Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Rudaki/0/326131323a646434373a353330303a3a2f34382d3438203d3e20323131353039.roa
File: 326131323a646434373a353330303a3a2f34382d3438203d3e20323131353039.roa (raw, json)
Hash identifier: WQa+xNGUCC35OTjNy/TsMvHRpfc6M0DvyJwpQ0fOb2Q=
Subject key identifier: F4:7E:5B:14:5E:CA:B3:50:22:F7:A5:3E:60:23:5D:35:D5:9D:71:C7
Certificate issuer: /CN=8D47937E5FB1C1169EEAD229E680E581B175465F
Certificate serial: 67195133F989720776F6D726943E565EE6B80372
Authority key identifier: 8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Authority info access: rsync://rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
Subject info access: rsync://rpki.co/repo/Rudaki/0/326131323a646434373a353330303a3a2f34382d3438203d3e20323131353039.roa
Signing time: Wed 19 Apr 2023 12:39:25 +0000
ROA not before: Wed 19 Apr 2023 12:34:25 +0000
ROA not after: Wed 17 Apr 2024 12:39:25 +0000
asID: 211509
IP address blocks: 2a12:dd47:5300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:19:51:33:f9:89:72:07:76:f6:d7:26:94:3e:56:5e:e6:b8:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
Validity
Not Before: Apr 19 12:34:25 2023 GMT
Not After : Apr 17 12:39:25 2024 GMT
Subject: CN=F47E5B145ECAB35022F7A53E60235D35D59D71C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:26:68:be:32:b8:ca:19:52:08:a2:b8:4b:
c5:d9:e3:a0:34:7e:4a:3a:e2:ee:3f:50:ab:2b:86:
ab:70:ad:71:a7:c1:fd:dc:bd:ec:ea:04:9a:24:81:
47:75:7b:fe:72:6c:30:87:fd:87:30:14:d4:de:96:
66:62:af:39:4f:ff:ba:26:97:eb:df:2c:4d:8e:5d:
fa:ba:b4:53:f9:ff:00:9e:6c:12:48:32:7a:b0:63:
e6:07:37:e9:85:e6:90:4e:30:74:e6:ba:97:7f:d0:
74:d8:00:7a:e4:d5:89:26:e1:39:e0:5d:e6:de:54:
2c:b0:68:c1:e9:bf:a3:7d:12:13:75:21:04:65:b5:
9c:70:c1:a6:8f:6f:17:7e:6c:63:07:6b:58:12:1b:
2e:dd:c3:b5:79:67:ee:8c:06:a2:4b:17:35:53:36:
ce:aa:0a:ab:81:a7:27:bf:a2:d0:07:4e:ed:38:95:
cc:86:12:6b:29:25:96:8c:9c:e0:93:57:aa:e5:b5:
11:c4:36:65:3f:db:5e:c9:7a:59:30:bb:52:9a:5e:
8d:b7:85:8d:ae:46:1c:3e:a7:69:14:32:4d:5f:d7:
2c:02:d7:28:88:5e:49:1b:b2:1e:77:84:e6:76:fa:
28:21:80:16:e2:82:d2:a2:17:c3:54:45:d6:b6:04:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7E:5B:14:5E:CA:B3:50:22:F7:A5:3E:60:23:5D:35:D5:9D:71:C7
X509v3 Authority Key Identifier:
keyid:8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Rudaki/0/326131323a646434373a353330303a3a2f34382d3438203d3e20323131353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5300::/48
Signature Algorithm: sha256WithRSAEncryption
57:84:41:8f:70:92:b6:71:83:89:98:a4:10:07:e2:a8:51:32:
96:5a:05:07:46:f5:90:76:6f:d6:a2:60:b9:8f:8a:9d:92:7b:
39:d9:a8:a3:d1:37:d7:8e:a5:9d:27:a3:e3:56:66:19:77:88:
07:50:6d:0b:d5:47:43:14:c4:e1:d1:35:bd:0e:f3:27:ae:67:
b6:7e:eb:83:13:e2:3a:e0:1b:8a:13:b3:43:0f:39:ec:7a:04:
35:2b:97:92:29:40:3a:15:d7:41:54:c5:b6:f6:43:fd:0b:70:
4a:a0:10:60:c5:37:03:d1:b2:bc:ef:b9:08:17:7e:da:79:b7:
a2:87:3d:1f:e8:f3:48:3e:66:31:7d:1a:4c:23:2b:6f:1f:f7:
d8:a6:3a:c5:e5:ab:63:14:7f:d7:21:f0:8e:0a:cd:7b:45:30:
d2:11:8e:fb:e4:e3:8a:93:61:97:1a:f9:9f:61:b3:a1:3e:58:
c9:d5:ca:f5:7e:28:a9:c7:be:64:34:1e:00:64:fe:6b:fa:4d:
60:8c:90:62:30:f2:3e:55:bd:51:7d:a7:b4:62:d5:bf:55:25:
6f:8c:fe:4b:c6:a9:75:c8:4b:3e:47:e8:05:72:40:d1:cc:88:
a1:a2:f2:44:a7:55:79:19:62:71:98:54:8f:6e:5e:82:f4:45:
a1:27:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 19:10:28 2025 by rpki-client