Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa
File: 326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa (raw, json)
Hash identifier: Z5zxT/NrxMnMkyEa5Bzu7aQMMFulEi4CY5wYm56L0Bk=
Subject key identifier: 07:EC:73:C6:EF:F1:6B:A8:B3:B9:F7:CB:FD:A5:96:42:9A:83:29:DF
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 4031B85B9CD98B815AF8F5D913B5096396A004AD
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa
Signing time: Fri 04 Oct 2024 12:23:28 +0000
ROA not before: Fri 04 Oct 2024 12:18:28 +0000
ROA not after: Fri 03 Oct 2025 12:23:28 +0000
asID: 216123
IP address blocks: 2a12:dd46:1fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:b8:5b:9c:d9:8b:81:5a:f8:f5:d9:13:b5:09:63:96:a0:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Oct 4 12:18:28 2024 GMT
Not After : Oct 3 12:23:28 2025 GMT
Subject: CN=07EC73C6EFF16BA8B3B9F7CBFDA596429A8329DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:de:0b:ee:11:ac:5e:b5:de:a8:81:b0:fc:
14:26:66:79:ed:01:b4:a8:18:35:0d:0b:ff:f2:38:
9f:3a:6e:37:96:56:d3:a7:f9:2d:8f:4f:82:71:46:
5e:b2:c8:c9:0f:ca:9f:f1:c7:a8:e9:35:aa:15:11:
aa:fc:35:f7:69:41:58:46:2c:cb:6d:a6:76:7d:0b:
b3:4c:73:e2:42:eb:7c:96:cc:73:26:0c:9d:57:e7:
ac:eb:cb:72:7f:45:03:f3:ff:f8:13:65:4c:a7:99:
77:b5:f7:38:86:46:87:13:5a:d1:57:5a:36:b1:b6:
4b:12:ca:b4:89:f9:aa:d2:78:07:25:59:aa:0d:fc:
d8:65:bd:40:36:2a:e9:29:d7:bd:7b:59:23:a2:e7:
fa:1b:8e:96:d9:0c:24:ae:79:ea:e8:ec:a9:6a:d0:
11:b3:32:26:e7:c8:5a:4a:3c:ba:11:55:8c:cf:08:
3a:c5:23:78:21:b2:8d:24:23:32:81:df:22:0c:34:
53:81:b1:0e:bd:39:eb:0e:ce:bc:3a:8e:f3:8c:f9:
05:6e:f3:89:24:37:e5:5f:bb:73:3e:46:24:05:de:
9d:7d:86:7f:9e:b5:b8:a3:08:be:74:d9:e6:cf:e9:
49:a6:c0:26:ce:f6:08:5f:88:f2:95:33:a7:54:93:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:73:C6:EF:F1:6B:A8:B3:B9:F7:CB:FD:A5:96:42:9A:83:29:DF
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1fff::/48
Signature Algorithm: sha256WithRSAEncryption
21:12:67:a8:43:12:eb:b9:1c:b0:ef:21:51:e8:20:e4:81:aa:
26:eb:ab:76:e2:59:6c:35:04:2e:55:4c:c5:b4:ab:21:8e:34:
3a:4b:44:fd:7c:fa:3a:2c:fa:c7:5f:ee:a5:57:b6:c6:5a:a9:
ca:6b:89:ea:3f:16:9c:bb:03:22:4e:cd:ce:ac:1f:23:46:12:
ee:60:3d:a8:42:c2:07:32:c2:3d:0a:e5:5d:72:ba:42:70:63:
53:7c:67:91:13:69:a7:04:a7:f7:59:0a:53:5c:70:19:4c:fd:
4e:15:42:08:dd:3d:f5:f9:28:8d:27:9e:c8:19:fb:4e:b7:ab:
a5:87:0e:e5:ff:36:c7:72:28:64:cf:f9:1b:2c:3a:fb:f2:79:
26:ef:10:d3:5f:e6:76:03:c1:27:d4:5b:e7:61:46:ea:64:c9:
51:df:db:37:7e:93:8a:64:1f:60:7a:6e:22:36:40:c0:05:1a:
5c:d6:ab:2c:b2:aa:c2:7e:53:bf:ed:9c:86:c9:89:27:03:2c:
e2:a4:45:ec:0d:d1:01:f5:66:d2:50:dd:c7:42:73:8a:56:ff:
2a:80:50:2f:d6:d5:ee:40:4d:c7:58:37:bb:f6:f6:2e:2e:ef:
ac:b8:67:90:e1:52:58:d2:0d:51:8c:e0:da:8d:7c:a2:b8:72:
c7:e7:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net