Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530313a3a2f34382d3438203d3e20313939363736.roa
File: 326131323a646434373a336530313a3a2f34382d3438203d3e20313939363736.roa (raw, json)
Hash identifier: lx+81U76HmpSqFTnQ6GsJRRLzVs+zzI3WacA283PXUQ=
Subject key identifier: 72:74:54:93:E0:A0:AB:7B:67:96:46:D2:3C:DD:D3:4C:6D:76:34:51
Certificate issuer: /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial: 5B69C5ADB3D07F134F2A381561E396AAE68C8FC3
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access: rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access: rsync://rpki.co/repo/John/1/326131323a646434373a336530313a3a2f34382d3438203d3e20313939363736.roa
Signing time: Sat 22 Apr 2023 14:59:15 +0000
ROA not before: Sat 22 Apr 2023 14:54:15 +0000
ROA not after: Sat 20 Apr 2024 14:59:15 +0000
asID: 199676
IP address blocks: 2a12:dd47:3e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:69:c5:ad:b3:d0:7f:13:4f:2a:38:15:61:e3:96:aa:e6:8c:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Validity
Not Before: Apr 22 14:54:15 2023 GMT
Not After : Apr 20 14:59:15 2024 GMT
Subject: CN=72745493E0A0AB7B679646D23CDDD34C6D763451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:09:70:88:5d:88:e6:83:d9:f4:37:3a:5b:
8a:37:8d:50:87:7a:09:81:88:ab:88:26:fa:06:70:
ec:b4:42:d7:a4:00:60:14:e4:76:b1:f3:59:92:9f:
62:87:26:96:52:fd:8f:53:3c:b5:52:a6:33:ac:ee:
d8:64:25:bc:64:96:28:3e:76:73:64:a0:96:b8:aa:
60:59:d2:ea:01:7b:a5:69:1a:03:87:a5:96:01:12:
1b:4d:20:9b:0d:21:b8:d6:b7:77:46:2a:0d:bd:10:
e1:ba:72:ab:7a:9b:48:0c:84:34:ac:bb:fd:3c:3e:
3e:42:4c:4e:14:f0:f8:b0:79:c9:d3:fb:11:f8:db:
7b:b3:55:3d:fd:fb:8f:b1:90:e8:44:50:9b:76:ac:
df:9d:ad:70:a6:e6:6b:58:d7:6b:06:38:db:da:90:
4c:cd:0e:e4:35:7c:0f:75:17:eb:3d:7f:51:c8:4f:
0a:62:f5:08:f2:64:da:57:23:b2:74:57:87:3d:37:
3b:25:4e:a1:43:19:2a:a5:8c:b5:e3:a7:58:a9:99:
e1:a8:6e:c0:5b:7a:5f:8f:e7:ab:d0:b5:66:4c:31:
a4:df:f5:6d:65:99:46:49:21:6e:86:a2:e3:cc:a7:
b3:cd:36:72:b1:c2:5b:4e:13:2e:95:55:74:59:b1:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:54:93:E0:A0:AB:7B:67:96:46:D2:3C:DD:D3:4C:6D:76:34:51
X509v3 Authority Key Identifier:
keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530313a3a2f34382d3438203d3e20313939363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3e01::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b4:14:df:b4:65:e6:89:25:5a:e1:d4:d9:a2:e0:5f:18:74:
15:6d:95:75:87:c4:d7:95:6d:a5:58:1b:8d:92:ce:06:ad:bf:
17:e0:d5:34:ce:1a:a4:89:30:43:9f:68:b8:1f:03:3d:ff:d1:
10:1b:10:2f:5a:4e:7f:ed:0c:6f:19:0a:4c:2e:4c:27:25:60:
ad:ed:d1:01:94:9e:2a:4c:33:b9:8a:7b:8f:76:5f:fb:cf:02:
8d:8b:c4:66:15:96:cf:cd:a2:91:8b:6b:f1:85:63:ff:87:c5:
85:03:6a:55:2c:da:ba:0c:21:e9:f0:42:d0:c3:e6:b4:ee:37:
25:87:00:ab:88:ca:ba:03:fa:a6:23:49:ac:ae:9b:8f:34:7b:
00:80:1f:aa:8e:b2:c4:5e:ec:00:39:18:77:84:20:be:31:04:
7f:5d:24:c5:37:4f:06:8e:a6:c8:fe:4d:bb:d2:21:45:20:9b:
7b:12:04:ae:90:2d:64:20:af:32:21:0e:b6:40:53:34:07:23:
5c:43:56:c3:16:16:72:17:1a:c8:f4:36:01:6b:56:9f:1e:3a:
5f:dc:ce:a9:6e:6a:b6:b5:d3:d4:fa:e5:ed:e7:5d:e8:d9:c0:
fe:8d:3d:b1:66:39:da:b4:2e:e5:10:00:2b:e4:2b:8b:eb:9a:
82:a6:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 20:28:09 2025 by rpki-client