Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a383037653a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: 55iXV84bgKhqmrHibU1F/S7mNytLLKrJ7HEWu2TZDqY=
Subject key identifier: 10:67:8D:56:CA:44:F3:A2:9A:66:D2:33:9B:0B:89:90:8D:1E:22:03
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 0C39294870B71902B20980AAF0BEAC3EAB44B01A
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34382d3438203d3e20323131363034.roa
Signing time: Thu 13 Apr 2023 14:08:03 +0000
ROA not before: Thu 13 Apr 2023 14:03:03 +0000
ROA not after: Thu 11 Apr 2024 14:08:03 +0000
asID: 211604
IP address blocks: 2a12:dd47:807e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:39:29:48:70:b7:19:02:b2:09:80:aa:f0:be:ac:3e:ab:44:b0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 13 14:03:03 2023 GMT
Not After : Apr 11 14:08:03 2024 GMT
Subject: CN=10678D56CA44F3A29A66D2339B0B89908D1E2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:00:b3:a5:ad:02:e1:29:dc:4f:47:a0:51:
39:ef:62:f1:1e:8d:f1:10:0f:d5:4a:2c:4b:6b:4c:
8e:33:25:9a:a3:7a:fe:ca:13:be:bb:a3:a4:d3:1e:
91:ed:37:fc:3d:d8:99:3c:a5:34:d6:cd:d7:63:fe:
e3:8b:fb:b3:59:47:bc:e1:7e:59:0e:69:7e:32:bb:
9c:23:7b:42:00:04:18:cd:8c:c2:49:59:7a:c1:c1:
2e:fc:72:f1:8b:b2:dd:5b:62:e2:53:d9:c7:5e:95:
dd:17:1c:5d:02:f9:a7:f4:8b:32:ca:c7:cb:09:0b:
72:76:4e:fa:48:d8:31:24:8c:17:b5:93:44:d0:2c:
2b:28:8c:22:33:15:d1:79:e6:28:c3:af:94:b5:cc:
91:b8:90:39:ee:b6:8c:b3:9a:7b:05:52:32:10:b7:
a5:03:02:7f:0b:52:80:6b:cc:9e:a5:a3:42:b1:6b:
6d:3e:42:bc:0d:c4:de:6a:a0:45:0b:4e:8c:1d:9a:
0e:5b:3c:ad:ae:86:1c:b1:44:b1:33:93:65:38:ba:
92:c2:be:33:02:24:e9:01:8f:47:e9:a4:df:e2:42:
5a:55:ff:4a:a5:99:59:41:52:45:5e:4a:b9:58:19:
4b:96:50:74:64:62:b3:59:ad:8e:df:29:23:4b:d2:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:8D:56:CA:44:F3:A2:9A:66:D2:33:9B:0B:89:90:8D:1E:22:03
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:807e::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a8:05:f1:0b:5b:6b:53:bd:db:1e:b8:31:69:fe:fd:8a:d3:
4f:c3:7f:ad:d1:be:9d:86:25:29:23:43:cc:cd:fd:17:e9:73:
d7:b5:59:a7:97:ec:5b:4e:b0:ea:b9:ba:55:d3:2b:dd:3c:ea:
9a:b5:82:25:00:f0:c2:82:d6:c2:88:de:b7:80:bf:0a:f1:89:
5c:05:fd:dd:92:d3:9d:38:28:07:90:16:b5:aa:98:35:27:69:
92:85:39:c8:a7:27:6c:54:48:a3:9d:84:ef:46:29:d3:07:a3:
31:fc:e9:a6:e7:76:e3:8f:91:3e:25:6c:13:06:8a:8f:36:87:
f3:03:e4:61:08:fc:2e:69:35:8f:b3:4f:0e:0d:74:90:2f:5d:
41:4d:06:a7:69:6e:59:b5:6f:2e:70:e0:98:73:cc:ea:37:30:
86:7d:ad:aa:42:fe:61:f3:7e:67:08:be:d4:72:e1:0d:cf:d6:
23:3c:7f:a1:2b:d8:19:94:00:e2:fd:40:18:10:f5:4d:29:21:
cf:d9:53:ce:85:a5:fa:ee:99:e5:cc:7d:3b:bd:46:59:da:59:
31:0c:77:c8:a0:50:71:92:c5:ba:46:d3:95:4f:40:66:29:de:
73:19:ab:74:34:78:50:ab:84:f2:d3:a4:cb:3c:78:4e:76:32:
93:fa:8c:9b
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUDDkpSHC3GQKyCYCq8L6sPqtEsBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVBNzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFF
NzRFOEMxMTAeFw0yMzA0MTMxNDAzMDNaFw0yNDA0MTExNDA4MDNaMDMxMTAvBgNV
BAMTKDEwNjc4RDU2Q0E0NEYzQTI5QTY2RDIzMzlCMEI4OTkwOEQxRTIyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcACzpa0C4SncT0egUTnvYvEe
jfEQD9VKLEtrTI4zJZqjev7KE767o6TTHpHtN/w92Jk8pTTWzddj/uOL+7NZR7zh
flkOaX4yu5wje0IABBjNjMJJWXrBwS78cvGLst1bYuJT2cdeld0XHF0C+af0izLK
x8sJC3J2TvpI2DEkjBe1k0TQLCsojCIzFdF55ijDr5S1zJG4kDnutoyzmnsFUjIQ
t6UDAn8LUoBrzJ6lo0Kxa20+QrwNxN5qoEULTowdmg5bPK2uhhyxRLEzk2U4upLC
vjMCJOkBj0fppN/iQlpV/0qlmVlBUkVeSrlYGUuWUHRkYrNZrY7fKSNL0r6nAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUEGeNVspE86KaZtIzmwuJkI0eIgMwHwYDVR0j
BBgwFoAUBacwyoNRNp/Dgo0NwpeFaudOjBEwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzEvMDVB
NzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFFNzRFOEMxMS5jcmwwZQYIKwYB
BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xLzA1QTczMENBODM1MTM2OUZDMzgyOEQwREMyOTc4NTZBRTc0RThDMTEuY2Vy
MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jby9y
ZXBvL0FTMjExNjA0LzEvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODMwMzc2NTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMTM2MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeA
fjANBgkqhkiG9w0BAQsFAAOCAQEAqagF8Qtba1O92x64MWn+/YrTT8N/rdG+nYYl
KSNDzM39F+lz17VZp5fsW06w6rm6VdMr3TzqmrWCJQDwwoLWwojet4C/CvGJXAX9
3ZLTnTgoB5AWtaqYNSdpkoU5yKcnbFRIo52E70Yp0wejMfzppud244+RPiVsEwaK
jzaH8wPkYQj8Lmk1j7NPDg10kC9dQU0Gp2luWbVvLnDgmHPM6jcwhn2tqkL+YfN+
Zwi+1HLhDc/WIzx/oSvYGZQA4v1AGBD1TSkhz9lTzoWl+u6Z5cx9O71GWdpZMQx3
yKBQcZLFukbTlU9AZinecxmrdDR4UKuE8tOkyzx4TnYyk/qMmw==
-----END CERTIFICATE-----
Generated at Tue May 27 19:03:33 2025 by rpki-client