Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530323a3a2f34382d3438203d3e20323030383739.roa
File: 326131323a646434373a336530323a3a2f34382d3438203d3e20323030383739.roa (raw, json)
Hash identifier: dnScJcJG5L50VAtvDBEd5xLfKo8sprbwsn+NkMzIWPA=
Subject key identifier: 01:B3:77:87:4E:21:61:7D:63:9A:85:71:C4:67:91:CE:24:0C:38:A8
Certificate issuer: /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial: 3245DFC6EB5FFCB11FDC0600AF9C9E1FADB3281E
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access: rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access: rsync://rpki.co/repo/John/1/326131323a646434373a336530323a3a2f34382d3438203d3e20323030383739.roa
Signing time: Thu 04 May 2023 09:32:12 +0000
ROA not before: Thu 04 May 2023 09:27:12 +0000
ROA not after: Thu 02 May 2024 09:32:12 +0000
asID: 200879
IP address blocks: 2a12:dd47:3e02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:45:df:c6:eb:5f:fc:b1:1f:dc:06:00:af:9c:9e:1f:ad:b3:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Validity
Not Before: May 4 09:27:12 2023 GMT
Not After : May 2 09:32:12 2024 GMT
Subject: CN=01B377874E21617D639A8571C46791CE240C38A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:1d:ff:59:de:20:8f:de:5a:0f:de:54:c9:
58:ec:a8:00:48:a4:11:2e:af:53:27:68:59:15:25:
2d:81:51:91:4d:b5:5d:15:65:29:89:1f:0d:20:53:
8b:ab:0b:dd:93:3c:85:07:24:99:eb:68:9b:7a:f1:
a1:30:dd:86:b3:97:19:db:54:cf:0b:84:ff:15:b3:
83:e5:41:95:9a:86:bb:ac:87:3e:ca:46:00:9f:9e:
53:cc:10:46:9e:01:c2:7c:ec:cf:eb:a2:d0:a8:d1:
75:77:8a:7a:2f:8a:aa:22:c6:02:8e:86:1c:58:f6:
61:33:97:4a:bc:e4:7c:53:02:11:ba:03:d0:43:20:
3f:4b:20:e1:d9:da:08:32:7f:58:8e:fa:99:1c:51:
9f:59:59:01:e1:24:78:b8:9d:a3:82:c5:04:26:8b:
10:f9:81:38:59:42:a4:d6:8e:e2:c7:b0:44:41:8a:
c8:9b:77:39:ec:ef:37:eb:6b:94:ac:bb:4c:b5:53:
43:b0:83:b2:46:1c:cb:7a:f1:e6:8b:f7:11:63:14:
a5:22:52:08:ea:3b:83:2f:39:de:34:84:e2:8b:7a:
e2:30:92:3a:95:85:ab:d8:92:56:5b:2e:c3:9c:81:
49:7d:a1:89:ed:d0:82:78:85:cb:81:a6:49:7c:e5:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B3:77:87:4E:21:61:7D:63:9A:85:71:C4:67:91:CE:24:0C:38:A8
X509v3 Authority Key Identifier:
keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530323a3a2f34382d3438203d3e20323030383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3e02::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a7:b7:c3:2c:63:eb:d7:99:19:fc:44:71:c9:e8:bb:89:ff:
b6:30:d2:c4:a4:70:7e:74:65:7a:6a:09:47:dd:8c:d6:63:6e:
07:5c:73:4b:6b:32:c0:8c:b5:39:2d:ee:7c:d4:f1:17:12:0e:
67:b5:d8:3a:6d:3a:6c:a2:27:19:95:a6:d2:41:5f:8c:19:76:
d3:2a:09:40:2d:ca:a5:8a:fd:96:20:4e:3a:77:51:21:07:1b:
2a:0a:e0:ac:20:24:9b:ea:9b:2f:6c:ef:b4:8e:ed:be:35:24:
88:21:37:9f:22:e3:53:3b:47:4a:6a:40:d5:78:24:c7:eb:0f:
29:1b:b0:14:fe:33:f1:45:f9:14:b1:cf:72:8d:7b:07:1c:62:
4d:35:65:db:d4:9e:08:69:73:d3:58:0f:56:f7:47:6c:44:95:
95:3b:2e:1a:c5:91:52:04:71:f4:7e:68:9f:2e:26:c1:34:b6:
3d:3b:ee:94:13:8e:41:ac:81:72:af:31:66:9b:c8:b5:bf:de:
dc:ee:e1:ff:cb:25:97:60:4d:08:4d:5f:58:f6:a7:12:5c:2f:
41:ce:91:60:cf:c2:ea:0f:8f:5d:8c:f3:6d:1e:ba:30:6a:a6:
41:98:ad:e7:ba:5d:09:00:8a:46:26:5c:97:d7:15:27:9e:cc:
6d:92:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:06:55 2025 by rpki-client