Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: Wenq5YWkpJjTdYcu90rIYXE6O4DINR5UI0sFPdgeTJk=
Subject key identifier: D3:79:11:48:92:D9:B8:8A:29:FF:8E:C3:93:E2:67:41:B8:BD:84:40
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 129C6B9C82D04A1E8827961B2CC60A9D368E2586
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:43:02 +0000
ROA not before: Mon 10 Apr 2023 06:38:02 +0000
ROA not after: Mon 08 Apr 2024 06:43:02 +0000
asID: 50555
IP address blocks: 2a12:dd47:860d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9c:6b:9c:82:d0:4a:1e:88:27:96:1b:2c:c6:0a:9d:36:8e:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:38:02 2023 GMT
Not After : Apr 8 06:43:02 2024 GMT
Subject: CN=D379114892D9B88A29FF8EC393E26741B8BD8440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:da:ee:28:6f:62:13:38:0e:aa:83:ae:64:
87:bc:7d:bd:50:07:e6:bb:17:4e:0d:f7:bb:87:e5:
3e:5a:5f:09:b1:ca:fa:68:95:d5:66:4f:d1:75:74:
24:4c:27:4b:3a:9a:16:33:5a:98:08:c2:41:b8:21:
57:8b:62:47:e4:3d:b2:84:52:24:bb:8c:3a:41:a4:
fb:07:f0:39:01:e9:75:33:8b:d1:64:71:dd:6d:33:
fd:4a:d2:7b:96:65:31:75:67:46:88:d8:a4:08:0b:
5b:3d:4d:62:55:a8:51:b5:f3:b2:c9:80:89:40:8a:
2f:60:1e:54:90:9f:92:4c:cc:ef:9c:b2:18:c3:3a:
26:8d:fb:98:3a:40:68:6d:eb:10:e4:06:5c:c5:1a:
82:36:48:96:58:2e:34:db:3e:d5:77:f9:f1:10:b4:
d4:25:ed:c1:d3:7a:94:2d:e8:a6:46:4f:fe:db:67:
3b:0d:0a:c5:9a:11:ec:15:b1:4a:34:33:46:e6:aa:
a0:0e:c6:e9:7c:b2:33:5e:ab:8a:3e:fa:68:e9:27:
dd:6c:b9:dc:af:2c:f8:01:ab:4f:6e:25:46:e9:e9:
8e:e1:94:11:85:b9:8c:d4:cf:42:9a:c3:c9:85:6a:
2a:c7:da:4d:c8:b9:2c:76:90:5d:ac:3e:a0:2e:a1:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:11:48:92:D9:B8:8A:29:FF:8E:C3:93:E2:67:41:B8:BD:84:40
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:860d::/48
Signature Algorithm: sha256WithRSAEncryption
40:91:e3:7e:19:d2:f8:49:06:b2:1d:f1:d7:ce:3c:9c:06:6a:
76:7c:14:39:5e:bb:35:1d:6a:59:9f:4f:b5:93:da:00:ae:e3:
98:d1:fe:5d:ff:82:2b:54:15:9b:ba:63:96:69:76:7e:f3:9c:
ae:36:97:d8:23:6e:53:d0:50:43:52:f5:1a:15:c6:bc:8c:8b:
63:0b:7e:be:d9:62:19:60:f5:b2:d3:b8:bf:b1:24:c3:0f:b9:
db:48:ad:80:83:9a:c7:80:59:07:80:ea:39:95:70:1d:bb:5b:
33:21:0e:90:87:55:41:8c:a8:32:8b:2a:83:d0:71:c6:b9:a2:
05:ca:25:55:79:d6:86:52:35:3a:93:76:3d:92:09:ca:58:2b:
05:b9:ea:b8:3f:de:fb:81:e0:34:6d:31:4c:e1:6e:d7:8e:40:
6a:8a:44:31:f4:21:61:d0:39:f4:3f:c4:a1:f5:fb:46:46:12:
f2:94:45:19:2f:7c:46:71:3c:0c:91:12:82:04:e5:2d:c3:db:
43:81:2a:89:9d:01:33:b6:6f:6b:0b:09:73:2e:eb:93:52:12:
e6:d8:57:60:9b:29:60:8d:d7:c2:cd:85:a5:73:09:73:d7:52:
f4:3c:de:fd:ff:3f:fd:44:d3:0f:2f:db:76:ac:de:ab:2e:1a:
b4:a3:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:06:54 2025 by rpki-client