Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: hrV/K1u9mylSu4aGwxDnKDeCxL3FpHD1mXCFht4+Jxw=
Subject key identifier: 3D:84:97:B9:13:78:82:88:D9:CF:D5:BA:D0:AC:0A:24:09:80:04:46
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 5E3172BBC3D544579207955A6E06F79C55C4236E
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:57 +0000
ROA not before: Mon 10 Apr 2023 06:37:57 +0000
ROA not after: Mon 08 Apr 2024 06:42:57 +0000
asID: 50555
IP address blocks: 2a12:dd47:8607::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:31:72:bb:c3:d5:44:57:92:07:95:5a:6e:06:f7:9c:55:c4:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:57 2023 GMT
Not After : Apr 8 06:42:57 2024 GMT
Subject: CN=3D8497B913788288D9CFD5BAD0AC0A2409800446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:b6:1c:80:dc:fe:b7:f4:5a:5c:52:67:98:
d5:95:cb:03:26:7c:07:26:80:98:df:e6:67:52:dc:
7e:59:b5:6a:d1:85:c0:78:e4:99:d8:df:44:4a:b3:
18:2f:bb:ab:72:f1:6b:25:77:bd:a2:73:a6:ae:ca:
eb:05:78:7c:cf:36:bf:6a:c0:10:49:57:d8:bd:4f:
1e:3f:60:b5:17:00:f7:1e:65:dd:dd:46:e0:d3:59:
15:8f:1c:2c:96:44:29:27:87:a8:30:8d:42:1e:58:
b5:85:5f:96:b0:01:6a:e4:7d:47:50:2d:f4:a8:13:
f4:11:fc:c4:03:fd:41:c2:f7:55:85:93:53:98:8b:
0e:ca:b7:f0:2c:17:37:f6:51:45:7a:33:4f:18:fc:
96:a2:f4:95:bf:5c:11:c2:ab:f5:49:46:43:55:c3:
5c:9b:4f:f3:9b:1f:63:c2:09:84:20:0e:de:c5:c7:
e6:fe:4c:53:aa:7a:5d:5d:15:db:0c:2d:ef:ac:9c:
82:a4:06:4d:2a:81:62:0f:95:90:f2:e3:3f:3f:19:
97:4e:d2:25:3c:7b:c0:df:ec:c5:34:b5:37:84:a5:
fc:c2:f5:ce:da:8a:b9:7e:92:f9:48:a0:e1:f3:70:
ef:01:85:5e:23:82:43:e4:c1:fa:3c:54:a1:70:71:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:97:B9:13:78:82:88:D9:CF:D5:BA:D0:AC:0A:24:09:80:04:46
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8607::/48
Signature Algorithm: sha256WithRSAEncryption
19:d9:1b:94:86:d6:cb:73:15:14:d6:b8:d3:1f:fa:43:1d:d3:
c1:76:29:cc:da:50:30:31:da:4e:38:8c:ad:cd:de:4f:b0:dd:
89:e0:80:55:04:3b:74:00:8f:a2:6d:a4:7f:25:82:94:ca:b7:
7b:87:a8:ab:46:b4:be:c6:5d:cd:db:48:3d:9f:aa:be:f2:ef:
4d:d0:7f:80:db:dd:03:51:ed:8e:18:f4:67:74:cd:ea:a5:48:
f1:54:02:e6:25:22:fb:b8:0b:26:b5:6e:60:f6:df:c4:66:b8:
42:e4:01:0e:fb:2d:2d:05:92:7e:d4:4d:4a:3d:79:e4:ba:72:
e2:f5:5d:48:ba:0c:64:44:89:1d:b2:c5:db:53:4c:e0:90:be:
cf:08:58:06:a2:7c:09:19:73:58:08:fc:be:e5:6a:69:b4:81:
e9:7a:fa:c8:e5:52:c8:1f:e8:f8:29:c2:82:58:1f:d8:2f:ac:
0d:46:f5:d9:ca:07:28:72:39:a0:56:05:77:cf:6d:87:df:7d:
b2:55:81:b5:32:4d:fd:4a:0a:02:c0:bf:29:6d:54:ae:8f:b8:
62:75:69:a9:29:cb:50:8a:38:cf:a5:74:46:e2:bc:fe:f2:51:
28:1d:55:42:b0:e0:b9:ef:0a:c2:48:79:88:af:d4:35:04:d6:
3e:dd:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:17:26 2025 by rpki-client