Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336461643a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336461643a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: PckJoeiLbLFqrwCK+mQoKBBhF00l+697jwDQv7GE2Zo=
Subject key identifier: 4F:86:8A:E1:A9:D9:CB:E2:EA:B1:AF:3B:81:21:FC:9B:C6:67:92:99
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 2E4D2771613608B050B0169937D7996E7B6BA484
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461643a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 17 Apr 2023 00:59:08 +0000
ROA not before: Mon 17 Apr 2023 00:54:08 +0000
ROA not after: Mon 15 Apr 2024 00:59:08 +0000
asID: 211604
IP address blocks: 2a12:dd47:3dad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4d:27:71:61:36:08:b0:50:b0:16:99:37:d7:99:6e:7b:6b:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 17 00:54:08 2023 GMT
Not After : Apr 15 00:59:08 2024 GMT
Subject: CN=4F868AE1A9D9CBE2EAB1AF3B8121FC9BC6679299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:5a:2f:53:0a:76:e2:99:58:f2:b9:6d:4c:
8a:6e:28:95:f4:8f:23:50:4e:d8:4d:fc:cc:e6:7c:
dc:4e:4b:fd:0d:ef:c9:32:61:19:63:e9:7f:8c:93:
53:35:fd:c6:09:a0:46:58:7a:f9:c8:c3:ae:c9:2d:
1d:36:50:2e:aa:12:20:f2:37:bc:e7:a2:0c:44:d1:
e9:92:c8:57:71:19:a0:29:05:a5:7f:a3:e6:0d:b4:
be:be:27:01:98:22:94:dd:46:da:a7:94:37:58:d7:
3d:2d:41:d6:20:3a:a0:9e:83:e0:57:54:8b:da:2e:
81:e5:2c:d0:24:82:d9:42:e0:7a:25:b7:6c:bf:5e:
26:b1:59:88:3b:f5:0f:8a:d1:93:f2:3e:48:d9:d2:
51:68:94:37:8b:7e:33:57:45:1d:cb:17:27:13:91:
48:01:9c:26:6a:c7:11:28:69:d0:92:bf:14:81:c0:
bf:95:b6:6b:57:84:05:ee:e4:ef:a9:c9:4f:2e:f5:
31:5d:3c:af:a7:b1:5c:2a:e9:24:f5:55:f3:a4:ac:
3e:87:74:f1:7a:3f:d2:34:d7:16:66:90:3b:73:d4:
63:17:84:ba:22:82:03:72:24:99:9e:27:85:51:4e:
0e:37:0f:6b:ea:d9:ec:d4:b1:c5:b8:15:d5:20:b7:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:8A:E1:A9:D9:CB:E2:EA:B1:AF:3B:81:21:FC:9B:C6:67:92:99
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461643a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3dad::/48
Signature Algorithm: sha256WithRSAEncryption
21:7c:f4:3c:f4:f2:14:2c:e2:64:ee:a1:ef:51:fb:53:38:a0:
65:af:04:99:d3:fe:7a:2b:b5:f4:c7:06:62:9f:25:4a:cd:2f:
16:2a:3b:61:46:26:0b:64:c7:ab:e1:ac:af:5f:ac:54:a4:1f:
f0:d9:5b:c6:a2:cc:3d:bc:39:87:86:52:4e:89:03:0b:35:ff:
64:00:1a:fb:17:4b:1b:fb:24:05:44:af:5a:ac:23:a4:2d:10:
05:c1:c1:36:47:12:3a:2f:fe:aa:ef:d0:03:53:aa:49:0e:af:
66:60:6a:51:18:0a:67:e6:7e:5f:8e:20:b0:10:e0:2c:cc:4e:
e8:3e:16:7e:24:2b:e5:75:05:1c:bb:11:dc:65:3d:18:b5:d0:
5f:da:7b:10:29:05:ea:40:a5:e5:37:ce:63:21:e4:f7:37:6a:
25:68:ba:cc:df:c6:48:c0:af:c6:af:f0:8d:3f:13:c5:11:a9:
0b:f3:7f:f7:84:b7:7e:69:32:3f:8c:cd:79:68:e8:7d:b8:64:
17:f5:88:69:2e:23:95:8e:25:c4:d4:cc:95:31:f6:fb:f5:bd:
6a:6d:42:ff:cd:57:95:23:80:42:8d:11:c7:0d:0a:7a:6a:e6:
90:e4:61:b7:0c:ad:ea:75:b7:6b:eb:bd:ff:62:3c:4c:02:ca:
91:b8:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:51:50 2025 by rpki-client