Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939373632.roa
File: 326131323a646434373a333930303a3a2f34302d3438203d3e20313939373632.roa (raw, json)
Hash identifier: Tx5EmCujieg8yXUwQganBJiT20tUKhAspIAUaAKh+b4=
Subject key identifier: F0:39:8D:3A:47:07:A9:77:1B:3C:E3:ED:16:55:95:A4:CB:8A:7D:2E
Certificate issuer: /CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
Certificate serial: 74FA8FF81AB00DA3D75C4F222E266BB5F6167F19
Authority key identifier: 33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
Authority info access: rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
Subject info access: rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939373632.roa
Signing time: Fri 14 Apr 2023 14:54:50 +0000
ROA not before: Fri 14 Apr 2023 14:49:50 +0000
ROA not after: Fri 12 Apr 2024 14:54:50 +0000
asID: 199762
IP address blocks: 2a12:dd47:3900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fa:8f:f8:1a:b0:0d:a3:d7:5c:4f:22:2e:26:6b:b5:f6:16:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
Validity
Not Before: Apr 14 14:49:50 2023 GMT
Not After : Apr 12 14:54:50 2024 GMT
Subject: CN=F0398D3A4707A9771B3CE3ED165595A4CB8A7D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:88:74:c1:cf:b8:91:53:87:b0:13:79:7f:
c9:ce:c2:54:96:94:d5:d8:f8:00:07:2d:3e:e0:9a:
69:3f:4d:a7:db:65:25:a5:24:84:be:e2:68:39:1e:
b0:e9:de:6c:b7:aa:0f:df:d8:4a:69:98:71:74:83:
c1:68:85:93:9e:c4:1a:bc:0c:dd:d4:6f:88:fb:1f:
38:b8:48:2a:18:09:0c:9f:9e:eb:9a:52:96:13:c2:
6e:6b:da:58:6c:fe:f7:e4:38:c5:36:6f:5e:36:38:
ac:f2:60:da:81:c4:74:16:2a:92:e8:5b:76:a3:8f:
27:94:e7:fc:a6:14:db:47:ed:a7:db:cb:5c:85:e1:
76:29:e7:56:07:6f:ed:6b:21:62:5f:24:67:0a:0c:
36:60:be:74:0e:a1:9f:f4:d0:08:93:a5:4d:48:a9:
57:47:ff:57:86:4d:25:6d:9c:b6:94:95:f4:bc:05:
3b:b9:1b:26:e2:eb:0e:42:6e:01:bd:d0:a6:23:09:
66:7f:3f:6c:dc:a2:e6:82:77:61:b4:27:13:d6:92:
ef:ec:07:1e:4f:6a:19:ef:fc:18:a5:c2:c2:79:27:
56:0c:2c:b5:b2:af:47:1d:06:71:72:36:18:fc:6d:
5c:42:9d:56:f8:f4:2a:16:c4:99:87:67:bd:11:a0:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:8D:3A:47:07:A9:77:1B:3C:E3:ED:16:55:95:A4:CB:8A:7D:2E
X509v3 Authority Key Identifier:
keyid:33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3900::/40
Signature Algorithm: sha256WithRSAEncryption
08:90:15:bb:0d:cc:a5:65:28:f6:0d:60:3f:12:0f:cc:99:af:
55:85:80:94:ba:41:d5:33:ce:dc:b5:23:7e:74:2a:03:f2:9a:
fa:e9:79:35:08:66:36:5e:6a:b7:8b:d0:6f:9d:99:9c:c5:0d:
18:37:82:01:44:e4:b0:84:4c:ac:42:99:92:64:c8:e0:6b:a3:
49:71:50:3d:07:e7:d0:bf:49:88:f4:fe:39:cb:1a:a1:cc:dd:
a2:88:1a:69:1e:81:0b:59:8e:e1:06:51:02:03:5c:06:16:14:
ea:68:f3:56:dd:7a:ec:04:0a:33:95:30:db:53:3d:31:17:b6:
41:69:b2:21:21:6d:b5:02:b8:98:e2:ae:e2:29:c1:a8:4e:4a:
ac:77:b1:6d:10:33:af:11:5b:89:54:c1:10:c1:0a:04:dc:8c:
3b:73:f5:42:55:5c:34:07:34:a8:18:3d:7f:3b:d4:55:8f:33:
60:40:53:17:9e:9a:db:25:d0:39:3a:fb:87:46:fc:8b:7c:28:
b7:a8:c8:51:a1:a2:be:72:69:35:a9:fd:00:75:ff:90:13:84:
b1:b6:dc:74:e3:5e:bd:9e:70:c6:40:e4:f1:4e:f2:40:6a:36:
0b:ca:ba:04:18:c5:9b:db:e0:d4:32:32:23:8d:ca:d4:ec:4d:
09:f9:ed:92
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUdPqP+BqwDaPXXE8iLiZrtfYWfxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMyRDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NF
M0VCQjBDMjAeFw0yMzA0MTQxNDQ5NTBaFw0yNDA0MTIxNDU0NTBaMDMxMTAvBgNV
BAMTKEYwMzk4RDNBNDcwN0E5NzcxQjNDRTNFRDE2NTU5NUE0Q0I4QTdEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVYh0wc+4kVOHsBN5f8nOwlSW
lNXY+AAHLT7gmmk/TafbZSWlJIS+4mg5HrDp3my3qg/f2EppmHF0g8FohZOexBq8
DN3Ub4j7Hzi4SCoYCQyfnuuaUpYTwm5r2lhs/vfkOMU2b142OKzyYNqBxHQWKpLo
W3ajjyeU5/ymFNtH7afby1yF4XYp51YHb+1rIWJfJGcKDDZgvnQOoZ/00AiTpU1I
qVdH/1eGTSVtnLaUlfS8BTu5Gybi6w5CbgG90KYjCWZ/P2zcouaCd2G0JxPWku/s
Bx5Pahnv/BilwsJ5J1YMLLWyr0cdBnFyNhj8bVxCnVb49CoWxJmHZ70RoHhfAgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQU8DmNOkcHqXcbPOPtFlWVpMuKfS4wHwYDVR0j
BBgwFoAUMy0N24ve9Mx5hHTJWXn9zOPrsMIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMTk5NzYyLzIvMzMy
RDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NFM0VCQjBDMi5jcmwwZQYIKwYB
BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xLzMzMkQwRERCOEJERUY0Q0M3OTg0NzRDOTU5NzlGRENDRTNFQkIwQzIuY2Vy
MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jby9y
ZXBvL0FTMTk5NzYyLzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzM5MzAzMDNhM2Ey
ZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uc5
MA0GCSqGSIb3DQEBCwUAA4IBAQAIkBW7DcylZSj2DWA/Eg/Mma9VhYCUukHVM87c
tSN+dCoD8pr66Xk1CGY2Xmq3i9BvnZmcxQ0YN4IBROSwhEysQpmSZMjga6NJcVA9
B+fQv0mI9P45yxqhzN2iiBppHoELWY7hBlECA1wGFhTqaPNW3XrsBAozlTDbUz0x
F7ZBabIhIW21AriY4q7iKcGoTkqsd7FtEDOvEVuJVMEQwQoE3Iw7c/VCVVw0BzSo
GD1/O9RVjzNgQFMXnprbJdA5OvuHRvyLfCi3qMhRoaK+cmk1qf0Adf+QE4Sxttx0
4169nnDGQOTxTvJAajYLyroEGMWb2+DUMjIjjcrU7E0J+e2S
-----END CERTIFICATE-----
Generated at Tue May 27 19:14:06 2025 by rpki-client