Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa
File: 326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: LYgb5pzaHPoDoCFHFjy2oyQ7mmYhorIhG8fS0Mq8Otc=
Subject key identifier: 49:E0:0D:7A:73:39:19:13:62:D8:9E:5E:DB:00:E1:D2:91:AD:39:54
Certificate issuer: /CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Certificate serial: 42B5F4CB68CACA2A41760CC35BBBE767D137D8BC
Authority key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority info access: rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject info access: rsync://rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa
Signing time: Wed 19 Apr 2023 12:28:22 +0000
ROA not before: Wed 19 Apr 2023 12:23:22 +0000
ROA not after: Wed 17 Apr 2024 12:28:22 +0000
asID: 31898
IP address blocks: 2a12:dd47:80e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b5:f4:cb:68:ca:ca:2a:41:76:0c:c3:5b:bb:e7:67:d1:37:d8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Validity
Not Before: Apr 19 12:23:22 2023 GMT
Not After : Apr 17 12:28:22 2024 GMT
Subject: CN=49E00D7A7339191362D89E5EDB00E1D291AD3954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:c8:9e:a3:9c:bb:dd:73:03:af:7a:ee:c7:
58:a0:6f:51:87:de:a0:18:37:ba:38:c5:27:0b:d4:
c7:65:8e:05:0d:81:1a:bf:25:aa:b9:7e:3c:1e:22:
14:33:51:bc:a1:93:99:cc:40:4b:67:6f:1c:25:e1:
0a:33:03:ad:75:9d:e0:64:b9:11:2e:f1:92:0b:fa:
bd:da:9f:0f:ef:8c:ec:13:69:15:46:8f:a4:5d:e7:
27:12:f9:0e:d3:a6:73:90:8f:43:c2:30:ba:83:31:
1c:ac:ed:54:6f:59:93:17:74:1d:dc:55:fd:dc:52:
6c:d8:8a:60:df:f3:51:79:a4:90:bc:fb:b1:76:dc:
6c:b2:05:d0:0d:01:59:05:34:9f:f3:00:0d:ee:7f:
a8:2d:ae:59:fa:5a:39:d5:b5:1d:31:5b:43:32:b9:
d7:b9:1c:8b:0b:79:a2:c4:a2:49:aa:ab:36:6e:8f:
18:f8:56:e1:ca:59:8a:cc:9e:a8:07:12:20:98:da:
d1:ed:f2:d9:a4:57:82:5a:79:70:f0:9f:18:7a:30:
b9:68:60:77:a6:a7:6c:52:57:77:74:13:07:06:6e:
bd:a2:11:88:f0:67:23:3d:0d:3f:67:73:77:1a:3f:
01:ee:5b:38:91:48:3a:13:d4:9a:2b:ab:a5:6c:16:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:0D:7A:73:39:19:13:62:D8:9E:5E:DB:00:E1:D2:91:AD:39:54
X509v3 Authority Key Identifier:
keyid:CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS203843/0/326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:80e4::/48
Signature Algorithm: sha256WithRSAEncryption
6e:35:09:b7:e2:7a:55:d0:39:11:d4:24:78:4f:5b:56:83:da:
6f:67:5a:78:3c:4c:bf:4d:34:6c:1a:93:cd:9a:a5:b2:9f:44:
0d:e0:5c:18:c7:68:e6:35:4d:15:21:e6:d6:8b:f1:9e:be:2e:
72:87:0c:ec:89:14:b8:96:cc:61:61:7f:eb:61:7e:5a:b6:8c:
9b:61:eb:a9:5d:6b:fb:ba:e6:53:92:4a:99:a8:45:b9:c5:a6:
4e:f0:57:06:0b:eb:1f:7c:2e:9e:f3:d0:f6:f7:8b:22:9e:49:
65:aa:58:5d:b3:9f:d2:d7:be:34:70:3e:f7:df:fd:ac:a3:1e:
14:93:7b:75:4c:2d:67:10:d9:cf:b4:b9:86:fd:57:0b:ef:ac:
a1:14:ec:77:72:a8:a5:c3:66:70:71:3c:4d:0d:5a:79:71:94:
a3:82:b8:d9:b4:09:2b:35:b2:24:44:32:49:37:ea:58:82:b3:
77:7d:0e:63:f5:12:80:bb:c3:53:fc:54:58:e9:96:7d:c6:8f:
23:8f:3c:e3:ee:b1:dc:94:5d:41:b2:47:cf:f9:a5:81:83:59:
47:77:3e:eb:b9:34:ff:e1:f7:90:7b:c5:96:24:2f:1d:fd:8b:
85:c6:78:cd:28:35:5b:38:36:8b:aa:31:b6:cf:e3:36:93:e1:
0c:97:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 19:15:59 2025 by rpki-client