Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a383037663a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a383037663a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: DncQFVEk3CyIsr4tkKLmIYh3zEjvBHmsnqWUWeMYNNI=
Subject key identifier: A6:13:6B:06:CB:75:11:5B:D8:20:3E:D8:BD:70:3D:2D:58:BD:B8:FF
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 249397D380D5C607C38DC4F7F7C2345B781B169A
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037663a3a2f34382d3438203d3e20323131363034.roa
Signing time: Thu 13 Apr 2023 20:34:49 +0000
ROA not before: Thu 13 Apr 2023 20:29:49 +0000
ROA not after: Thu 11 Apr 2024 20:34:49 +0000
asID: 211604
IP address blocks: 2a12:dd47:807f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:93:97:d3:80:d5:c6:07:c3:8d:c4:f7:f7:c2:34:5b:78:1b:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 13 20:29:49 2023 GMT
Not After : Apr 11 20:34:49 2024 GMT
Subject: CN=A6136B06CB75115BD8203ED8BD703D2D58BDB8FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:36:2a:35:ae:41:94:03:80:0f:8f:d1:1e:
a1:aa:3a:72:b3:ae:d8:bd:d5:dd:46:a4:83:34:73:
b8:ea:88:38:8e:90:bf:b6:de:2e:1c:03:19:a2:db:
a0:55:35:18:cc:bb:03:d5:75:eb:54:4f:05:d6:28:
79:7a:91:34:09:17:3e:54:9f:da:86:d9:7d:99:f9:
bf:32:5e:d7:22:c2:2b:9a:b8:c2:ea:8d:bc:f2:3b:
1c:fa:38:7c:ed:41:4a:de:8d:7c:c4:af:a6:80:1c:
6c:d8:ef:fb:f5:08:84:58:37:2b:24:a6:ea:e2:ff:
0d:b0:16:b0:b1:ad:b5:93:bc:82:ff:38:32:96:d4:
ea:49:8b:ab:6b:ba:d6:d6:f4:4d:42:ce:86:d5:e0:
c5:9d:ad:17:9a:5a:ef:14:d3:85:1d:2d:f1:b5:23:
b8:a4:82:57:71:d5:8d:4c:37:19:9d:83:80:42:df:
49:0e:09:de:4c:21:24:f4:f7:b1:65:c0:9f:40:90:
e4:e4:75:e3:22:67:44:4e:82:56:7f:f7:7c:09:47:
2a:9a:4f:5c:95:6d:8b:d6:7e:95:65:2b:cb:6e:ab:
ce:00:61:68:7d:f1:5f:4b:f0:c2:4d:27:19:f1:03:
db:3c:b4:81:3b:75:76:9e:f4:68:86:e4:50:d2:f3:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:6B:06:CB:75:11:5B:D8:20:3E:D8:BD:70:3D:2D:58:BD:B8:FF
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037663a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:807f::/48
Signature Algorithm: sha256WithRSAEncryption
48:40:d4:24:42:f7:25:60:3c:02:a4:ae:7f:76:90:ab:50:70:
48:da:4c:33:43:42:bc:36:66:69:d3:13:fe:d2:4c:c1:e3:c9:
97:10:e5:64:ec:8a:4c:be:d2:07:dc:3c:79:c6:1a:45:be:ad:
44:16:c9:75:ca:ae:45:4c:70:fb:5a:13:94:ef:31:49:54:e9:
16:49:be:93:b8:2a:ce:90:e4:1a:c3:55:e6:71:30:20:29:0c:
3f:fa:af:35:64:5c:76:12:77:4d:ef:40:f6:67:7e:90:dc:c3:
59:d8:d2:d3:50:41:d5:64:f8:78:7b:b5:1c:69:e3:d3:b9:2c:
18:31:92:cd:a4:88:16:75:b9:04:89:e8:bc:f3:8c:2a:0c:bb:
c2:fa:ce:2c:72:2c:45:f4:87:26:13:22:14:c7:40:21:be:38:
e2:09:3c:a3:0d:47:73:bc:66:bb:68:8b:9c:ac:9a:7e:8f:d3:
9d:cd:6d:2b:a4:11:73:cc:86:43:70:3e:f3:bd:31:c5:d3:12:
f1:ce:c5:5b:05:af:0d:16:1e:84:10:55:e2:dd:69:d5:bf:7d:
47:33:b3:d5:1c:05:49:4b:82:57:28:89:d0:62:68:71:2e:a7:
9b:07:06:52:7f:a4:b4:9d:39:8b:7b:f8:98:78:0d:bd:b3:98:
bd:88:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 19:07:17 2025 by rpki-client