Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
File: 326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (raw, json)
Hash identifier: dxEiHHxyduAr1ALkA+xdtGMhtU8fcI+5V8ZzRUAYE7s=
Subject key identifier: 4B:27:69:E4:4C:66:FC:C5:40:C7:5D:25:56:67:7A:78:A5:4F:75:DA
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 647BDD2BBDE747A73DF96C3E190A38351BAEB24D
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
Signing time: Sun 07 May 2023 13:12:45 +0000
ROA not before: Sun 07 May 2023 13:07:45 +0000
ROA not after: Sun 05 May 2024 13:12:45 +0000
asID: 151188
IP address blocks: 2a12:dd47:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7b:dd:2b:bd:e7:47:a7:3d:f9:6c:3e:19:0a:38:35:1b:ae:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: May 7 13:07:45 2023 GMT
Not After : May 5 13:12:45 2024 GMT
Subject: CN=4B2769E44C66FCC540C75D2556677A78A54F75DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:ab:ae:f3:1c:de:8e:bc:f6:40:3e:b3:73:
5f:62:81:22:07:10:d4:0c:1d:62:f4:10:15:5b:44:
33:86:02:7c:2b:49:bc:bc:2a:b9:a9:e2:04:ef:27:
54:e3:81:e4:c4:9e:40:5b:17:30:86:67:d0:58:c1:
3b:6b:98:aa:22:94:56:09:10:1b:6b:22:3e:ee:eb:
ad:40:7b:2d:ef:fc:09:2e:0e:c9:55:ed:60:fc:ca:
32:66:93:76:9a:b3:84:55:53:4f:60:c5:41:fe:fd:
92:11:cd:41:90:78:9d:57:79:90:4f:af:61:12:58:
c0:ba:16:e5:45:66:bb:9c:f6:34:2b:97:4d:3a:16:
6a:36:96:85:df:b5:e6:fd:44:53:b7:6e:19:08:65:
a5:64:3b:51:61:fd:f4:e5:ad:dd:3b:f8:8e:8c:b2:
2a:dd:ba:4e:65:fb:04:1b:3b:fa:d7:18:5e:3e:1f:
99:ed:17:be:c5:f7:71:b1:5f:85:58:e4:c0:c7:11:
68:d8:9a:f1:de:aa:fa:99:15:bb:f9:76:78:cd:71:
3e:fc:82:26:7f:57:f8:32:13:da:61:00:78:65:03:
cd:cc:8a:45:15:fc:63:31:0e:47:62:59:c9:8c:1c:
32:31:7c:e1:09:03:d8:88:aa:43:d3:48:d0:cc:b3:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:69:E4:4C:66:FC:C5:40:C7:5D:25:56:67:7A:78:A5:4F:75:DA
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:f200::/40
Signature Algorithm: sha256WithRSAEncryption
99:ea:27:1c:83:89:06:43:73:e2:9c:8e:c2:62:57:1f:b1:01:
3d:6b:02:b1:70:07:35:67:2c:a8:35:36:a6:56:ff:ec:0c:36:
df:81:54:59:96:d7:a9:2b:3e:99:26:b6:dc:51:f4:6f:9f:72:
dd:2d:72:09:af:84:87:07:1f:8e:53:b9:48:e6:b2:8a:c9:c7:
19:95:27:63:34:4f:5a:73:61:08:b5:b7:a9:05:5f:00:61:8c:
73:3b:2e:d7:ef:ab:04:b7:4a:12:94:c9:99:e7:2f:96:c3:de:
a2:c0:da:18:13:b2:aa:58:59:a8:3f:46:72:5b:55:bf:a8:8a:
42:2f:76:7e:68:0e:df:95:1e:ae:08:91:46:16:28:0b:6b:2d:
d8:e7:16:73:75:d6:dd:9d:cf:81:c0:10:40:f3:62:96:ef:56:
f3:ca:22:8a:f3:4e:e5:31:3d:2b:05:97:99:91:6b:33:a0:bc:
6b:82:a2:44:42:6a:91:ca:a3:ff:a4:bd:b2:2f:82:25:48:4f:
43:88:bf:08:07:c8:ac:33:ae:3f:a4:9b:8c:b9:fa:23:09:32:
85:00:db:37:6e:f5:6d:6c:a6:39:79:0a:aa:cf:f4:44:53:8d:
05:eb:57:af:45:77:26:aa:4c:6e:89:ae:c4:57:94:23:c8:01:
46:1f:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:43:31 2025 by rpki-client