Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa
File: 326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa (raw, json)
Hash identifier: JNKrrW+qOpDjRWV5z0QviOV1CCCdxsGRknNlmXoy8U4=
Subject key identifier: 72:C4:25:A2:C1:02:E6:48:34:86:11:75:0C:60:6C:FF:A9:6B:6D:4A
Certificate issuer: /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial: 2B08AF4D70A7E854F1C4E6DA4F52F7BDDC7E0A18
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access: rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access: rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa
Signing time: Thu 04 May 2023 09:40:35 +0000
ROA not before: Thu 04 May 2023 09:35:35 +0000
ROA not after: Thu 02 May 2024 09:40:35 +0000
asID: 200879
IP address blocks: 2a12:dd47:3e00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:08:af:4d:70:a7:e8:54:f1:c4:e6:da:4f:52:f7:bd:dc:7e:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Validity
Not Before: May 4 09:35:35 2023 GMT
Not After : May 2 09:40:35 2024 GMT
Subject: CN=72C425A2C102E648348611750C606CFFA96B6D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:28:6f:67:c0:09:90:d1:93:fe:4c:ee:72:d3:
f2:78:d6:50:c8:6b:94:3f:84:bd:6a:57:bb:88:ef:
6e:d0:5c:47:94:7b:04:25:22:0b:6f:65:6b:4d:e3:
1f:9b:dd:01:7e:6e:58:36:f8:ef:de:b7:79:f0:b7:
aa:6f:40:ad:b3:aa:c8:24:61:20:06:61:d9:75:78:
a8:78:37:a7:fb:05:d1:e4:21:76:c4:13:a3:0b:35:
a3:55:7c:84:b3:26:22:ab:56:0c:ec:b1:cd:b4:15:
a3:83:87:9e:0b:af:42:3c:dc:8b:79:ea:6b:f8:a5:
a2:b3:0d:1c:32:f5:05:e4:50:7e:ac:2b:2c:d7:63:
8c:16:7a:2f:9c:da:0a:73:6b:43:32:07:95:69:cd:
9b:91:6b:6c:5e:50:2a:f3:94:98:34:eb:66:2c:71:
25:96:fc:a3:75:f4:4d:17:8a:2c:a2:68:70:b1:70:
b8:79:3c:05:82:0a:fe:05:55:b2:b0:0a:59:56:19:
a4:ed:60:71:b7:2b:60:cc:eb:23:f6:54:19:e9:d2:
41:01:cc:5f:77:c4:49:a9:03:53:25:ba:1b:91:78:
2a:fd:d8:54:d8:37:f0:e5:81:f9:76:67:e0:b4:bb:
80:57:0e:b2:1d:16:83:00:28:76:c4:20:34:53:c8:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:25:A2:C1:02:E6:48:34:86:11:75:0C:60:6C:FF:A9:6B:6D:4A
X509v3 Authority Key Identifier:
keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3e00::/40
Signature Algorithm: sha256WithRSAEncryption
a6:83:d7:07:a2:0c:15:01:73:51:d2:b6:fb:3f:1d:c2:0b:04:
fd:4a:7a:e2:5f:cd:65:c9:e9:2f:7e:e4:67:d9:59:7c:17:ac:
ab:1a:45:ea:87:d9:d0:fa:46:03:2d:59:d9:f6:bf:39:fe:48:
62:24:db:69:ac:a8:fb:38:2f:56:54:eb:79:67:b2:b1:42:4b:
52:77:84:22:55:6d:af:42:b8:72:7e:ac:44:79:50:de:9a:a8:
ce:f7:3c:d5:03:6f:c5:7c:7d:57:ff:b3:0d:9f:0b:a5:96:87:
ac:b5:f9:12:f8:5c:8f:04:95:eb:cb:a9:4b:12:72:f0:a0:bb:
f6:5d:7e:a4:63:08:ca:90:40:58:10:5a:b1:1f:1f:41:f8:18:
d7:0f:26:bd:94:2a:af:1e:1d:da:09:d6:de:38:04:40:6b:2e:
f9:e8:22:0f:ed:f1:10:36:06:9d:ce:61:cc:4d:94:29:94:65:
b1:da:7f:0e:59:33:b7:41:af:e8:0c:d8:48:2c:20:f3:ce:4a:
18:53:d0:3d:a2:fa:4c:2f:06:04:bb:5c:62:db:17:99:de:8a:
93:f3:54:07:6b:61:1c:b9:e0:a9:7e:b3:79:07:70:6b:61:61:
4f:8f:51:3e:95:38:dd:bf:05:10:c7:bd:6a:62:bd:09:5c:8e:
3c:0d:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 19:50:22 2025 by rpki-client