Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: zGEytrx72v5IsKxLMNPJ37Q80RR9zsST9bRQjzc7JgY=
Subject key identifier: 4C:14:40:90:B0:0A:ED:6D:69:D5:22:58:E6:D3:60:E8:62:7C:6F:18
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 479DCD2268667F945A125EF64FF8DE30A8260935
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:54 +0000
ROA not before: Mon 10 Apr 2023 06:37:54 +0000
ROA not after: Mon 08 Apr 2024 06:42:54 +0000
asID: 50555
IP address blocks: 2a12:dd47:8603::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9d:cd:22:68:66:7f:94:5a:12:5e:f6:4f:f8:de:30:a8:26:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:54 2023 GMT
Not After : Apr 8 06:42:54 2024 GMT
Subject: CN=4C144090B00AED6D69D52258E6D360E8627C6F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:5e:9c:8e:4c:5b:bd:bd:64:7a:3e:0d:d5:
ed:93:df:3a:6f:5e:93:49:90:14:7f:09:c7:1f:22:
14:dc:01:51:b6:e9:43:f6:82:3c:07:9b:24:94:ce:
c5:95:96:f5:fe:02:87:18:97:77:07:8d:af:36:27:
88:f1:19:7b:7e:d2:db:37:98:ff:0a:9a:ea:85:4a:
4a:96:8c:01:17:39:ce:bd:03:89:ca:4a:9a:94:e7:
f6:4d:1f:c4:9a:7b:dd:b0:24:90:fb:81:1d:81:03:
8e:12:f7:f7:fd:c9:6f:70:68:f5:7f:d9:8c:16:15:
b4:ae:47:50:b8:00:24:98:60:b7:40:a5:ad:61:84:
6f:d1:ad:74:f9:0d:91:64:07:c7:b5:7a:b8:0c:f7:
d1:40:a9:0e:21:37:5e:5b:12:a9:fe:29:e0:d6:c7:
e9:4a:41:eb:4e:5f:87:1a:71:fe:34:2d:a4:c2:86:
06:fd:e0:dc:61:87:54:9e:d6:fe:5e:bc:cd:2c:3d:
8a:9a:ae:b9:00:b6:52:a5:25:23:4e:36:ca:08:eb:
74:e6:53:da:1c:83:04:85:cc:2f:0b:81:af:4c:8f:
59:96:a1:9a:87:67:62:a9:d6:f6:fd:5d:b1:b0:a8:
e9:ae:4a:02:e4:48:36:58:98:1e:ac:c7:fd:e4:7b:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:14:40:90:B0:0A:ED:6D:69:D5:22:58:E6:D3:60:E8:62:7C:6F:18
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8603::/48
Signature Algorithm: sha256WithRSAEncryption
0a:35:8c:36:bc:56:07:26:0a:11:51:da:d6:70:c0:59:c0:07:
6f:92:73:cb:0c:f6:22:db:77:da:6c:63:59:81:d4:5a:4f:d5:
b3:40:5a:59:51:60:a0:4f:c7:5b:3b:6a:8d:3a:24:2b:ad:af:
ba:2c:85:75:24:c3:04:a4:c4:4c:04:94:6d:06:7a:d2:1b:f1:
c3:41:e6:53:7d:ed:d4:9f:90:52:33:75:57:ea:9e:f9:d2:df:
cc:ce:91:67:9f:7f:0c:c1:73:16:16:92:a6:4a:c9:07:c8:ae:
c1:ab:05:ee:e4:ed:44:9d:95:26:75:02:c2:35:2e:3b:a2:74:
0f:70:8a:09:d1:47:09:6f:42:fc:6d:d0:ee:76:7a:da:85:36:
c7:27:52:85:f8:f6:c4:62:14:eb:23:94:9f:57:be:0d:cb:13:
d1:e3:08:5c:85:e5:27:b3:3b:fb:90:32:8c:29:4e:0b:ea:63:
d4:e7:7b:09:ba:03:df:18:b0:91:c8:0a:f2:f0:9c:57:8c:c7:
68:68:30:bd:d8:f8:94:7b:db:2d:1c:0e:6b:a2:eb:29:4b:71:
6a:6e:c9:a8:71:f9:89:8d:ca:ad:d0:0a:17:a0:bb:ba:14:11:
1a:7f:1b:31:a2:f4:fb:ec:74:20:a9:2f:7e:d9:37:49:e9:bc:
c5:4b:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:18:16 2025 by rpki-client