Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a646630303a3a2f34342d3434203d3e20323030383739.roa
File: 326131323a646434373a646630303a3a2f34342d3434203d3e20323030383739.roa (raw, json)
Hash identifier: 3YUtozzbcmvP5sLvVdxpQDc9XDVh5i0RpiUUKtI+tvQ=
Subject key identifier: 8F:48:E6:30:55:48:69:78:90:56:59:A4:F9:ED:69:6E:19:7B:29:C4
Certificate issuer: /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial: 0BD0F2508E2739642AC8541B53DB7C339115743C
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access: rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access: rsync://rpki.co/repo/John/1/326131323a646434373a646630303a3a2f34342d3434203d3e20323030383739.roa
Signing time: Mon 17 Apr 2023 23:14:37 +0000
ROA not before: Mon 17 Apr 2023 23:09:37 +0000
ROA not after: Mon 15 Apr 2024 23:14:37 +0000
asID: 200879
IP address blocks: 2a12:dd47:df00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d0:f2:50:8e:27:39:64:2a:c8:54:1b:53:db:7c:33:91:15:74:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Validity
Not Before: Apr 17 23:09:37 2023 GMT
Not After : Apr 15 23:14:37 2024 GMT
Subject: CN=8F48E63055486978905659A4F9ED696E197B29C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:77:e2:23:f9:e0:7c:cf:cf:ed:3c:3e:0d:
ac:14:7a:21:a3:1d:66:f3:3a:eb:aa:8c:69:5e:c1:
41:b9:6b:30:39:8f:bb:f8:32:41:51:ff:50:54:f9:
8a:fb:2d:99:b8:05:dc:bf:fe:1e:f7:9f:1d:bc:ed:
a1:04:7a:81:06:16:18:bb:65:75:b4:df:1d:d1:34:
e2:ff:11:30:30:c4:b5:8b:c5:d6:d0:1f:2c:03:ab:
b7:c2:d7:dc:91:7d:d3:33:9c:f0:e0:2a:b8:32:4d:
d9:cc:0d:10:3f:98:83:94:d6:d8:c8:9a:59:3d:54:
6a:01:86:92:b5:d7:0b:4a:1b:b4:71:1d:5d:29:06:
e1:c1:38:ee:6f:33:36:4e:d8:71:ca:47:54:43:71:
0d:40:30:28:c9:85:89:a6:c9:f1:a5:6c:cc:6f:e2:
00:12:b1:e9:1e:fc:7b:f2:51:38:80:ce:92:dd:38:
a4:f1:5e:aa:22:76:7b:4e:95:76:c6:9c:37:d5:d4:
45:f3:0d:d2:f9:12:04:b5:30:32:80:21:84:35:79:
3b:6a:28:f3:8c:45:01:15:24:4e:76:79:1a:8d:94:
5c:29:c2:ea:58:93:0c:f1:94:96:28:e2:6b:d7:af:
86:7d:8b:fb:1b:e1:39:21:50:f6:d5:07:be:11:79:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:E6:30:55:48:69:78:90:56:59:A4:F9:ED:69:6E:19:7B:29:C4
X509v3 Authority Key Identifier:
keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a646630303a3a2f34342d3434203d3e20323030383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:df00::/44
Signature Algorithm: sha256WithRSAEncryption
ab:4c:64:de:94:a9:3c:15:a7:f6:ef:b5:49:cf:a6:cd:cc:f4:
a2:6a:7a:b6:90:c5:5f:37:ac:2b:ef:f8:9d:c4:e6:11:ac:9c:
46:18:5d:ab:96:f8:26:53:fa:80:52:55:a7:bf:18:53:31:fa:
be:f7:74:a7:46:1c:72:47:94:40:f4:31:2d:97:e8:b3:17:2c:
a3:b7:f3:f7:92:6e:05:84:2e:0c:bd:4f:e5:e7:03:ae:5d:68:
6e:e1:4c:0e:5f:de:72:e7:80:12:4f:5e:0a:45:7e:f4:95:bb:
88:8a:40:bf:be:18:e6:1e:13:7d:82:00:75:28:0a:6c:32:cc:
04:ef:2f:6a:d7:54:84:69:1f:55:73:52:db:bc:50:3a:41:0a:
37:09:cb:ca:54:4a:82:8b:c5:d0:cc:20:2f:a2:a5:e2:0a:e2:
91:b0:34:ce:01:d4:11:c3:57:70:42:b5:ef:a4:91:15:f7:2b:
b9:7d:b9:e7:cf:cd:ef:9d:46:97:4a:5a:53:2d:aa:0e:b3:74:
f3:e4:bc:ea:96:ae:7a:88:50:85:59:86:b2:7c:d9:10:1c:3c:
b9:fe:d7:a2:a6:ff:98:17:82:63:08:9c:4c:ac:db:9b:c7:8c:
49:b8:e3:56:22:e3:d2:cf:e8:e5:0a:72:d6:e6:c0:e5:33:df:
b3:5f:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 20:51:07 2025 by rpki-client