Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
File: 326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier: j7oAfipQzJ+wsV9wx2c+ig0Hjcuurir0FB/tIsWx2ss=
Subject key identifier: 66:FE:F9:8B:42:CD:7E:D4:EE:72:9F:2D:75:3B:B5:96:2A:6B:67:F6
Certificate issuer: /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial: 6A6AE84B6C377F5857D118F088F95ED15FAB796A
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access: rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access: rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
Signing time: Thu 13 Apr 2023 09:53:03 +0000
ROA not before: Thu 13 Apr 2023 09:48:03 +0000
ROA not after: Thu 11 Apr 2024 09:53:03 +0000
asID: 200160
IP address blocks: 2a12:dd47:5210::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6a:e8:4b:6c:37:7f:58:57:d1:18:f0:88:f9:5e:d1:5f:ab:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Validity
Not Before: Apr 13 09:48:03 2023 GMT
Not After : Apr 11 09:53:03 2024 GMT
Subject: CN=66FEF98B42CD7ED4EE729F2D753BB5962A6B67F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:26:e6:ba:8b:19:a4:eb:d8:7f:33:8c:23:
05:82:67:d0:fe:c1:07:0d:bf:9f:34:92:d8:f1:47:
76:97:94:61:12:8c:5a:ce:b0:94:85:50:b8:b4:64:
69:bb:3c:6f:ed:6f:cb:90:3a:bf:b1:30:bd:0f:d7:
ab:8f:69:9d:21:05:6b:61:45:40:8a:cd:17:15:23:
82:a8:29:70:af:d9:c3:f4:e7:05:1e:40:3b:a4:eb:
ab:24:e7:da:74:d8:bd:c1:39:82:65:d8:92:e7:a3:
30:55:06:0f:32:0d:e7:76:2c:8e:ce:70:0a:04:79:
46:81:7f:5f:16:10:66:3a:ab:c5:25:a7:e0:a3:c1:
c0:44:12:c8:73:65:b5:31:75:24:7e:dd:61:d9:82:
1a:9e:6d:39:ca:92:08:b7:60:e8:c3:46:2a:d4:d9:
14:3a:ec:7c:45:43:67:9a:80:74:94:16:63:45:20:
c3:e2:cf:82:1c:26:2e:54:bb:f5:f0:27:10:f2:be:
37:77:f0:12:95:a0:39:4c:f1:78:1e:89:9f:5a:7b:
88:75:f1:89:98:69:31:f5:6f:cd:dd:31:05:a0:64:
e1:7b:8d:11:5a:af:35:31:a3:05:a6:56:b1:4d:1c:
87:5d:5a:de:78:36:88:29:69:a0:47:a3:d7:de:3d:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:F9:8B:42:CD:7E:D4:EE:72:9F:2D:75:3B:B5:96:2A:6B:67:F6
X509v3 Authority Key Identifier:
keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5210::/44
Signature Algorithm: sha256WithRSAEncryption
2b:af:12:5d:08:7b:72:f5:a8:e6:2e:54:9f:40:21:d7:95:40:
41:0b:8d:18:55:a2:ac:59:3c:0f:80:e1:38:73:bd:6c:29:09:
c8:0e:df:89:1b:35:91:75:bf:bb:f0:b5:20:b3:2c:aa:7b:eb:
59:a6:e7:33:15:51:57:a7:68:bc:e8:5e:bc:5f:da:fa:84:3e:
c4:4b:c8:c5:bc:63:e6:ee:94:d8:f3:f1:6e:45:76:95:35:c3:
aa:09:69:e0:0e:d3:33:46:ae:0f:c4:3a:cf:93:4c:59:2e:6a:
af:62:14:e1:9b:11:ac:c2:98:5a:7e:5a:8e:a0:22:90:c1:df:
78:38:86:94:b2:d9:67:d0:cf:ba:3e:25:64:ec:c5:85:01:ae:
66:4c:7b:63:3c:22:0b:bd:7f:4e:f0:b0:67:3a:c8:34:6c:71:
61:00:0a:17:9f:f8:b2:c8:79:0c:1d:a5:a6:0b:d3:6c:62:42:
f5:87:de:81:8d:1f:c4:a7:d7:cb:a0:92:11:9f:32:3a:b1:f7:
e6:32:c3:2d:f8:0f:e2:07:75:1c:67:96:60:9e:50:35:6b:de:
ff:35:49:98:b2:e8:a7:80:86:ea:54:63:f7:5d:fc:b1:b0:d3:
1e:29:ed:54:df:ec:28:0a:36:0a:08:ad:ba:14:8f:89:af:d1:
87:62:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 25 20:04:28 2025 by rpki-client