Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: GkQN5b+c9nXy+XfMK7TgKY3weRqjtWJBdOPIF6k8WI4=
Subject key identifier: 33:CD:15:C6:71:4A:68:FF:7C:BB:F8:CC:09:A0:F3:6B:16:96:E3:23
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 3BC3ED8A81B3C650A8A5C0D0ECB007C9BE2ACE13
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:43:03 +0000
ROA not before: Mon 10 Apr 2023 06:38:03 +0000
ROA not after: Mon 08 Apr 2024 06:43:03 +0000
asID: 50555
IP address blocks: 2a12:dd47:860e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c3:ed:8a:81:b3:c6:50:a8:a5:c0:d0:ec:b0:07:c9:be:2a:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:38:03 2023 GMT
Not After : Apr 8 06:43:03 2024 GMT
Subject: CN=33CD15C6714A68FF7CBBF8CC09A0F36B1696E323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:b0:8b:82:38:bb:0a:97:59:2b:11:59:32:
bf:9a:c0:84:33:44:65:87:7e:cb:c8:d6:be:01:dd:
0b:b6:40:e6:d7:36:dd:4b:b8:1c:4f:cd:d2:9a:d2:
97:1b:d7:7f:c5:af:39:87:5e:30:ad:75:6f:ea:63:
ec:db:4f:bc:13:61:7d:ef:50:76:57:e8:6e:10:23:
b1:e4:9e:41:5f:dd:49:48:a8:fc:b0:2b:89:b0:b8:
fd:b1:70:80:b1:9c:3a:16:5e:fd:d0:34:d6:3b:22:
65:9a:f6:43:78:b7:ed:b8:ac:f9:eb:56:8a:5a:b4:
f6:ec:9e:e3:13:9c:a4:b8:2b:22:52:93:3d:f0:2e:
45:2a:e3:27:b5:e4:6d:a7:ad:40:c2:7f:75:6a:a9:
67:0c:0e:70:51:2e:6e:97:3b:32:fe:6d:ae:64:52:
ec:a7:3c:80:df:51:85:cf:02:c1:f9:39:65:65:e5:
ac:ad:bc:9a:a3:d3:62:82:6a:13:cd:19:2f:af:6a:
6c:00:16:78:42:b4:0a:bd:9a:c8:49:3a:b9:1e:d9:
3e:c1:5e:13:bf:cf:78:34:91:db:b3:08:bc:3f:a4:
ff:b6:dc:db:81:ac:cc:f1:28:c9:81:ac:61:98:6e:
6d:35:d0:61:30:51:56:8a:dd:df:6b:b8:31:b7:0e:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:15:C6:71:4A:68:FF:7C:BB:F8:CC:09:A0:F3:6B:16:96:E3:23
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:860e::/48
Signature Algorithm: sha256WithRSAEncryption
5e:5d:fd:cf:bb:30:49:10:54:c6:b8:ca:ac:6f:56:99:d4:7a:
92:54:ce:d1:d1:8b:7d:89:37:aa:b1:37:89:de:b3:ff:4f:1f:
0f:1e:e9:11:8a:e8:3b:45:f5:5a:67:e1:3d:e9:44:2e:29:49:
69:b7:ee:61:c6:33:61:c1:04:65:e7:e5:ab:27:69:c8:02:f7:
ad:ca:30:10:ef:fb:f0:29:af:39:47:9c:38:de:9a:3e:e6:4b:
2d:84:29:3b:89:a8:cb:a7:02:c4:7b:b7:04:8b:41:2f:2c:8d:
04:bc:79:38:8a:8d:c7:76:09:fb:ba:0b:b9:b4:1f:4c:e5:1c:
dd:15:f6:c6:e7:ec:32:f2:2d:25:1f:73:cf:b5:3a:cc:7b:f2:
5e:91:1f:0d:62:5b:47:fa:cb:05:46:1c:8c:87:53:20:5a:87:
2a:fc:29:8f:d1:c3:44:ed:9d:d4:f8:9f:3a:18:6d:3f:94:1e:
64:1b:4a:72:a8:a9:b7:e4:e2:02:09:d5:99:63:95:5a:f6:ab:
88:92:59:e1:c7:2c:02:9c:9c:67:16:5f:f9:8f:55:61:ba:6b:
f6:3a:e6:0f:48:06:63:17:32:a7:65:ce:46:5d:aa:3c:8a:aa:
68:6f:8c:2b:f7:5f:6c:f9:41:c6:d5:15:4a:9e:26:ab:55:69:
79:72:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:08:00 2025 by rpki-client