Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa
File: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (raw, json)
Hash identifier: wXg0hWGMCo9QUUDWLAruK5BDXAlUjwZtw/GedGQ7Dao=
Subject key identifier: 15:70:AB:DD:F1:A2:5C:FB:1C:45:4A:B1:EC:6C:37:BB:22:CE:E7:86
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 235116E4429582D85E74DD0BDA26A81F7636B8D9
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:52 +0000
ROA not before: Mon 10 Apr 2023 06:37:52 +0000
ROA not after: Mon 08 Apr 2024 06:42:52 +0000
asID: 50555
IP address blocks: 2a12:dd47:8600::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:51:16:e4:42:95:82:d8:5e:74:dd:0b:da:26:a8:1f:76:36:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:52 2023 GMT
Not After : Apr 8 06:42:52 2024 GMT
Subject: CN=1570ABDDF1A25CFB1C454AB1EC6C37BB22CEE786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:0b:b7:8c:f9:53:61:19:74:02:0e:ef:f0:
2d:1b:8d:76:c3:d5:54:c3:6a:f2:f7:0e:cb:20:44:
eb:8f:2f:a6:bf:89:34:24:19:ab:88:68:94:32:9c:
6c:f9:12:a7:83:24:e1:22:26:d4:bb:39:46:66:11:
76:36:37:33:30:aa:55:92:a4:54:c7:67:3a:2e:1a:
c8:09:10:dd:42:8b:49:9f:f9:44:73:ac:9c:20:30:
72:89:40:73:4c:13:6f:72:67:5e:a1:76:44:c1:eb:
db:2a:8c:24:69:88:cd:12:02:1c:24:70:37:33:0f:
c1:87:a5:3f:13:54:0d:aa:86:fa:88:d0:0b:02:74:
e9:39:e5:01:6f:19:4a:0e:9f:0f:25:a9:89:ef:64:
bd:50:8a:93:ae:62:cb:3f:c0:b8:3b:8d:a0:95:50:
d1:6e:3b:c3:d7:0a:50:69:d3:92:43:1e:e0:b5:12:
50:b2:7d:d9:b1:29:f4:cc:06:1f:f7:23:83:51:92:
1c:84:8a:82:8b:8e:aa:4f:ba:a6:11:f5:c2:b3:79:
cf:0e:55:40:59:83:a0:80:f3:09:e9:ed:17:57:f7:
8f:64:8a:0f:17:a6:2e:7e:ed:13:8c:53:de:86:a3:
50:e5:20:24:50:86:cc:03:32:35:1f:a5:b5:a6:a7:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:AB:DD:F1:A2:5C:FB:1C:45:4A:B1:EC:6C:37:BB:22:CE:E7:86
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8600::/44
Signature Algorithm: sha256WithRSAEncryption
64:7e:4e:c0:81:1e:ae:75:27:47:14:9e:ec:f1:a7:a1:2f:e9:
f3:a2:a0:1c:09:59:0c:16:ba:51:fd:55:f0:6c:7e:7a:16:81:
51:2e:43:0d:a8:b1:bc:ae:6e:48:86:9e:52:81:f0:51:62:b6:
5b:0b:b1:d2:7f:f0:10:8b:43:6e:bf:21:94:ae:eb:f4:72:b0:
ff:45:41:7b:c9:bf:f4:be:5c:91:b6:02:7f:5d:47:47:b9:1e:
6e:1d:83:14:5c:1d:7b:94:44:83:56:54:9a:db:b4:27:e2:f3:
98:97:61:32:a0:8b:7d:1e:35:1a:32:f1:fc:eb:ce:ad:44:2e:
9a:6b:fd:7d:06:31:e4:3e:77:2d:72:f6:c1:e1:f2:a1:a7:ba:
55:79:47:8e:f1:19:b1:3d:2c:07:45:17:6e:19:e7:31:24:0b:
54:81:c0:72:74:49:8a:df:c9:c6:25:e5:47:37:c6:e2:1b:5e:
4a:01:1b:b3:6a:af:d7:2b:4f:b0:96:ac:c2:ab:3b:47:25:a8:
a4:be:35:52:84:16:e2:2f:5f:fd:20:9c:92:f8:08:f8:2f:37:
26:0c:32:5a:43:1b:24:dc:ed:f6:39:c7:b4:2d:39:81:7a:fc:
22:c0:7d:cf:f0:7a:92:07:ce:55:09:a3:35:01:62:33:9a:7c:
7e:07:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:26:11 2025 by rpki-client