Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: ZJjSUlOclghMynDke26viVtaLQoAPOxdVQ92xZxPPwY=
Subject key identifier: D3:11:40:4D:0B:A0:B2:03:B6:2D:9E:41:C7:47:5E:6F:71:E7:10:10
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 142DA40C936C1DA3C0D240187045A14F4BBA5F
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 17 Apr 2023 21:15:01 +0000
ROA not before: Mon 17 Apr 2023 21:10:01 +0000
ROA not after: Mon 15 Apr 2024 21:15:01 +0000
asID: 211604
IP address blocks: 2a12:dd47:3d01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2d:a4:0c:93:6c:1d:a3:c0:d2:40:18:70:45:a1:4f:4b:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 17 21:10:01 2023 GMT
Not After : Apr 15 21:15:01 2024 GMT
Subject: CN=D311404D0BA0B203B62D9E41C7475E6F71E71010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:c4:ab:30:83:4a:73:fb:7f:90:9a:f0:0b:
26:47:a2:bb:f7:1b:64:bb:23:64:70:74:0a:9d:f1:
1a:04:fa:9a:a5:dc:93:23:1a:9c:8b:b2:58:f3:aa:
9c:0b:02:24:e5:85:7a:b4:42:30:27:82:73:c6:ce:
b2:e1:7a:55:8a:6c:ce:e4:08:37:d0:8e:ac:fc:65:
06:34:e9:f6:84:e4:fb:28:98:09:44:f7:3d:80:1f:
fa:a3:75:5a:e6:d2:b6:80:ac:eb:ed:6c:ab:98:0e:
e9:21:b4:a6:31:63:aa:59:f3:8b:55:0c:c5:29:a9:
f6:1f:1b:e2:de:6e:97:c9:ce:0b:87:a5:06:65:92:
44:ba:5a:5a:52:da:66:5f:01:00:ed:d0:7e:42:2c:
2c:48:f2:c2:c5:01:1e:22:5b:79:ba:39:57:09:65:
df:ea:bf:47:8e:9b:cb:5e:cc:fc:ea:0a:9b:e6:09:
5a:6c:9c:cd:c6:fd:dc:25:9e:3d:cc:41:d8:3c:82:
11:51:28:6b:27:ff:5b:2e:ec:18:c4:ed:cb:b8:9b:
45:57:3a:25:a0:73:6b:10:60:6b:4b:7e:c8:0d:8b:
77:d6:5f:5c:20:bd:27:42:1e:34:de:94:62:64:14:
ab:90:a9:8b:c9:29:03:01:63:91:da:da:bc:d2:70:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:40:4D:0B:A0:B2:03:B6:2D:9E:41:C7:47:5E:6F:71:E7:10:10
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3d01::/48
Signature Algorithm: sha256WithRSAEncryption
d3:1b:11:cf:79:23:a2:2c:a3:77:44:97:fd:9e:8b:f5:0f:92:
ea:b5:ac:32:56:ec:ac:5f:28:ce:c0:36:59:f7:9d:bf:91:50:
d4:4f:78:08:11:aa:d9:42:00:cc:18:cc:dd:de:3d:40:48:18:
aa:c8:81:11:7c:4a:09:43:c0:04:93:1e:a5:33:92:b7:2b:44:
fc:09:fc:51:47:2e:92:5f:75:3c:c5:d8:50:7e:95:90:d5:d9:
aa:9e:f2:64:8b:b0:ac:85:ee:5c:2d:ec:6f:cd:b3:6b:37:ae:
da:39:97:92:0b:f9:b3:c8:0d:b0:10:6a:14:a8:1e:08:ec:eb:
47:db:ce:15:6c:20:72:67:4f:4a:9f:44:86:38:02:ab:5c:d3:
87:d7:19:54:ca:72:93:eb:dc:cb:0a:ef:d3:37:56:fd:80:b3:
fe:54:71:15:fa:52:b5:28:59:67:ba:e3:15:5c:57:6c:33:82:
67:f6:98:cd:c8:4e:cc:91:65:2d:7c:e5:e2:ea:2d:4b:a8:09:
52:23:66:17:ad:98:43:25:2d:0f:56:b8:f7:cd:bc:e4:a5:79:
1a:5c:58:3b:01:7a:1d:9b:72:d3:aa:5e:a5:3e:49:ee:ee:34:
9c:e7:f2:14:22:43:0d:53:8c:68:f2:ea:41:f7:f9:54:84:da:
b5:ac:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:48:35 2025 by rpki-client