Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: fobZMngNZTRj+nfN6Ysb2Vy2HR7O86kIEi/DTkmtvRU=
Subject key identifier: 11:39:5E:78:2E:CE:21:0B:28:B4:78:CB:7C:97:81:11:0C:A6:01:74
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 5B4E874195134C006CA47BE34072A7064C935A59
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:42:59 +0000
ROA not before: Mon 10 Apr 2023 06:37:59 +0000
ROA not after: Mon 08 Apr 2024 06:42:59 +0000
asID: 50555
IP address blocks: 2a12:dd47:8609::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4e:87:41:95:13:4c:00:6c:a4:7b:e3:40:72:a7:06:4c:93:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:37:59 2023 GMT
Not After : Apr 8 06:42:59 2024 GMT
Subject: CN=11395E782ECE210B28B478CB7C9781110CA60174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:fb:df:ce:44:b5:d9:52:cb:a0:b5:75:35:
c2:aa:cb:d5:d8:11:73:f0:b7:60:48:3a:cd:52:a1:
10:41:1a:9f:70:af:2c:1e:cd:13:27:5f:75:92:6c:
1e:ad:ed:05:a2:0f:58:47:c3:a9:e6:92:3e:bc:04:
03:82:14:00:49:fc:5a:ec:10:3f:8b:1e:7b:e6:1e:
45:17:6c:92:3b:05:08:48:43:08:13:78:ff:ff:80:
33:fe:26:90:66:b3:1f:01:ad:7b:53:54:9d:30:db:
b4:50:d7:7f:39:12:72:11:25:33:17:e1:1f:de:0c:
a1:28:d1:ec:03:30:b7:9c:a7:5d:93:22:96:c1:d2:
5f:26:12:d2:ca:04:b1:9b:44:82:54:14:ee:ad:eb:
40:47:bf:a8:a1:6f:ce:4c:ae:59:ea:10:a3:13:03:
4c:b3:d2:75:db:c7:8e:a3:83:9f:31:46:fc:32:96:
dd:a2:f0:52:ef:ef:b7:f0:90:b7:d6:d4:e8:44:e4:
e3:02:67:f6:51:84:92:d2:41:3d:9d:01:ec:96:f1:
02:e3:d2:43:f9:64:67:fe:23:1d:94:ec:f2:17:ce:
9f:64:f7:5b:c9:50:80:a6:34:af:06:95:54:63:ac:
bb:fa:34:73:b3:27:a8:d5:34:1f:0c:be:00:33:31:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:5E:78:2E:CE:21:0B:28:B4:78:CB:7C:97:81:11:0C:A6:01:74
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8609::/48
Signature Algorithm: sha256WithRSAEncryption
9c:75:0e:66:0d:55:a4:29:71:54:1a:0b:82:92:ec:a9:d2:47:
81:58:21:41:f6:34:ca:ab:0e:35:05:b5:3f:b6:30:2d:55:00:
9e:92:4b:38:9b:f2:cc:ba:37:32:f8:c0:f3:7d:09:bd:2c:f3:
92:bd:65:3e:6e:c0:99:3e:96:be:d4:0c:d0:8a:25:44:97:6a:
ad:d0:96:3b:42:92:45:41:36:79:09:bd:96:b9:93:83:86:52:
f7:78:af:33:30:35:31:96:c7:f7:46:20:ba:34:76:d1:b4:6a:
d9:6b:5a:ea:57:c0:46:27:be:a7:90:ec:19:28:65:b6:3d:68:
20:04:6e:21:b7:58:25:23:ce:0a:0f:2f:4f:5b:3d:c5:c8:10:
f5:f8:6c:bd:16:32:05:c4:57:77:92:36:b2:75:c0:25:21:84:
c4:3e:d0:be:fc:fc:22:b1:d3:ec:27:d4:cd:56:e7:a6:c7:92:
c2:c8:c4:6c:5f:94:4a:99:56:c8:3e:cd:c9:2d:f6:79:d9:ad:
4a:13:91:8c:b9:65:5d:5f:94:b5:11:cb:d1:6e:c3:96:ae:da:
20:97:8c:18:27:a6:df:b9:41:9d:21:f8:34:0e:3c:9e:f3:81:
22:34:53:3e:9a:d4:13:96:00:2d:ee:7a:bc:5b:13:d9:8f:78:
da:12:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:24:50 2025 by rpki-client