Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/1/326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa
File: 326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa (raw, json)
Hash identifier: nVpGVOd0OsHuhBA4CamxbWvOXXoRspiPL0YM6mzT+u4=
Subject key identifier: 70:3B:03:13:69:11:C5:94:0D:CA:3F:A0:84:5A:5F:1F:48:F9:B0:D7
Certificate issuer: /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial: 4F6AF4E7F00742AC07AC035DA02C6AF684316D4F
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority info access: rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access: rsync://rpki.co/repo/Riffi/1/326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa
Signing time: Thu 13 Apr 2023 07:56:39 +0000
ROA not before: Thu 13 Apr 2023 07:51:39 +0000
ROA not after: Thu 11 Apr 2024 07:56:39 +0000
asID: 200579
IP address blocks: 2a12:dd47:d000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6a:f4:e7:f0:07:42:ac:07:ac:03:5d:a0:2c:6a:f6:84:31:6d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Validity
Not Before: Apr 13 07:51:39 2023 GMT
Not After : Apr 11 07:56:39 2024 GMT
Subject: CN=703B03136911C5940DCA3FA0845A5F1F48F9B0D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:4b:49:92:c1:36:0f:b6:14:69:1d:a2:c0:
51:ed:d1:2c:70:54:a0:27:72:4b:33:2b:9e:d5:b5:
c8:55:d6:c2:72:a6:f4:85:27:49:fc:3a:19:4f:38:
ab:1a:83:3e:2c:5c:5e:30:ac:f9:85:02:ee:64:72:
fe:ef:7d:98:31:bf:c7:35:60:3f:22:82:ee:f0:fe:
de:3a:fd:cf:9d:8e:21:ed:93:e9:33:3c:ab:e2:f1:
08:75:5f:0b:3c:d2:8c:c5:cb:c7:7e:e2:95:1c:57:
47:ad:a9:82:9c:be:7b:7c:bd:6d:62:77:e1:5b:a2:
ed:50:5b:30:eb:42:49:94:d9:78:03:4f:45:59:17:
58:67:a5:7a:46:b9:dd:c3:f6:b2:24:1d:d8:6b:60:
0f:8f:c1:72:d5:ec:42:bc:5e:27:8f:e8:5b:17:18:
5c:a9:42:70:8f:a9:f1:7f:1f:e5:45:86:f9:c1:1e:
a8:a2:ab:e4:7d:23:f9:c1:02:91:1e:c9:f5:49:f7:
df:53:be:59:41:97:79:65:f6:47:f2:08:0a:55:7f:
16:d1:75:8e:78:96:2f:67:f7:6b:b9:95:c9:b4:e7:
05:25:91:40:bd:eb:5b:58:0d:89:98:fe:e6:34:87:
6e:27:05:79:c8:f9:30:13:79:12:6c:cd:9f:89:bc:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:03:13:69:11:C5:94:0D:CA:3F:A0:84:5A:5F:1F:48:F9:B0:D7
X509v3 Authority Key Identifier:
keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/1/326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:d000::/40
Signature Algorithm: sha256WithRSAEncryption
26:a9:26:15:55:d2:f2:1e:ce:fc:98:ca:6c:5b:07:ca:f0:99:
ca:65:4c:cc:4b:ff:7a:ee:61:9f:08:ee:c3:9b:24:16:6f:09:
68:6f:71:df:32:d4:cd:ff:ef:eb:07:02:6c:6e:00:4b:8c:95:
6c:7d:7d:90:68:11:33:45:15:6e:05:c9:e7:fe:0c:00:91:d1:
0c:e6:3b:dc:74:90:ed:45:f4:aa:6b:0a:ce:b3:24:79:7d:9d:
8c:ce:78:ca:59:6f:8a:94:ae:6e:a5:e6:97:0f:c8:70:4b:ca:
53:6b:b2:08:20:1a:c2:5b:e2:36:56:23:27:82:25:85:ca:c9:
09:f0:c8:2e:b2:5f:6f:28:c2:66:02:3c:e3:8a:65:26:35:4f:
13:3c:c2:51:4d:61:2b:10:e0:88:04:9d:c6:04:b1:76:71:9d:
da:51:04:7a:f1:7a:d2:d5:34:cb:ad:78:e4:5d:25:83:e1:7b:
37:6e:62:38:df:5c:c4:d3:67:2f:13:9d:41:c4:9e:24:1e:af:
c7:9f:bb:c6:05:2d:f7:e6:7d:16:bd:e4:15:25:14:4e:0e:53:
06:f3:6f:7c:42:74:2a:c4:33:74:92:34:19:a1:f9:c7:0a:46:
a2:5e:41:22:96:29:b9:d2:92:ab:bc:e6:ee:52:a0:29:b2:7e:
3b:c3:fa:14
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUT2r05/AHQqwHrANdoCxq9oQxbU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAz
Qzg2QTEzNjAeFw0yMzA0MTMwNzUxMzlaFw0yNDA0MTEwNzU2MzlaMDMxMTAvBgNV
BAMTKDcwM0IwMzEzNjkxMUM1OTQwRENBM0ZBMDg0NUE1RjFGNDhGOUIwRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPEtJksE2D7YUaR2iwFHt0Sxw
VKAnckszK57VtchV1sJypvSFJ0n8OhlPOKsagz4sXF4wrPmFAu5kcv7vfZgxv8c1
YD8igu7w/t46/c+djiHtk+kzPKvi8Qh1Xws80ozFy8d+4pUcV0etqYKcvnt8vW1i
d+Fbou1QWzDrQkmU2XgDT0VZF1hnpXpGud3D9rIkHdhrYA+PwXLV7EK8XieP6FsX
GFypQnCPqfF/H+VFhvnBHqiiq+R9I/nBApEeyfVJ999TvllBl3ll9kfyCApVfxbR
dY54li9n92u5lcm05wUlkUC961tYDYmY/uY0h24nBXnI+TATeRJszZ+JvISJAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUcDsDE2kRxZQNyj+ghFpfH0j5sNcwHwYDVR0j
BBgwFoAUp9vd5Fub7ZwXyyDyrinscDyGoTYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzEvQTdEQkRE
RTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAzQzg2QTEzNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8x
L0E3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYuY2VyMH0G
CCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
UmlmZmkvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTY0MzAzMDMwM2EzYTJmMzQzMDJk
MzQzODIwM2QzZTIwMzIzMDMwMzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR9AwDQYJKoZI
hvcNAQELBQADggEBACapJhVV0vIezvyYymxbB8rwmcplTMxL/3ruYZ8I7sObJBZv
CWhvcd8y1M3/7+sHAmxuAEuMlWx9fZBoETNFFW4Fyef+DACR0QzmO9x0kO1F9Kpr
Cs6zJHl9nYzOeMpZb4qUrm6l5pcPyHBLylNrsgggGsJb4jZWIyeCJYXKyQnwyC6y
X28owmYCPOOKZSY1TxM8wlFNYSsQ4IgEncYEsXZxndpRBHrxetLVNMuteORdJYPh
ezduYjjfXMTTZy8TnUHEniQer8efu8YFLffmfRa95BUlFE4OUwbzb3xCdCrEM3SS
NBmh+ccKRqJeQSKWKbnSkqu85u5SoCmyfjvD+hQ=
-----END CERTIFICATE-----
Generated at Tue May 27 18:42:34 2025 by rpki-client