Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
File: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (raw, json)
Hash identifier: hvb5Ot3aTm8WlXBs7WxHbXF1fqT02PIxZw93lY05zS4=
Subject key identifier: 88:35:51:62:72:F8:8A:1E:CF:88:0C:64:C6:AB:A3:CA:DE:5C:7E:61
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 1BC9055712741D1DDC9825F07275A0A294A5BFC2
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
Signing time: Wed 25 Sep 2024 03:23:18 +0000
ROA not before: Wed 25 Sep 2024 03:18:18 +0000
ROA not after: Wed 24 Sep 2025 03:23:18 +0000
asID: 151188
IP address blocks: 2a12:dd46:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c9:05:57:12:74:1d:1d:dc:98:25:f0:72:75:a0:a2:94:a5:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Sep 25 03:18:18 2024 GMT
Not After : Sep 24 03:23:18 2025 GMT
Subject: CN=8835516272F88A1ECF880C64C6ABA3CADE5C7E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:3b:f4:b8:61:c2:ff:f8:bb:e2:de:67:41:
d2:ba:c2:b4:2f:1f:59:bd:a3:e5:b2:f5:72:65:9e:
57:f2:24:e2:9d:ce:81:a0:c2:59:68:f2:a2:33:7f:
b3:4c:7b:7b:8b:ef:c7:f1:bc:32:c4:ab:49:24:68:
87:06:4f:88:fa:84:c1:b7:ab:5a:2f:ef:b2:c5:fe:
82:56:ee:f2:5d:6f:50:4a:b9:21:07:bc:4c:0a:c0:
26:35:a4:04:f7:c0:1b:5b:1d:ee:e4:b5:bd:9a:55:
0d:ae:12:02:0f:19:84:3d:db:c2:ca:40:81:da:46:
bf:86:98:8f:24:7e:77:62:da:8e:e4:cb:89:4d:2e:
11:f7:61:9a:53:b0:92:53:18:30:82:9d:ff:1e:d6:
c5:c0:6d:36:f1:4a:f0:16:e2:1a:19:5a:66:39:17:
9c:a1:5a:89:2a:23:f6:5b:28:c6:78:b2:15:76:70:
b5:e7:24:3a:f2:fa:ba:dc:7e:99:cb:4a:0b:23:5d:
7d:7b:c7:f6:da:6f:e1:70:f7:83:71:4f:84:f0:d7:
60:71:63:01:93:89:90:99:4b:88:ad:c2:e4:ae:09:
7a:d8:82:a8:33:ac:fd:b6:53:d3:ef:f6:0f:b7:41:
ba:e4:a6:3b:3f:44:29:64:0a:b5:aa:ae:65:6a:d5:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:51:62:72:F8:8A:1E:CF:88:0C:64:C6:AB:A3:CA:DE:5C:7E:61
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
89:aa:60:89:60:ed:32:b3:14:ee:c3:3e:6a:18:38:5d:c2:d7:
8f:b8:8e:b8:08:3b:f5:f1:81:f2:7a:de:17:d6:d0:19:a2:9d:
c6:67:50:4b:71:70:30:21:9b:9a:86:47:d3:f6:9e:97:23:f0:
65:9b:81:63:2f:c9:60:52:5d:a4:59:a4:12:1d:7f:4d:fb:20:
d8:5c:c7:e2:a2:7b:b6:2b:8b:df:3a:9a:aa:71:04:3f:e9:b7:
9b:6a:85:92:5b:b3:ac:bf:6a:80:96:2d:12:51:45:dc:0b:8f:
66:b8:87:75:da:e6:c3:0c:6f:82:3b:9d:92:5d:46:19:f7:47:
b1:4e:0f:d6:81:e5:d2:97:b0:68:e6:ef:ae:1c:94:8a:f5:c0:
d5:42:5e:a4:be:4b:78:dc:aa:8b:ca:a2:93:58:6e:d9:ad:38:
71:7b:27:16:a2:47:4c:98:6f:ab:43:fe:4f:3c:7e:7d:cc:af:
ee:40:b8:45:6e:ec:b2:22:fe:64:09:1a:af:d2:1c:e1:3c:2c:
a1:00:38:da:de:96:c5:46:6b:33:fb:4b:3b:1e:1c:71:6b:25:
c2:ba:bd:8b:a9:d8:fb:15:b3:63:1e:31:9b:07:6d:38:66:55:
9d:e6:60:ac:86:c7:d2:ca:98:49:98:6d:6d:6a:0a:50:62:99:
77:49:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:29 2024 by rpki-client on console-fra.rpki-client.org