Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
File: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (raw, json)
Hash identifier: 5JQRwx05KroqF5LRUmHACPBSci1N7ua9zdV5lqtXOuk=
Subject key identifier: A7:89:62:A6:6D:9F:C9:60:F8:8B:E3:A8:03:4D:6E:EA:AB:22:F5:21
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 5D71247D3BD96A2DAFF5C63FD1058FBCCF3D31B9
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
Signing time: Wed 25 Oct 2023 02:28:29 +0000
ROA not before: Wed 25 Oct 2023 02:23:29 +0000
ROA not after: Wed 23 Oct 2024 02:28:29 +0000
asID: 151188
IP address blocks: 2a12:dd46:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:71:24:7d:3b:d9:6a:2d:af:f5:c6:3f:d1:05:8f:bc:cf:3d:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Oct 25 02:23:29 2023 GMT
Not After : Oct 23 02:28:29 2024 GMT
Subject: CN=A78962A66D9FC960F88BE3A8034D6EEAAB22F521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:0d:23:a6:92:74:70:4f:48:aa:6b:03:52:
5c:2a:7f:eb:e8:1f:83:80:02:cc:88:39:a4:7c:55:
7b:41:d5:16:f0:3d:61:06:ba:15:c5:a3:a4:6b:9f:
bc:d8:ea:73:05:b6:80:88:8c:cb:63:d5:fe:d7:fd:
e5:91:5b:62:c3:e3:f3:f9:de:bf:c1:d5:14:e9:31:
5d:e8:e6:a2:6d:04:90:58:16:28:5b:94:6d:3b:0b:
bf:32:ec:3c:97:be:e2:af:13:50:a4:f9:e8:bc:eb:
63:03:3a:cc:26:a5:dd:8b:b0:87:18:d5:66:11:b8:
50:f7:6d:a8:ff:3a:18:be:e0:0d:de:a4:43:a1:9c:
ea:c3:d5:41:19:a7:6e:30:1d:fb:e8:85:c2:71:4a:
c7:bb:c8:0e:8d:60:c8:f5:61:32:9d:bc:70:a4:30:
0f:e9:d1:ed:ce:81:32:ff:a7:3f:dd:30:ed:35:de:
a2:1a:d5:a6:1e:c8:6e:ef:1f:ec:35:3a:83:a9:32:
12:c7:69:6c:35:68:5d:10:ec:03:1d:bb:58:c9:de:
cd:0f:10:d7:bc:2c:56:70:33:43:0f:dc:c3:ca:59:
b0:4d:c6:d3:2c:87:2c:2a:55:29:2c:f8:c6:aa:38:
c2:a7:e4:f4:6a:76:66:ac:64:17:12:0b:53:0b:2e:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:62:A6:6D:9F:C9:60:F8:8B:E3:A8:03:4D:6E:EA:AB:22:F5:21
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
ab:d7:74:c3:6c:83:5f:30:ed:9f:43:b5:38:cb:a3:58:9b:51:
e8:d2:9b:89:dc:1b:4d:47:b1:58:2c:b2:f5:1d:d1:56:98:eb:
d7:2f:88:81:86:47:88:46:de:9b:87:08:16:bb:76:0a:39:91:
66:9b:f6:13:b9:98:ec:9f:ef:a1:be:95:84:ad:f5:0f:93:31:
b9:a3:a4:31:80:91:59:e1:fb:94:4a:63:cf:ad:4f:dc:af:0e:
cc:cb:9f:b3:1e:5b:16:e7:35:bc:aa:ed:53:d6:ba:4a:6f:27:
85:25:e2:d9:3b:48:54:71:cf:1d:6b:22:75:3c:2a:cc:4c:af:
b9:94:17:86:cb:58:a6:f1:f0:6a:90:af:70:63:e2:0b:2a:8f:
cc:06:4f:ca:83:10:77:7d:6c:2b:1e:28:75:9a:b8:43:98:de:
ce:c3:97:5f:75:df:03:ad:96:45:3b:96:ca:2a:01:d8:a9:c5:
f2:a6:32:91:ba:51:d1:47:33:04:7e:7e:6b:66:80:4d:6f:7d:
d8:c6:39:0a:06:4e:10:b4:60:83:99:3d:a6:0e:b6:8e:60:85:
56:da:68:53:4a:ff:67:3c:87:e3:00:0b:fa:01:32:bb:fb:39:
91:84:82:ba:1b:13:b9:0d:90:28:42:8c:6f:e0:7e:bb:9c:12:
87:e8:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:17:57 2024 by rpki-client on console-fra.rpki-client.org