Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: 32XS6Gtl0v/3cr8zAa7aW+x2lfmYcxIQY5b26ood8ro=
Subject key identifier: D3:A0:A8:61:8C:62:34:D5:90:4D:98:BD:95:D1:F2:C0:D7:9A:8E:3C
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 479E0C495433855919BCBB35C966FC72F8633F1C
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:56 +0000
ROA not before: Mon 10 Apr 2023 06:37:56 +0000
ROA not after: Mon 08 Apr 2024 06:42:56 +0000
asID: 50555
IP address blocks: 2a12:dd47:8605::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9e:0c:49:54:33:85:59:19:bc:bb:35:c9:66:fc:72:f8:63:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:56 2023 GMT
Not After : Apr 8 06:42:56 2024 GMT
Subject: CN=D3A0A8618C6234D5904D98BD95D1F2C0D79A8E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:c7:2d:6c:bc:98:af:d3:a1:db:1f:7f:02:
84:55:f7:85:bb:b8:5f:ad:0f:c6:c0:5a:11:3c:09:
3d:2b:a0:96:d3:fb:b8:f9:13:44:6c:01:74:76:e7:
c9:82:af:97:a7:32:94:0e:a3:d8:b1:43:44:8b:a3:
ab:94:06:b8:0a:ac:e0:54:58:09:5c:83:54:39:ab:
ed:ce:cf:90:dd:41:4e:50:fb:b4:69:5f:9b:8c:0e:
72:e1:a0:43:62:5a:58:8f:ac:92:37:3c:e8:56:03:
02:57:18:b8:9f:a8:06:5c:24:3d:86:75:17:84:62:
37:ca:dd:11:63:9f:74:f2:cc:c2:be:c3:f0:cc:e5:
7e:65:ef:62:55:84:72:d8:64:3b:ca:9d:c4:8b:37:
33:11:95:d3:d1:21:32:f7:0c:2c:98:3d:35:5c:4b:
12:21:7a:2e:31:55:dc:2e:2e:b4:70:ae:85:d4:b7:
8d:73:83:60:7b:5a:ee:9f:9f:0f:2f:b6:7e:4d:8d:
83:09:7c:ee:bc:a9:26:70:a6:72:66:7e:c7:c6:93:
d9:aa:a3:bf:ef:5d:cd:ff:ee:b6:2e:44:e2:42:1c:
a9:13:22:89:54:f2:99:40:ae:b3:e0:4a:70:b8:e1:
c9:c3:6d:e8:92:2b:3d:31:bb:db:cc:63:a5:b3:e9:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:A8:61:8C:62:34:D5:90:4D:98:BD:95:D1:F2:C0:D7:9A:8E:3C
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8605::/48
Signature Algorithm: sha256WithRSAEncryption
6a:be:2d:eb:7d:20:0a:47:62:88:fb:c5:6a:b0:ea:6b:43:15:
e0:31:d0:bd:fc:b5:1c:ba:70:bb:94:30:b6:47:1e:b9:8f:2b:
75:1f:3b:51:b6:ec:1e:4e:0f:b7:aa:2f:7a:57:7c:7a:37:fd:
13:c7:26:81:6f:99:35:51:50:2e:75:25:36:04:d7:6c:c6:f3:
0f:25:1c:93:54:38:ec:3e:f8:6c:4a:11:ed:bd:e2:20:78:fe:
08:6e:07:b4:b9:b8:c1:37:86:d3:7e:1f:1c:ef:da:c6:31:c0:
24:ce:26:47:7b:20:d1:13:88:62:87:93:30:1f:e0:a9:b8:3d:
6b:93:c4:f4:b9:3c:01:64:bc:13:30:31:90:64:e0:f5:60:ca:
20:bf:e7:56:40:f0:f8:8a:b2:78:81:65:38:b9:16:45:e5:ed:
09:5c:a7:dd:95:e8:fc:ed:3b:5d:66:eb:05:5a:4b:ee:31:70:
c0:47:80:16:0f:7f:93:ef:a0:7d:61:e5:94:73:f2:2e:79:3c:
a6:01:1c:34:49:54:8b:ed:2e:0e:50:27:5b:c9:14:d2:f3:48:
79:af:e7:7c:14:62:c7:8e:d1:1c:8f:cb:0b:5e:9a:16:99:01:
d6:d4:2e:d5:ad:7a:96:2a:ae:4e:86:8c:fd:e6:e1:d8:d0:dc:
cb:e5:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:13:30 2025 by rpki-client