Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa
File: 326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier: pt5SRwa4PkVcvU2eoTtkDqYnKLiWoThHLn5lNyt/eR0=
Subject key identifier: 3F:68:30:8D:01:44:C2:E1:CF:8E:08:97:C5:A8:4A:B3:03:56:1C:74
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 59FE4CD3828BC572A251922510A213ED8BB7D8C7
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa
Signing time: Tue 30 Apr 2024 04:02:25 +0000
ROA not before: Tue 30 Apr 2024 03:57:25 +0000
ROA not after: Tue 29 Apr 2025 04:02:25 +0000
asID: 199203
IP address blocks: 2a12:dd46:1fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:4c:d3:82:8b:c5:72:a2:51:92:25:10:a2:13:ed:8b:b7:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Apr 30 03:57:25 2024 GMT
Not After : Apr 29 04:02:25 2025 GMT
Subject: CN=3F68308D0144C2E1CF8E0897C5A84AB303561C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:bb:00:85:9f:8b:0b:ae:d3:63:24:b4:55:
e8:63:dd:3c:98:2a:a0:e6:45:9e:56:e6:38:ce:d3:
8e:0c:10:ed:1d:19:2c:11:ba:8d:76:0b:3f:e2:ff:
6b:da:bf:3d:19:76:c2:44:26:42:0e:19:25:b2:60:
68:a2:27:e2:a9:96:ae:bd:58:bd:91:57:1f:3b:74:
13:ad:38:49:be:93:41:50:fc:78:db:a7:a0:47:9d:
dc:9c:cd:5b:11:2a:28:a3:d9:e6:f3:ff:93:bf:e2:
40:61:4f:53:60:03:d5:ee:5e:85:83:8c:f1:4c:93:
cc:a8:ee:c6:93:9b:8f:fe:90:57:e3:70:e4:1d:94:
e6:b3:e2:dc:bd:b7:f1:5d:8b:0c:95:8d:86:e5:0c:
81:a7:20:7a:08:62:bc:b9:86:fd:12:3b:87:75:cf:
18:41:8d:69:e8:aa:a5:a8:b6:0c:e5:e1:f0:b2:1b:
b2:f3:09:15:88:21:76:0f:b5:10:70:67:9f:54:7b:
99:f0:ea:1b:11:c2:32:f7:77:bd:60:4a:dc:98:92:
4b:96:0c:2f:77:e6:2a:06:3c:c5:e3:e6:cb:c2:0e:
67:1d:57:eb:65:63:3d:e1:87:a5:46:dd:c1:cb:f0:
67:60:73:55:5b:99:8f:a6:d7:f1:09:0b:b6:d5:87:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:30:8D:01:44:C2:E1:CF:8E:08:97:C5:A8:4A:B3:03:56:1C:74
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1fff::/48
Signature Algorithm: sha256WithRSAEncryption
48:1d:e2:98:ed:19:25:5b:5e:9e:04:bf:a0:13:2d:cd:54:40:
a5:99:01:b3:e7:85:2e:51:66:09:98:ca:a4:6e:20:87:b9:3e:
d4:46:c5:08:6b:66:8b:e7:49:ba:40:9b:8b:b8:8c:30:92:3b:
a6:5b:da:42:70:d0:92:5b:c9:01:f6:8b:fe:64:39:24:1e:c9:
78:db:19:86:08:1e:f9:12:90:9f:0c:55:3e:3b:de:5b:21:cd:
9a:99:40:b2:c3:ca:6a:e6:e6:7b:26:2c:65:38:71:bb:93:d1:
02:e9:43:88:61:4f:60:ff:18:ff:d3:0f:8b:b9:51:54:69:43:
af:2a:e5:96:b8:62:fc:57:d1:02:16:04:e6:31:83:62:91:a9:
4b:19:63:f8:80:95:98:2d:66:86:f1:2d:76:39:ab:6f:98:a9:
c4:5e:fe:5e:8e:d8:f3:00:08:ac:d7:c7:b1:ee:3b:0e:ed:b7:
cc:c2:b3:a5:0b:ed:cd:1a:b6:50:9b:b8:de:c9:89:12:74:73:
26:36:df:0a:7b:c1:24:e2:d0:84:6e:b4:27:02:54:6b:ab:f9:
e6:c9:56:c6:3a:20:ad:db:94:a4:54:ee:e5:da:8b:66:68:ff:
46:41:81:b4:1c:85:f1:0f:98:32:d4:70:5e:1a:19:5b:bf:ea:
a9:42:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:34 2025 by rpki-client