Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: qMQqdc4Ab9Vei5b+92uDmjlLFfp+xSpnP3ImErsu6ks=
Subject key identifier: 52:F1:36:BF:4C:7B:5A:63:B9:71:06:B4:8A:BD:AE:CF:01:F3:47:D6
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 6EE6F440AC4CDC2C1DA09EB823AC9E42C6E81D3E
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:58 +0000
ROA not before: Mon 10 Apr 2023 06:37:58 +0000
ROA not after: Mon 08 Apr 2024 06:42:58 +0000
asID: 50555
IP address blocks: 2a12:dd47:8608::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e6:f4:40:ac:4c:dc:2c:1d:a0:9e:b8:23:ac:9e:42:c6:e8:1d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:58 2023 GMT
Not After : Apr 8 06:42:58 2024 GMT
Subject: CN=52F136BF4C7B5A63B97106B48ABDAECF01F347D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:35:b0:02:2d:e0:29:84:7b:0a:6e:7e:f1:
46:68:50:69:c1:98:7c:69:21:e8:2e:24:63:ad:c0:
29:a5:9f:87:9c:cd:1f:ad:ad:bb:36:6d:7f:f3:a3:
a5:9d:70:6c:99:f6:fd:b8:39:7f:e2:9c:f0:bb:3f:
96:2a:2d:38:d0:14:63:cf:a9:90:1b:5f:80:8f:e5:
3c:c6:f7:31:39:94:97:c7:13:80:84:67:ac:f6:b7:
36:09:d7:f1:37:4f:0d:f7:4e:88:9d:e0:ed:a0:d0:
13:04:a9:16:a3:6e:dc:b8:19:88:45:0d:0f:ba:a1:
98:a3:91:ee:7b:7c:53:73:c9:6b:d1:4c:bc:54:89:
98:b7:c6:6f:26:ef:33:1b:af:10:db:6f:24:5a:de:
f0:8f:ac:57:db:a5:b1:b1:ba:7d:52:76:a4:77:5a:
a5:f9:1a:6b:78:27:e9:2e:55:22:cf:6b:ca:64:cf:
e9:34:5c:8e:09:96:ec:49:fc:09:53:a3:69:13:41:
c2:b3:88:0b:3e:7f:39:7c:fc:b7:e4:d2:52:cc:65:
6e:f5:1f:3e:18:01:33:63:15:e8:d1:c9:f1:d7:69:
aa:61:10:46:27:97:b0:84:5c:14:47:25:4b:f3:f1:
a8:9e:a5:33:88:91:84:7d:a2:f0:75:7b:6a:99:01:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F1:36:BF:4C:7B:5A:63:B9:71:06:B4:8A:BD:AE:CF:01:F3:47:D6
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8608::/48
Signature Algorithm: sha256WithRSAEncryption
25:b6:97:cb:bc:8c:cf:90:eb:41:fb:4b:16:f3:09:39:c2:71:
6b:23:28:a1:47:e4:b2:23:44:97:e8:40:ad:12:50:24:36:3e:
74:ef:c0:74:95:86:2b:56:77:98:fe:3e:89:14:cd:4b:8f:7c:
13:06:a4:01:4e:48:f9:39:3f:01:b7:94:7a:f1:22:80:ee:d2:
37:eb:3a:12:74:9f:e0:ad:f7:ef:dd:d9:66:16:56:52:d5:1a:
d0:9d:e2:04:4a:71:d0:07:37:ca:6a:83:18:2e:30:74:9a:80:
d5:83:71:13:34:20:a5:2d:2e:07:10:de:5a:01:80:08:35:8a:
e9:c9:2b:23:d7:56:49:0f:5f:38:e3:6f:af:63:5f:21:aa:12:
38:68:af:b3:1a:06:fc:f1:1c:d0:55:6e:4e:ff:00:bf:ac:36:
b5:08:06:07:f9:9f:08:70:a2:8d:60:fd:96:12:59:02:2d:2f:
48:c9:df:85:8e:27:37:dc:e5:f0:18:8b:30:fc:cb:15:f7:a2:
99:0e:a5:ee:7d:5b:b7:99:66:43:6e:79:f7:55:18:13:bd:42:
35:6e:05:c6:e6:62:cd:9d:ad:80:c9:fe:ee:4f:a4:6b:d5:f9:
f8:b9:b2:56:18:bc:6b:a9:55:6b:87:10:dd:f4:d8:f1:e4:0c:
80:e7:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:21:33 2025 by rpki-client