Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: wy43wGptEydfsZuozjWPq4zgxsEUh2HPRmBbhO0BrUA=
Subject key identifier: 4E:63:DF:84:35:0C:4E:3C:D5:83:A4:86:BD:08:7F:7F:A9:AC:16:4B
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 6DF7583901271627F6868CC9E3881D795103BA61
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:55 +0000
ROA not before: Mon 10 Apr 2023 06:37:55 +0000
ROA not after: Mon 08 Apr 2024 06:42:55 +0000
asID: 50555
IP address blocks: 2a12:dd47:8604::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f7:58:39:01:27:16:27:f6:86:8c:c9:e3:88:1d:79:51:03:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:55 2023 GMT
Not After : Apr 8 06:42:55 2024 GMT
Subject: CN=4E63DF84350C4E3CD583A486BD087F7FA9AC164B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:f5:cf:07:8d:f5:2e:78:2c:1e:0d:90:ba:
05:01:95:8b:b2:ea:e5:ca:7a:14:0b:11:45:df:a7:
fd:d0:41:f8:a8:75:28:d6:32:29:4b:4e:8c:e9:bc:
42:43:c4:c2:a6:f0:e0:d3:e7:80:06:2c:3d:8d:62:
88:eb:14:be:b5:0f:10:4b:46:4e:a8:48:36:49:3e:
a1:e2:e9:ae:12:8c:8f:20:fb:8d:c5:7b:4c:14:83:
71:b5:28:90:07:77:e9:da:5f:2f:e4:e1:02:43:a3:
01:a3:c7:ac:0d:bb:41:c9:9a:6e:1c:4f:cc:73:61:
ee:9d:35:4b:f9:33:92:b2:af:44:2a:34:64:24:b1:
92:43:54:24:96:d6:b6:a8:40:f2:d4:f2:09:de:3b:
6f:57:11:6e:8f:63:25:89:cf:b7:be:39:59:fb:e9:
2d:bc:78:6a:df:9f:bc:9f:27:6a:0b:3d:f1:45:7f:
83:b4:52:e8:17:30:1b:94:19:b3:9b:56:91:a8:38:
8c:5e:2d:ff:c5:16:f2:51:d6:74:a7:dd:95:b3:dd:
4c:74:4b:30:90:ea:28:6a:50:be:22:d5:ef:be:ce:
67:39:f6:46:88:69:91:8d:18:0f:93:60:1f:08:70:
eb:a7:8c:90:aa:e1:b2:ea:e8:05:46:1e:e1:2c:7e:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:DF:84:35:0C:4E:3C:D5:83:A4:86:BD:08:7F:7F:A9:AC:16:4B
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8604::/48
Signature Algorithm: sha256WithRSAEncryption
94:b7:4b:ff:9d:e5:78:da:10:51:03:69:9d:04:7d:67:e4:65:
cb:6a:d1:c6:a5:c0:f0:26:a7:0a:33:64:a2:3a:6d:cf:c0:6f:
87:34:d5:ae:79:08:42:49:e7:aa:2a:b5:08:92:84:d0:ed:6e:
48:e1:93:59:49:3f:32:2c:9a:9c:cc:41:7d:dc:41:dc:1f:95:
20:87:28:f3:50:91:63:81:15:1d:c8:b8:61:3b:c6:19:76:d4:
78:f2:92:fb:a5:ba:f6:54:64:b7:48:00:98:fd:af:da:34:06:
5a:f6:83:75:04:c5:fe:a1:26:af:9e:c0:59:06:0e:39:7d:cf:
eb:47:1a:c2:c8:53:91:4c:76:86:56:2d:dd:44:89:cb:38:a1:
d6:5c:0e:ed:88:9f:b5:74:bb:28:b8:8d:d9:56:84:13:b2:cc:
39:c1:2d:4e:af:5e:c0:c2:6f:33:3a:52:52:43:c0:83:8a:b9:
94:41:ae:6d:02:72:85:ca:ed:3e:8a:9f:fc:ca:99:00:20:e1:
bb:22:4f:40:76:dc:16:3c:72:1a:4b:1c:fc:96:7c:a8:ba:ec:
df:f3:df:fd:76:fe:29:7a:e0:03:4e:57:b8:74:aa:62:14:fa:
7c:4e:08:07:e7:19:d7:cc:6a:7c:ed:31:5b:a1:44:dc:df:dc:
88:08:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:16:25 2025 by rpki-client