Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
File: 326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (raw, json)
Hash identifier: 0dHaJ4qfvE2oLUQaYskr8kN9r8soA38zu6v8jF1r9PM=
Subject key identifier: 76:6F:3F:3D:7C:CB:1F:81:7A:BC:EF:17:BF:05:0D:C7:4D:11:9E:68
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 37AA47902087D2BCDDEA2E721432875F1458E215
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
Signing time: Sun 07 Apr 2024 13:14:50 +0000
ROA not before: Sun 07 Apr 2024 13:09:50 +0000
ROA not after: Sun 06 Apr 2025 13:14:50 +0000
asID: 151188
IP address blocks: 2a12:dd47:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:aa:47:90:20:87:d2:bc:dd:ea:2e:72:14:32:87:5f:14:58:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Apr 7 13:09:50 2024 GMT
Not After : Apr 6 13:14:50 2025 GMT
Subject: CN=766F3F3D7CCB1F817ABCEF17BF050DC74D119E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:a6:70:d4:84:c0:b7:86:c6:27:93:d2:36:
19:fd:0f:c8:8c:99:de:37:63:0a:14:71:3e:5c:2b:
ed:7a:40:07:12:e3:72:64:f3:99:7f:39:3c:d5:b4:
bc:d6:a1:00:ee:52:34:db:ae:f1:45:ad:e1:8b:67:
b6:bb:b8:fb:6f:e8:83:93:32:c8:66:2a:b5:d4:4f:
8a:88:7c:07:13:15:d7:43:46:30:49:3f:53:d8:86:
fb:c6:99:48:d6:5c:2b:60:17:82:4d:07:13:36:69:
b9:a5:12:c7:c2:58:17:d7:04:8b:21:44:07:3b:a1:
92:5f:31:79:c5:4b:5b:92:22:85:c7:e3:3e:0e:30:
13:a5:10:af:11:b2:3c:b8:9f:c6:a4:d6:3e:f9:1d:
86:69:79:ed:3a:a8:9f:d8:b8:eb:6e:52:85:e4:c3:
ad:e5:11:81:de:5d:25:1d:f6:b6:b7:6c:81:e5:3f:
d3:96:13:9c:33:47:f5:9e:65:29:7d:35:76:2f:65:
01:e4:b4:25:24:10:1d:63:93:69:5c:5d:6e:57:2d:
a0:cf:df:e7:b8:21:93:2f:2b:56:ed:bc:95:38:54:
07:00:56:74:ce:44:9e:02:9f:30:65:3f:60:0f:24:
bb:9a:67:e2:fb:cc:bb:75:18:2f:a3:3c:bd:6f:4e:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:3F:3D:7C:CB:1F:81:7A:BC:EF:17:BF:05:0D:C7:4D:11:9E:68
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:f200::/40
Signature Algorithm: sha256WithRSAEncryption
17:bf:b3:0f:ca:13:6b:df:cd:42:40:a5:7b:2b:45:7a:6a:5c:
97:91:b8:33:08:df:d8:d4:30:df:f6:e5:91:08:07:7b:e4:55:
6a:22:e0:3d:14:90:6c:bc:25:8b:50:cf:db:53:ac:41:4c:87:
87:3e:ce:50:67:b6:7e:0a:1e:5f:7d:d2:92:28:0a:cb:50:be:
f5:03:d4:07:11:c9:be:16:5b:06:51:90:a1:99:0c:7b:45:27:
25:ff:58:d8:a3:44:75:06:f7:0a:51:11:a0:85:81:fe:c6:2f:
73:11:2d:c3:b9:70:23:d7:ff:7b:b9:eb:b9:42:0c:19:d1:28:
b4:e8:2d:e7:5b:b0:58:e6:52:82:02:ab:9f:7b:95:df:02:8d:
50:c4:d2:34:1a:2e:39:2a:e7:06:77:76:15:93:7f:e8:a4:f2:
91:7c:a9:eb:ee:96:c9:32:93:ad:f7:ab:27:96:56:e8:1d:97:
1f:5e:69:34:bd:3c:c9:54:cb:e9:9a:cb:ef:b5:12:f3:1e:29:
6f:49:94:6a:b5:c1:ca:d3:9b:f3:13:37:b6:bd:ec:f8:ea:2d:
c7:02:db:b0:37:99:99:fb:50:64:06:8d:29:94:81:59:2a:c5:
c4:55:11:ac:08:9e:40:89:16:ee:c4:32:d8:1d:d6:f5:83:a0:
c8:dc:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:50 2024 by rpki-client on console-fra.rpki-client.org