Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: nu5+++kxWw9PQECNq1ZJKe/zCFt9AtLZiqWeRUQoz+c=
Subject key identifier: 5A:A9:6C:F3:BE:4E:23:F5:3F:B8:B3:39:2B:D5:79:14:1D:42:A3:95
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 60B5EF6112DA4D6648F6AE40D5E48A809A2A91A4
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:53 +0000
ROA not before: Mon 10 Apr 2023 06:37:53 +0000
ROA not after: Mon 08 Apr 2024 06:42:53 +0000
asID: 50555
IP address blocks: 2a12:dd47:8601::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b5:ef:61:12:da:4d:66:48:f6:ae:40:d5:e4:8a:80:9a:2a:91:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:53 2023 GMT
Not After : Apr 8 06:42:53 2024 GMT
Subject: CN=5AA96CF3BE4E23F53FB8B3392BD579141D42A395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:8f:89:33:26:7a:5e:2d:a8:2d:52:c9:3a:
4b:46:ef:ea:cb:d5:6e:c3:f9:30:f4:e8:3d:6d:15:
68:6c:a5:ac:bf:ca:03:7c:65:91:36:53:40:3e:a6:
06:8e:d1:d1:6a:9a:eb:07:34:6b:0b:a2:f6:52:ac:
2e:5f:4c:b5:d9:95:ee:80:ff:28:ca:a3:09:a7:ca:
17:62:d8:dd:53:38:08:9e:d9:d1:99:20:c0:8a:bd:
74:09:34:fb:cd:44:38:53:fc:81:a5:1d:c4:93:b1:
03:40:aa:e6:4a:4f:9d:18:a4:16:d1:1f:28:fe:03:
4e:65:54:cf:15:4b:89:f9:16:41:4b:06:b3:9c:6b:
4e:37:1b:b1:2a:fe:9c:19:24:c3:2a:d1:59:19:7c:
4e:f0:d4:f2:e1:4f:a5:e3:76:98:75:67:8f:5b:f5:
55:f8:89:80:5d:98:c8:ed:df:23:f5:63:eb:bc:43:
42:2d:33:e0:e6:35:59:02:8e:66:2d:32:6d:84:63:
60:36:a0:94:01:bc:2e:f6:2f:fd:2b:f5:ca:9a:9c:
13:b3:ad:9e:bf:05:aa:65:b8:4a:9b:64:08:b2:00:
01:62:d7:a2:78:57:12:a4:69:0b:40:74:33:b0:4b:
cf:2f:c3:f4:8b:f5:de:df:37:82:70:9a:3a:bd:ea:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:6C:F3:BE:4E:23:F5:3F:B8:B3:39:2B:D5:79:14:1D:42:A3:95
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8601::/48
Signature Algorithm: sha256WithRSAEncryption
26:77:61:a4:b1:82:ff:fb:56:92:da:a7:00:64:20:88:39:b5:
a4:47:4b:9d:2e:34:46:e9:87:63:34:35:35:7d:2a:2f:23:da:
1f:af:3b:d7:90:43:ee:15:67:11:d4:1c:34:53:66:e3:8d:4c:
8c:ac:7e:73:8e:a0:3e:60:8b:c7:08:48:8d:55:f2:f1:02:ec:
da:40:1f:67:a4:c7:28:83:6a:0c:5f:49:05:27:aa:31:88:40:
22:8a:ee:8c:e9:2d:05:8f:e2:c5:3f:62:8e:08:74:30:31:d8:
13:80:f7:29:4b:53:79:ff:2c:65:f6:58:3d:41:60:f5:92:58:
c4:15:7e:da:db:5c:ef:0a:eb:ab:c9:71:77:5a:d0:dc:6c:c3:
05:b6:45:86:b4:1a:df:e4:40:07:66:ca:44:af:b9:6b:e8:54:
d4:80:f0:0d:47:b3:18:cf:0f:15:7e:98:9e:52:3d:7b:fe:ce:
cd:05:61:b0:2e:6a:00:39:45:c2:09:03:aa:e9:e7:19:fe:21:
59:de:f8:24:57:22:80:6e:28:ba:ed:ed:e8:e4:52:37:0d:80:
d7:00:05:f2:88:f2:9e:9a:35:79:4f:79:35:d6:5a:e6:bf:36:
bf:06:7a:8c:94:12:d9:aa:44:86:27:24:8e:0e:be:67:07:3c:
bf:04:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:12:34 2025 by rpki-client