Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: 5Eg9yY7k7kJcXk6x2wZVPpAOts0CqHJlrAxc+gM90dY=
Subject key identifier: 2F:F1:22:B9:93:18:74:E5:D7:A4:06:46:71:08:25:8A:95:86:11:7C
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 59B5C4F7F3CD4499F69D3347D373A6AF84DDA887
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 17 Apr 2023 00:58:54 +0000
ROA not before: Mon 17 Apr 2023 00:53:54 +0000
ROA not after: Mon 15 Apr 2024 00:58:54 +0000
asID: 211604
IP address blocks: 2a12:dd47:3daa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b5:c4:f7:f3:cd:44:99:f6:9d:33:47:d3:73:a6:af:84:dd:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 17 00:53:54 2023 GMT
Not After : Apr 15 00:58:54 2024 GMT
Subject: CN=2FF122B9931874E5D7A406467108258A9586117C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:83:19:d9:c9:ed:e5:e2:c6:f6:0d:a3:4c:
cc:8a:51:33:9f:42:af:b0:6c:b5:90:e5:0e:c1:0e:
64:30:b2:03:25:bf:19:22:48:3b:fe:59:16:c0:36:
ea:ec:c8:6b:a0:0d:49:85:f9:95:45:af:1a:d7:72:
c7:ec:c0:f0:76:1e:bc:ed:27:c1:2c:46:ef:89:3d:
f9:ee:e6:b2:ee:98:81:71:ea:7c:79:1b:c0:d6:28:
fb:a9:43:90:c3:93:14:32:f3:a0:5c:e1:0a:5a:13:
5d:eb:84:f8:ba:5e:81:8f:2f:d2:e0:8c:ff:27:ff:
31:3e:11:92:08:e5:33:be:51:5f:2a:04:89:35:9b:
f4:cd:d5:f3:73:c9:27:89:c9:f4:0f:61:c1:9f:40:
e9:78:e6:8c:8d:93:95:96:61:6a:66:bb:da:c9:cf:
e2:62:99:7d:cb:dc:01:75:40:fb:26:6f:03:69:87:
eb:d1:bd:e7:f2:bb:19:8e:04:61:96:be:62:d4:5d:
6c:8f:51:e9:9b:cc:b4:42:61:35:27:23:c0:0d:68:
3d:fb:cb:9a:60:7b:cc:33:75:b3:80:59:d0:d9:4c:
30:1c:e9:2e:cd:21:e8:fc:0c:82:3e:de:dc:35:e2:
ca:e0:64:a0:c2:62:99:de:c6:32:b7:06:64:f0:79:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:22:B9:93:18:74:E5:D7:A4:06:46:71:08:25:8A:95:86:11:7C
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3daa::/48
Signature Algorithm: sha256WithRSAEncryption
a2:6e:b7:d3:2e:17:b2:4b:c7:d5:fa:4b:6f:20:e3:e3:ce:62:
13:d8:e0:cd:94:52:09:42:dd:7d:80:dc:72:99:d0:29:ff:34:
d3:36:42:2b:17:22:2e:c0:c6:08:5a:20:a3:fc:e1:83:ac:e3:
cb:a1:eb:00:c6:62:32:6f:3e:02:e9:4d:a3:eb:99:05:bc:d6:
9f:7c:70:fa:fe:09:7f:67:7e:a2:54:04:4b:68:e8:1f:cf:51:
0a:97:bf:70:19:08:12:16:dd:70:85:d7:b3:5b:ee:80:da:b4:
92:7a:34:a8:99:c8:e8:38:6d:47:c8:86:aa:0d:43:e7:bb:af:
1f:8a:af:f1:5e:0d:47:9d:28:b7:3e:36:ce:fe:5f:3f:a4:68:
60:6a:c8:1f:fc:7a:00:11:92:02:17:c2:c5:42:48:13:7b:8b:
ac:e7:0b:7e:d3:ef:88:89:08:94:0a:c0:3d:e2:63:83:93:91:
75:08:ab:e9:91:e2:01:32:6b:1b:f6:3a:77:fc:5a:05:32:cb:
4d:45:1e:55:6b:37:91:fc:f0:43:86:e9:c4:c9:e8:7c:de:35:
12:88:4c:3f:2e:8f:66:ff:ef:d2:76:56:d6:d4:ad:af:c7:e9:
08:58:87:93:4a:55:5f:fe:e9:9a:e3:4e:ec:e9:d3:99:53:d9:
66:c3:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:53:40 2025 by rpki-client