Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: LG10Ug+IMQtMuFuu9/rAxxIx11hRGhd6kR1TXGK5Jns=
Subject key identifier: 60:F3:DD:3D:90:6B:30:6D:87:BA:79:15:B1:82:50:8D:F9:86:79:21
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 27704125D2A6E1C82AD7B66A1ADF99285DFBE292
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa
Signing time: Thu 13 Apr 2023 14:08:03 +0000
ROA not before: Thu 13 Apr 2023 14:03:03 +0000
ROA not after: Thu 11 Apr 2024 14:08:03 +0000
asID: 211604
IP address blocks: 2a12:dd47:8072::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:70:41:25:d2:a6:e1:c8:2a:d7:b6:6a:1a:df:99:28:5d:fb:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 13 14:03:03 2023 GMT
Not After : Apr 11 14:08:03 2024 GMT
Subject: CN=60F3DD3D906B306D87BA7915B182508DF9867921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:1f:0c:62:56:db:ba:a1:86:90:37:a9:47:
26:b9:19:70:93:5f:2b:0b:ef:c0:6b:00:f8:7a:39:
a8:cb:c4:50:6a:b8:c8:80:e8:76:b6:6a:57:e2:91:
70:8d:ce:0b:2d:8e:d8:14:27:1b:38:af:6d:ff:be:
76:0c:4b:f4:72:bc:e4:96:c8:da:24:c9:11:56:fc:
4a:d7:11:0b:ca:b3:23:93:a8:c2:c2:43:18:70:f8:
07:02:68:c2:6e:34:08:9e:e7:13:d6:b1:96:ce:62:
fc:93:03:3d:d5:48:5c:bc:34:da:73:4d:29:1c:cc:
17:2b:4f:ab:9d:5d:91:7b:83:0a:a4:f7:a0:9f:22:
5e:a4:fe:f6:dc:e0:26:b2:f3:9c:6e:ed:88:80:b5:
f3:4f:ae:61:84:4d:4e:95:3b:e3:39:0b:b5:00:91:
f6:80:f1:72:04:05:80:81:03:27:bf:00:d2:b8:62:
14:a7:52:05:48:6b:ab:e7:db:3a:11:e8:d0:bb:88:
44:c7:e4:31:57:c3:90:3d:f2:49:ce:36:c5:5f:2a:
df:33:d9:2b:67:1b:4e:55:8f:8a:35:75:6f:d0:0e:
1f:55:51:1c:36:31:3f:b1:db:65:a3:4a:31:7d:a8:
d5:73:11:50:e8:be:a7:24:ba:c6:d0:06:a1:7a:cf:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:DD:3D:90:6B:30:6D:87:BA:79:15:B1:82:50:8D:F9:86:79:21
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8072::/48
Signature Algorithm: sha256WithRSAEncryption
b2:84:7f:c4:ee:17:b8:fc:8e:72:c3:54:8d:f9:4e:6f:b6:fb:
a2:74:66:59:58:32:8e:2b:a9:56:13:61:22:a4:a2:a5:bb:53:
d4:ab:61:c8:6b:f5:91:73:73:3f:00:de:4b:db:7f:6b:8b:f2:
a1:da:77:e2:e8:3c:bb:3c:1d:52:b0:f8:07:32:b6:bb:1d:ef:
80:2c:50:60:a1:c7:27:81:d2:d6:e7:b3:29:26:15:70:9f:94:
0f:61:80:a6:72:d2:2a:3d:75:a6:05:45:eb:76:a7:f2:46:98:
b2:97:08:b6:41:9f:4a:b7:cc:e7:2e:90:86:b1:37:cd:99:3c:
47:af:27:d6:9a:da:90:c0:a4:fa:6b:e3:17:6c:bb:38:d2:21:
ac:d0:89:94:ef:e3:58:a9:3f:72:da:3c:eb:1f:d7:10:1e:92:
38:64:db:d8:18:e2:ef:d8:61:5a:4e:ff:10:2c:10:6a:50:7b:
f8:4b:35:e2:2b:ae:13:9d:be:d5:91:9a:13:2d:95:1a:ee:d2:
8d:6b:fa:5d:95:c9:10:26:b4:b3:19:09:ec:0d:25:49:7e:5d:
0d:8c:3b:63:12:e8:dc:8c:7a:eb:3a:1c:81:f0:c0:04:16:e2:
40:f6:94:73:4c:59:8c:de:be:30:1f:ac:58:c7:e2:dd:fa:a4:
05:cf:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 19:09:24 2025 by rpki-client