Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32332d3233203d3e2039363633.roa
File: 3139392e3138392e3135362e302f32332d3233203d3e2039363633.roa (raw, json)
Hash identifier: 3x8JDy1/+j+w1Bv76XG5CGOOUb/PSmhn5LrudzQ0pcI=
Subject key identifier: AC:EA:78:F8:B9:D1:09:CE:85:40:39:4A:6C:19:E3:21:CB:F5:D4:59
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 525CCA75E822D125FF70DEDC36C47B9340110939
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32332d3233203d3e2039363633.roa
Signing time: Fri 06 Oct 2023 09:48:36 +0000
ROA not before: Fri 06 Oct 2023 09:43:36 +0000
ROA not after: Fri 04 Oct 2024 09:48:36 +0000
asID: 9663
IP address blocks: 199.189.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5c:ca:75:e8:22:d1:25:ff:70:de:dc:36:c4:7b:93:40:11:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: Oct 6 09:43:36 2023 GMT
Not After : Oct 4 09:48:36 2024 GMT
Subject: CN=ACEA78F8B9D109CE8540394A6C19E321CBF5D459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:e2:50:97:1d:29:89:60:55:6d:60:e8:cb:
28:d5:d0:fa:47:74:21:71:47:0d:d9:2b:15:db:cb:
cd:4c:79:82:2e:5d:93:a5:0f:30:55:fb:19:ed:de:
ad:d6:90:62:3e:da:18:b1:d6:49:86:30:58:ca:d8:
47:f1:20:90:1e:f3:27:61:05:19:35:8f:e0:6d:ca:
8c:17:8a:5a:79:e6:c8:d5:64:97:45:7a:54:6e:a5:
9e:85:b3:d9:5e:6f:a0:bc:bf:ca:17:99:ac:d9:d9:
3f:2b:27:17:28:6f:4c:35:a4:a2:ed:c7:7d:4e:8d:
9e:15:f9:b9:df:28:02:3e:fc:c4:76:f7:9d:54:59:
67:8a:0c:50:cb:31:04:e5:01:c0:02:bc:a6:30:87:
e4:b0:61:bc:f3:32:7c:45:d1:10:c0:53:c8:4a:39:
43:52:72:07:34:b6:11:34:e5:80:9c:0b:15:44:00:
ea:08:23:de:76:57:53:b9:f1:af:9e:e6:30:05:5d:
1f:09:d6:ed:ed:8c:6d:39:bb:ff:0c:05:cd:d2:33:
27:5d:ca:b9:d0:30:34:9d:b9:be:3d:67:4b:16:32:
bb:90:84:dd:da:41:21:a7:89:c0:c0:5b:8d:2f:59:
57:19:12:ba:5a:68:a3:20:50:99:a9:76:37:76:cd:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:78:F8:B9:D1:09:CE:85:40:39:4A:6C:19:E3:21:CB:F5:D4:59
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32332d3233203d3e2039363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.189.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:7d:2e:3d:57:1f:ce:67:f6:0b:c8:ef:5a:ee:ef:b5:4b:c9:
f3:e8:49:97:d5:1b:69:49:41:1e:22:17:42:73:6e:aa:45:9d:
fc:7e:bc:c5:0d:7e:6b:de:d0:a2:b1:af:b1:89:14:d6:2c:32:
f7:dc:df:1c:9a:64:e5:3a:6a:69:39:fa:22:79:c8:a1:9f:a1:
5d:87:95:bc:b7:da:bd:a1:72:62:1a:e8:a8:1f:69:c0:a4:6e:
fe:87:2a:78:9f:24:81:f9:4e:37:ec:9b:11:85:d3:05:db:0a:
e8:17:8c:a4:13:9f:a7:c8:8c:f7:0b:26:ae:32:e1:e4:c8:5f:
80:4c:e6:eb:8f:f1:0c:8c:47:9c:cc:14:0a:ef:1b:02:ae:43:
81:78:03:32:b5:fd:00:80:f9:a7:ee:da:1d:ac:f4:d7:db:f1:
d1:3c:e6:de:5d:1e:59:a8:2f:0d:4c:72:f3:2c:90:a3:3f:65:
9f:5a:0d:0b:09:67:9f:33:0c:f8:00:6e:e0:3d:c6:0c:50:39:
e9:07:b6:a5:95:6d:81:bb:80:bd:3d:8e:24:36:4b:e0:f3:e2:
07:cc:e7:06:ac:8f:92:53:4a:b9:d1:e8:57:04:db:f7:d9:2f:
4a:77:04:10:a8:1b:21:ce:f9:51:11:89:9a:d5:9f:7c:23:e3:
93:96:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 16:43:40 2023 by rpki-client on console-fra.rpki-client.org