Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: eQxsFmcpDSZch6Y3+zRYhH/08YmlFoinq5nyz5ZN3eE=
Subject key identifier: 08:6D:D7:AF:5A:B7:24:A2:65:B7:8E:4A:75:9F:C1:C1:66:3F:6C:DA
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 0E23EA7FE9439EB49B2A2038F1B06C3E9A9C3613
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
Signing time: Tue 25 Apr 2023 18:18:38 +0000
ROA not before: Tue 25 Apr 2023 18:13:38 +0000
ROA not after: Tue 23 Apr 2024 18:18:38 +0000
asID: 211604
IP address blocks: 2a12:dd47:3def::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:23:ea:7f:e9:43:9e:b4:9b:2a:20:38:f1:b0:6c:3e:9a:9c:36:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 25 18:13:38 2023 GMT
Not After : Apr 23 18:18:38 2024 GMT
Subject: CN=086DD7AF5AB724A265B78E4A759FC1C1663F6CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:3d:f6:85:dc:2a:fd:2e:8e:7c:c1:17:a9:
3f:ad:55:d9:39:c4:c8:ea:ae:a5:9d:09:ac:cd:fc:
09:da:09:ed:26:b8:81:c9:16:20:a2:b2:f7:77:67:
2f:9b:72:94:d4:d3:87:f2:a2:27:7c:3a:82:3c:06:
80:03:cd:b7:8f:e9:e5:d4:1d:ee:af:32:d0:3c:cf:
f9:84:47:d9:b1:65:1d:1c:c9:94:59:67:f4:35:01:
99:46:c5:1c:4c:11:f7:e4:4c:07:60:18:32:77:41:
5f:38:f0:ce:a6:4f:5f:2f:e0:0d:6b:ba:1a:0f:06:
0d:fb:42:42:a1:17:ea:91:b7:e5:9d:75:8c:ac:8c:
cb:69:0e:e5:e8:ad:60:84:93:af:6d:7f:dd:b6:03:
10:ab:66:ff:0e:61:0f:ec:92:a6:e5:b5:b1:cc:b1:
d0:7a:19:d6:96:66:1f:a4:a8:ff:81:f6:ba:8d:34:
ab:d2:8f:03:8a:87:dc:1c:c6:1d:a4:b1:c0:49:18:
fd:30:ca:5b:75:a2:68:10:9b:36:1a:30:e9:6b:5f:
a5:28:2a:00:0e:d2:99:e8:58:a1:04:8d:c0:ea:de:
40:ce:92:c7:05:44:c6:9a:1c:59:ff:1d:38:0c:4a:
0b:73:57:73:d6:08:68:4a:45:ec:22:6e:c7:e4:5f:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6D:D7:AF:5A:B7:24:A2:65:B7:8E:4A:75:9F:C1:C1:66:3F:6C:DA
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336465663a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3def::/48
Signature Algorithm: sha256WithRSAEncryption
35:0e:28:08:bf:b4:ed:0e:24:34:62:d7:10:26:df:44:94:a0:
77:7e:37:c7:56:59:90:f7:4d:a9:4f:cd:21:0a:d9:1d:99:26:
46:91:81:9c:9b:32:8f:3b:27:96:2d:80:a3:9f:39:6d:a3:93:
d8:70:32:bd:df:a2:4b:c6:7f:5f:4f:84:a7:86:cb:55:ca:09:
c0:ca:4a:c0:2a:38:bf:d4:bf:9f:1b:c8:3b:11:0b:48:45:a6:
7c:25:6e:10:fc:b1:af:25:89:59:ad:f3:1b:11:84:86:7f:df:
c8:fe:60:fe:db:8d:52:45:24:ce:d3:f0:72:bb:dc:06:5e:d2:
08:95:4c:e8:8b:c1:c6:9b:22:ca:05:71:2d:a5:5d:b5:00:13:
5d:51:57:ad:02:4a:7d:9e:05:99:94:75:3e:bc:b4:3e:95:f0:
49:66:ee:b0:ad:ce:c8:cc:8a:c4:57:3a:bb:62:f8:84:01:42:
1d:5d:4e:65:d7:40:dd:ee:ea:32:4b:00:ae:a8:de:a3:4e:6b:
53:41:f5:35:8b:e1:66:93:2b:84:f0:18:58:84:b9:16:fe:e1:
d3:1a:b9:6a:18:65:78:b9:33:f1:9a:1f:a1:f7:be:a8:01:8f:
b1:71:15:9d:91:11:a2:59:8d:2f:1f:b5:32:b8:48:00:45:73:
38:88:a5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:50:43 2025 by rpki-client