e0:24:05:e3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Apr 10 03:26:27 2023 GMT
Not After : Apr 8 03:31:27 2024 GMT
Subject: CN=3748B4D6127C78443D72C23E04B0C063E995270D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:08:0d:a0:2d:fc:35:83:aa:fb:f1:2c:ec:
be:e1:90:1f:ae:e2:ef:17:3f:81:f6:b8:e1:68:ee:
71:41:50:35:fd:46:4f:21:1b:61:2b:c2:6e:46:c4:
ac:e3:7f:ea:32:fa:49:c8:13:57:84:54:61:40:b0:
42:b6:68:4d:8a:59:b1:ce:36:e4:57:d2:57:f2:bb:
a9:11:32:69:36:10:16:47:de:d1:9c:06:68:d6:f4:
2d:08:a6:db:58:cd:a8:51:08:1c:0e:05:1b:95:63:
28:43:09:f3:0c:80:d4:3e:53:1f:2c:db:88:ab:d7:
5c:20:fd:cf:42:62:ad:98:b0:57:62:ad:14:df:2d:
6d:4e:8e:08:71:2b:c2:0c:77:79:82:45:d8:3d:9b:
48:7c:c1:67:6a:3a:71:c2:65:3d:dd:5d:2e:27:5d:
e6:e3:88:db:ed:d9:d9:56:92:f2:3b:3c:d1:a1:c0:
9a:c8:41:72:6d:ff:43:77:24:ea:87:98:1a:b4:23:
2e:fd:f4:ab:59:18:cf:df:0f:03:59:d1:a7:07:14:
43:b9:64:9e:52:1c:08:02:31:70:a7:4f:d8:67:94:
5b:6e:1d:dc:f1:56:b9:54:d3:18:e3:6b:0a:2a:71:
2a:e2:a7:f5:06:93:9a:91:52:0d:2b:ac:7d:8d:2a:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:B4:D6:12:7C:78:44:3D:72:C2:3E:04:B0:C0:63:E9:95:27:0D
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa94::/36
Signature Algorithm: sha256WithRSAEncryption
3b:42:90:0a:7c:fe:3a:4f:58:76:df:fe:84:80:98:fc:d7:8f:
10:2e:71:bf:44:d0:9f:56:14:9f:6a:c8:60:18:1f:74:f5:9b:
2b:f3:20:e1:f7:c9:e4:a2:12:80:1b:fd:2d:58:26:7f:11:5c:
49:1f:7d:46:3e:d0:4c:f9:18:a6:de:47:14:d9:03:fa:59:0a:
d3:15:5f:dd:aa:21:ea:1b:56:35:b6:43:ee:41:9e:b7:95:9c:
d3:07:8e:22:b6:d7:17:34:83:09:4d:ad:f0:6f:3b:6a:9f:0a:
a7:20:ad:a4:bd:2b:af:ef:4c:e0:3e:1c:76:bc:52:93:81:c1:
04:0e:29:e5:00:6b:87:93:a4:d3:62:fa:c3:1f:aa:e1:7e:1a:
ef:75:df:b5:c5:d6:35:57:3e:31:3c:b8:e9:56:2e:67:6b:f2:
b5:fc:4f:80:9f:d0:9e:99:68:e1:25:a9:4f:91:15:4c:6a:9e:
d4:58:da:08:35:00:dc:ed:ff:b4:16:9b:23:91:9b:33:5a:d0:
97:d8:2e:d3:0f:14:d5:2f:7c:2d:a5:94:df:c5:09:39:6c:39:
0e:86:33:48:a3:4f:bb:81:bf:73:7a:28:a4:4b:2a:d3:e7:f4:
58:72:0b:13:49:12:2d:b6:05:95:ee:d3:f9:f2:ff:2f:50:90:
c4:a7:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:31:57 2025 by rpki-client