Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa
File: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier: OPKpiIytICxd1fXI6/shd9Y6hNaKZ6phQjcuVQ/5Mvc=
Subject key identifier: 93:66:2B:CA:E9:04:BF:34:3F:C2:A2:63:0B:56:12:69:C0:60:C0:99
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 6B6AE3C3F39BCF0ACB6E825D2D1089C8CD224748
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa
Signing time: Wed 12 Apr 2023 22:05:04 +0000
ROA not before: Wed 12 Apr 2023 22:00:04 +0000
ROA not after: Wed 10 Apr 2024 22:05:04 +0000
asID: 0
IP address blocks: 2a12:dd47:8600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6a:e3:c3:f3:9b:cf:0a:cb:6e:82:5d:2d:10:89:c8:cd:22:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 12 22:00:04 2023 GMT
Not After : Apr 10 22:05:04 2024 GMT
Subject: CN=93662BCAE904BF343FC2A2630B561269C060C099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:d4:a6:7e:00:82:f2:4d:5e:43:5f:a6:2b:
50:c9:bd:11:33:8f:80:bf:e2:a7:2d:85:c9:8c:ea:
eb:26:7f:3e:2e:49:ea:38:28:c0:fb:34:ec:2f:f8:
88:c1:fa:0f:81:43:c2:ac:ed:01:4e:b8:0f:17:a1:
b6:7b:48:75:73:c3:6f:f8:ea:49:c0:2b:05:8e:b9:
77:e7:11:fc:b5:6f:50:79:34:1f:3b:23:89:e0:60:
ea:57:c5:c4:67:51:ab:d2:6d:0c:a0:0c:b1:2d:9d:
4c:18:08:c3:5c:c2:34:2b:ed:e9:98:0d:fc:b7:df:
ff:b9:57:19:13:bf:37:e2:69:f6:94:b2:db:3f:90:
ff:cc:19:f1:d2:78:56:bc:ff:39:b0:f4:54:2f:c0:
9b:bf:c5:80:f5:5d:74:b7:08:e8:55:e2:e7:5d:f5:
a3:be:b2:4e:12:78:f3:4b:85:7b:c9:7e:09:51:ea:
a3:92:75:92:40:38:a5:24:e6:32:f8:1c:d9:51:36:
d2:b3:51:e5:13:7e:9d:ba:db:99:84:49:9b:e1:d8:
12:23:8a:fe:fe:b1:06:e2:d9:e8:92:05:e8:6b:d9:
53:c7:03:b0:4d:96:4f:95:37:73:ba:84:ae:6f:73:
76:89:74:6d:55:6d:42:96:57:80:1d:8e:80:6a:1b:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:2B:CA:E9:04:BF:34:3F:C2:A2:63:0B:56:12:69:C0:60:C0:99
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8600::/40
Signature Algorithm: sha256WithRSAEncryption
7c:a5:3a:ae:31:0d:ad:2d:17:f2:8c:88:ac:d4:ba:21:f3:51:
3d:e8:6e:fd:66:d4:c5:8c:45:b8:fc:c8:33:ec:8b:53:bc:c0:
56:78:a7:7d:c1:20:c4:51:31:f1:f5:ef:e0:3f:9d:53:05:47:
ce:42:df:c5:c9:78:88:4a:d4:fc:72:16:12:a3:ff:68:18:48:
da:37:11:44:80:2e:85:73:72:79:42:11:1c:af:5f:ca:c7:7e:
62:fe:b7:89:14:38:4d:a2:7e:02:4a:43:29:0e:db:e8:d7:ff:
ea:72:65:8c:34:80:05:43:a9:3f:ea:f6:a4:f1:92:7f:1e:0a:
18:de:e7:40:19:42:f4:f7:1f:b7:d4:42:ed:ef:6d:df:06:18:
50:64:4f:ec:17:62:3a:ab:29:ae:42:26:f2:90:1b:91:c6:77:
17:69:0f:2a:7d:2d:1b:bd:f7:ee:58:5d:71:05:53:04:13:a3:
e3:a7:d9:d4:28:ae:29:63:e1:88:e3:32:3c:b0:06:72:52:50:
34:cd:2b:d9:0f:96:9a:ee:7c:03:a9:13:31:2f:47:d2:b9:31:
a6:1c:47:52:63:fd:d3:5b:f7:19:ef:ce:92:7f:26:a6:cd:fa:
64:52:36:ac:5b:50:8a:17:60:3c:bd:f9:56:84:43:1e:ec:da:
3e:10:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:05:44 2025 by rpki-client