Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: feGq5cbXeIaysrMu+KdQU8IeA5cxepEx4Y2pSqq3Z00=
Subject key identifier: EA:C2:7E:99:7A:1C:52:3D:77:FC:51:A2:D3:D1:4D:9A:B8:22:34:7F
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 3F00E30A85B5278A3B24BF452C73F2CF74299556
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:53 +0000
ROA not before: Mon 10 Apr 2023 06:37:53 +0000
ROA not after: Mon 08 Apr 2024 06:42:53 +0000
asID: 50555
IP address blocks: 2a12:dd47:8602::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:00:e3:0a:85:b5:27:8a:3b:24:bf:45:2c:73:f2:cf:74:29:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:53 2023 GMT
Not After : Apr 8 06:42:53 2024 GMT
Subject: CN=EAC27E997A1C523D77FC51A2D3D14D9AB822347F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:f3:3e:7d:85:1b:35:e8:d0:6f:97:c7:f9:
b0:91:16:ce:3e:e0:df:4e:39:8a:66:51:4e:1c:35:
e8:f6:c0:05:5c:2c:9f:87:3a:dd:52:df:fe:6b:e7:
d9:c0:0d:37:ab:cd:66:c1:c5:c9:49:60:37:04:fd:
c5:ed:dc:1a:8b:bf:da:04:8f:f1:a5:82:bd:45:00:
27:32:a9:e0:b8:9a:59:40:ff:0a:62:fe:16:1d:11:
44:a6:0e:08:a3:d2:83:9d:dd:b6:fb:47:7a:6f:d9:
29:85:81:3e:c6:52:bb:0b:b0:e2:30:6a:ae:3a:69:
74:9c:f5:d4:3e:02:d0:f1:e1:be:14:74:53:6c:a0:
a9:0f:0d:f6:f8:6b:ee:e0:9c:80:08:0a:bf:a2:7c:
d0:69:d2:fe:3b:b9:d3:33:ab:b5:4d:93:78:52:2b:
9f:22:c9:ac:e7:6b:48:20:10:a7:8d:20:1f:ad:bc:
ab:5c:b1:cf:7b:f6:29:2b:a4:10:77:1b:5d:b9:de:
1f:0c:0f:85:51:d9:d2:15:78:15:15:f4:3f:33:ea:
af:8a:5b:1c:c1:51:ad:eb:bc:cb:af:7d:15:fd:03:
d9:5a:d1:84:5a:3c:7b:41:b2:ba:95:c8:04:3b:01:
7a:04:6a:30:c3:9b:69:cb:15:ce:e3:2a:71:26:cb:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:7E:99:7A:1C:52:3D:77:FC:51:A2:D3:D1:4D:9A:B8:22:34:7F
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8602::/48
Signature Algorithm: sha256WithRSAEncryption
5a:09:9e:1d:47:af:f9:f0:c0:9a:88:95:3e:5d:eb:e0:03:ab:
06:f7:b0:45:a8:4b:4f:8f:c2:e1:18:a9:92:af:c7:a6:35:53:
72:f4:8f:b9:a8:67:3a:c5:d7:04:c2:b1:9f:7b:c0:cc:07:a2:
ca:6a:67:2d:01:9c:6a:1b:43:f7:57:5e:66:57:9d:64:41:64:
4a:1f:01:84:8c:e5:78:cc:13:ea:69:d8:9d:0b:36:73:95:d3:
73:df:a9:78:12:d6:73:39:fd:45:37:52:48:7b:1c:e9:b2:6d:
7c:56:2c:3c:9c:4d:47:0e:e8:e6:9e:9f:4b:0e:45:60:db:35:
aa:0c:82:49:77:eb:c0:99:a8:e7:64:be:2b:55:41:af:03:9d:
cc:84:7f:ec:b3:c0:a9:c0:16:96:9f:90:c5:0a:2f:84:09:d6:
f7:7a:ac:94:d9:07:5e:bf:b2:db:01:b7:44:0e:14:5d:b1:8b:
a7:be:5f:58:f3:ec:9e:4e:57:84:9b:31:b5:8e:2b:00:ff:00:
58:2c:85:9d:ff:29:49:98:a4:d8:3e:2e:d9:fa:d4:c9:d7:ed:
3c:0c:90:3e:65:99:67:3d:6f:d8:c9:8a:76:d0:81:20:55:95:
07:7c:f9:2d:d9:cd:a9:2d:61:c7:36:51:5f:c8:f3:3f:88:85:
94:39:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:19:16 2025 by rpki-client