Route Origin Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa
File: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier: 1KTbx3G6shqNBW5r7QO2Sj72i8MNEEjY9pCSnZR+AEQ=
Subject key identifier: FA:74:7F:87:D4:86:44:A7:26:7D:8B:9E:51:0C:4B:AF:4D:53:29:F4
Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial: 6C53014DC0DAD72810D812283E4FA1B507D83A48
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa
Signing time: Mon 10 Apr 2023 06:43:04 +0000
ROA not before: Mon 10 Apr 2023 06:38:04 +0000
ROA not after: Mon 08 Apr 2024 06:43:04 +0000
asID: 50555
IP address blocks: 2a12:dd47:860f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:53:01:4d:c0:da:d7:28:10:d8:12:28:3e:4f:a1:b5:07:d8:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Validity
Not Before: Apr 10 06:38:04 2023 GMT
Not After : Apr 8 06:43:04 2024 GMT
Subject: CN=FA747F87D48644A7267D8B9E510C4BAF4D5329F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:7d:43:c7:0b:52:4d:2a:16:33:07:4f:32:
67:0d:6c:0e:d3:b6:09:8d:eb:14:81:64:81:c5:37:
12:40:c0:d5:bc:d1:ad:13:92:89:23:e0:a9:18:48:
88:ff:d6:dc:f0:c7:5a:55:52:94:52:54:2b:b9:90:
48:77:44:3d:d2:96:ea:cf:5c:10:17:a6:59:5b:47:
b8:2b:f3:98:a3:70:45:6d:98:d1:ce:65:68:44:b4:
57:d8:28:d9:10:40:e6:76:7d:20:f1:46:f7:f3:a9:
d0:0e:6a:f7:53:71:97:60:fa:ca:59:aa:af:0b:50:
aa:ff:10:b8:f1:1f:94:bd:53:b8:29:51:95:7f:77:
99:1c:0c:86:27:67:3c:f7:d5:43:5c:d0:79:99:7b:
99:01:7e:b1:c5:a0:4c:45:d3:b0:d0:95:a5:1b:02:
bc:1b:e1:01:93:4b:9e:66:74:ba:82:8c:36:8d:3b:
f2:da:bb:4d:75:ef:2e:ba:2d:cb:24:ba:3e:a3:4c:
2a:35:78:42:66:a0:e9:83:6a:3e:c4:31:7a:78:ca:
a1:75:57:98:ab:e8:34:5b:58:a9:41:52:c5:d5:de:
16:5b:a9:62:45:91:d2:8e:54:b0:2d:3b:27:55:6a:
20:7e:2c:7b:a0:95:57:6e:21:29:d8:f5:0e:c8:3c:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:7F:87:D4:86:44:A7:26:7D:8B:9E:51:0C:4B:AF:4D:53:29:F4
X509v3 Authority Key Identifier:
keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:860f::/48
Signature Algorithm: sha256WithRSAEncryption
86:13:c8:57:85:3d:4f:56:d7:7d:86:9d:1b:09:90:82:de:47:
47:55:5c:29:01:9a:7e:94:bf:b5:0d:65:3f:2c:ec:6a:db:8f:
42:6c:1b:1e:09:aa:33:6f:35:71:40:a5:fd:4e:97:4a:7d:79:
34:9c:73:1d:6f:92:86:a1:4e:0b:e2:55:ff:4d:d9:aa:75:6e:
eb:75:e3:1f:38:78:4d:70:7f:f1:92:bb:99:5c:fa:fe:8b:b5:
d5:cd:1b:99:c7:8f:a6:68:60:11:3f:1e:aa:00:f2:b6:b9:ad:
dc:20:08:4f:dd:9b:bf:cb:0c:8b:17:d7:13:d6:4e:98:d5:a3:
ea:44:db:d9:f1:16:7c:c0:3a:30:c5:35:40:93:c5:8a:26:29:
be:d7:6c:d9:19:6e:44:68:7a:1a:c5:dc:cf:8e:73:4b:30:c9:
bc:f8:fe:ce:ee:98:13:2f:3f:59:50:45:e0:3a:8b:5f:58:5f:
dd:b4:0f:3e:5d:dd:48:db:a0:74:70:38:72:04:a1:97:06:2e:
32:d6:55:06:e5:b8:4a:69:68:62:e8:33:ac:36:fa:0a:24:f2:
f3:8e:ce:a1:3a:92:4f:0d:40:26:1a:99:45:5b:9d:60:56:9b:
bd:ae:86:d4:2c:dc:38:ec:0d:e0:83:2e:fd:cb:71:97:b4:81:
27:04:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:15:29 2025 by rpki-client