Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Bee/1/326131323a646434373a646130303a3a2f34302d3430203d3e20313939363933.roa
File: 326131323a646434373a646130303a3a2f34302d3430203d3e20313939363933.roa (raw, json)
Hash identifier: yr4zcG453Drx1Evk1kKlOlhAuGjsNIvDF7NFDz8hzbc=
Subject key identifier: 9A:9A:89:42:19:5E:45:09:1B:3A:62:2E:41:7A:6C:4A:35:72:35:37
Certificate issuer: /CN=7E33A908D6350A322FA03630A59582A284A95C5D
Certificate serial: 3DD650E050B146E3AB2BE2E50C295DB086622560
Authority key identifier: 7E:33:A9:08:D6:35:0A:32:2F:A0:36:30:A5:95:82:A2:84:A9:5C:5D
Authority info access: rsync://rpki.co/repo/AS945/1/7E33A908D6350A322FA03630A59582A284A95C5D.cer
Subject info access: rsync://rpki.co/repo/Bee/1/326131323a646434373a646130303a3a2f34302d3430203d3e20313939363933.roa
Signing time: Thu 13 Apr 2023 10:01:20 +0000
ROA not before: Thu 13 Apr 2023 09:56:20 +0000
ROA not after: Thu 11 Apr 2024 10:01:20 +0000
asID: 199693
IP address blocks: 2a12:dd47:da00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d6:50:e0:50:b1:46:e3:ab:2b:e2:e5:0c:29:5d:b0:86:62:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E33A908D6350A322FA03630A59582A284A95C5D
Validity
Not Before: Apr 13 09:56:20 2023 GMT
Not After : Apr 11 10:01:20 2024 GMT
Subject: CN=9A9A8942195E45091B3A622E417A6C4A35723537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:c2:fa:f4:07:ca:01:7a:5d:63:c3:4e:c9:
43:f4:47:bf:09:e6:81:e2:f7:04:f9:7a:f8:b8:9e:
0d:dd:75:84:48:a1:75:b3:74:52:54:66:5c:17:6c:
17:e9:71:19:d3:67:c4:60:7f:33:e6:37:68:5b:89:
54:22:50:c3:c6:93:a1:d2:82:50:f4:93:66:0f:81:
ae:0b:8a:8e:d4:aa:c6:a4:35:ac:5f:1d:46:4e:d5:
78:c3:3b:b0:b2:98:5a:55:18:07:0c:4b:9b:c3:04:
8c:4f:d4:59:af:fb:4f:0c:20:29:6b:0b:98:36:f9:
d4:0c:83:a9:ce:bb:17:4a:e0:21:1d:6f:7d:b3:7d:
1b:e6:08:c0:0e:ad:5c:0c:a7:b8:d4:ca:44:aa:32:
a0:a0:16:14:50:85:99:5e:cd:f0:70:ce:bc:8c:3b:
ed:ba:18:10:66:bb:d6:a9:09:85:cc:a2:6e:ac:16:
55:6c:6f:ab:aa:67:ca:a8:6c:d0:9c:a0:38:dd:43:
20:f8:88:9f:17:54:c9:30:60:4a:9a:08:0c:02:20:
0a:1b:d2:fb:53:fc:db:96:79:c5:4b:07:eb:e9:f0:
64:04:de:15:b9:ec:45:de:cc:4d:cf:ae:77:3a:4c:
2b:d7:e4:cc:47:87:13:ce:63:1a:ee:d9:74:05:39:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:89:42:19:5E:45:09:1B:3A:62:2E:41:7A:6C:4A:35:72:35:37
X509v3 Authority Key Identifier:
keyid:7E:33:A9:08:D6:35:0A:32:2F:A0:36:30:A5:95:82:A2:84:A9:5C:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Bee/1/7E33A908D6350A322FA03630A59582A284A95C5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/7E33A908D6350A322FA03630A59582A284A95C5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Bee/1/326131323a646434373a646130303a3a2f34302d3430203d3e20313939363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:da00::/40
Signature Algorithm: sha256WithRSAEncryption
70:ff:94:6f:dc:51:b6:d7:75:2c:34:9e:3a:1c:13:c3:a1:09:
6b:ad:50:3f:56:49:26:38:f1:ea:c8:27:a6:f7:68:5d:4d:5a:
b3:67:b1:c3:49:3e:9a:e9:7d:59:b7:66:ec:77:40:17:64:02:
a6:02:ba:82:cf:e6:16:f2:26:32:e3:7d:b8:4e:ba:10:b7:cb:
c8:e5:cc:4b:e0:7c:a3:d9:f0:87:ae:9e:ef:42:81:fa:ed:84:
80:40:1c:f4:64:cc:6a:25:19:63:e4:9d:cf:c2:d9:c2:a5:96:
dd:f7:5a:17:15:0a:f4:7d:14:c6:a0:60:6e:f6:b2:84:e9:c1:
b9:fa:f6:ac:b3:f6:f7:77:26:6d:9f:63:c4:71:82:39:3d:41:
a9:d2:d2:62:7b:81:13:8a:0d:1e:b8:5d:b8:b5:b1:32:99:a3:
7c:3f:ab:ca:e6:04:9f:f1:e8:f8:30:aa:62:da:55:d1:1e:46:
09:7e:cd:08:57:1f:74:34:f9:57:56:6e:da:d4:8f:35:e7:44:
6b:39:fd:14:50:66:7f:4c:81:74:ed:9c:70:94:82:1e:3a:64:
31:c0:5a:13:02:24:12:c1:5f:e6:81:9a:b8:dc:5d:7b:a1:ec:
a2:ba:43:1f:40:6d:9b:bd:e8:df:16:8e:ef:2c:83:57:e2:2a:
eb:ac:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:55:34 2025 by rpki-client