Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/1/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa
File: 326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa (raw, json)
Hash identifier: q31Ruf4fC3qwbVEmkGBkAa9utfcoTWGjLC1RLrsx0pY=
Subject key identifier: F5:1F:91:60:BB:04:76:12:0D:A8:B6:66:AB:66:71:93:31:FC:7B:CC
Certificate issuer: /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial: 1CB6C9099FE22F4F26E34CCE828496E97A849A21
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority info access: rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access: rsync://rpki.co/repo/Riffi/1/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa
Signing time: Thu 13 Apr 2023 07:55:25 +0000
ROA not before: Thu 13 Apr 2023 07:50:25 +0000
ROA not after: Thu 11 Apr 2024 07:55:25 +0000
asID: 203868
IP address blocks: 2a12:dd47:8046::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b6:c9:09:9f:e2:2f:4f:26:e3:4c:ce:82:84:96:e9:7a:84:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Validity
Not Before: Apr 13 07:50:25 2023 GMT
Not After : Apr 11 07:55:25 2024 GMT
Subject: CN=F51F9160BB0476120DA8B666AB66719331FC7BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:c9:ce:57:6b:8b:36:10:10:fd:75:99:b8:
0e:5b:19:84:79:c1:38:2f:83:4c:d6:3e:d2:fd:ca:
df:02:3a:4b:90:fc:e4:2e:5f:a4:2c:6a:2d:8a:3a:
d3:5e:d6:75:20:83:28:c2:b7:52:97:72:77:29:3b:
e6:6a:0d:d2:32:f5:81:77:c2:ff:c6:83:ce:b9:1c:
af:6d:20:a4:df:ce:97:e6:2a:a6:e8:4f:e5:f7:92:
5a:6c:4e:3b:cd:4b:c6:ca:3a:57:e9:e4:cd:71:8c:
e7:b1:f4:8d:72:c4:e9:88:fa:9a:97:87:94:01:47:
a6:e7:ba:f1:b0:bf:71:60:08:8c:70:0d:79:4c:08:
87:49:0f:eb:a7:24:bc:54:35:e9:94:cf:8e:80:b9:
3b:2a:35:57:66:59:53:62:82:32:d6:89:e9:ab:7f:
32:a9:c4:44:ad:c3:09:9e:95:bf:e0:49:06:a3:97:
d4:c6:0e:08:18:8b:b1:60:7e:ea:d6:3b:d4:a9:49:
76:0c:44:9a:6f:62:48:45:8c:35:a7:8a:71:cb:4a:
38:3e:09:08:af:69:45:e8:3a:a0:c2:68:47:16:b6:
19:57:77:56:5a:cd:3d:9d:9d:f8:fc:c1:33:5b:3a:
77:b9:49:4c:01:9e:50:34:4c:cf:e6:e7:de:14:a9:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:91:60:BB:04:76:12:0D:A8:B6:66:AB:66:71:93:31:FC:7B:CC
X509v3 Authority Key Identifier:
keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/1/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8046::/48
Signature Algorithm: sha256WithRSAEncryption
52:fc:ae:72:59:28:1f:c4:36:4b:60:8c:aa:0a:ad:69:8f:37:
f1:9b:26:67:76:fc:1d:20:18:3c:18:55:19:08:5d:4e:15:2b:
4b:92:f0:da:e5:0e:4a:38:82:f5:a3:ed:2a:1f:0e:aa:88:20:
ce:ff:23:d3:22:93:e6:d5:47:d7:94:2d:c6:f7:67:1d:19:5d:
1f:3d:3a:69:0a:98:46:63:19:4d:17:cf:42:bd:c8:bb:cd:19:
48:96:00:50:82:15:7b:59:a6:2a:71:09:12:b7:81:8f:df:2a:
0c:03:6a:07:5c:68:aa:ab:50:a1:e0:34:22:61:1a:f2:9d:83:
8f:1c:1d:4f:e0:aa:7d:91:c3:c1:16:df:3c:bc:47:19:66:d7:
f1:11:79:34:6c:05:79:c0:e6:76:05:e3:04:e7:a5:d5:fe:35:
81:0a:97:29:19:c3:08:4f:d5:b6:87:99:58:1e:14:08:26:ab:
b1:f5:d2:e0:57:96:53:7b:f8:f4:64:2b:92:f0:44:59:4c:d4:
2d:d3:63:a4:23:a1:ba:64:ce:2d:5a:9c:95:b3:7b:d1:eb:ff:
28:7b:60:38:f6:cd:4f:20:17:06:c4:0c:9b:58:1b:2c:30:30:
12:84:47:7e:00:20:59:ba:14:59:b3:c9:c7:8f:bd:23:32:2b:
39:6a:53:cd
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUHLbJCZ/iL08m40zOgoSW6XqEmiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAz
Qzg2QTEzNjAeFw0yMzA0MTMwNzUwMjVaFw0yNDA0MTEwNzU1MjVaMDMxMTAvBgNV
BAMTKEY1MUY5MTYwQkIwNDc2MTIwREE4QjY2NkFCNjY3MTkzMzFGQzdCQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJsnOV2uLNhAQ/XWZuA5bGYR5
wTgvg0zWPtL9yt8COkuQ/OQuX6Qsai2KOtNe1nUggyjCt1KXcncpO+ZqDdIy9YF3
wv/Gg865HK9tIKTfzpfmKqboT+X3klpsTjvNS8bKOlfp5M1xjOex9I1yxOmI+pqX
h5QBR6bnuvGwv3FgCIxwDXlMCIdJD+unJLxUNemUz46AuTsqNVdmWVNigjLWiemr
fzKpxEStwwmelb/gSQajl9TGDggYi7FgfurWO9SpSXYMRJpvYkhFjDWninHLSjg+
CQivaUXoOqDCaEcWthlXd1ZazT2dnfj8wTNbOne5SUwBnlA0TM/m594UqfH5AgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQU9R+RYLsEdhINqLZmq2ZxkzH8e8wwHwYDVR0j
BBgwFoAUp9vd5Fub7ZwXyyDyrinscDyGoTYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzEvQTdEQkRE
RTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAzQzg2QTEzNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8x
L0E3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
UmlmZmkvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4MzAzNDM2M2EzYTJmMzQzODJk
MzQzODIwM2QzZTIwMzIzMDMzMzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLdR4BGMA0GCSqG
SIb3DQEBCwUAA4IBAQBS/K5yWSgfxDZLYIyqCq1pjzfxmyZndvwdIBg8GFUZCF1O
FStLkvDa5Q5KOIL1o+0qHw6qiCDO/yPTIpPm1UfXlC3G92cdGV0fPTppCphGYxlN
F89Cvci7zRlIlgBQghV7WaYqcQkSt4GP3yoMA2oHXGiqq1Ch4DQiYRrynYOPHB1P
4Kp9kcPBFt88vEcZZtfxEXk0bAV5wOZ2BeME56XV/jWBCpcpGcMIT9W2h5lYHhQI
Jqux9dLgV5ZTe/j0ZCuS8ERZTNQt02OkI6G6ZM4tWpyVs3vR6/8oe2A49s1PIBcG
xAybWBssMDAShEd+ACBZuhRZs8nHj70jMis5alPN
-----END CERTIFICATE-----
Generated at Tue May 27 19:04:41 2025 by rpki-client