Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3233203d3e20393435.roa
File: 3130342e33372e34322e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier: e555wbKdkRcOdz0lvbOMmrMx/ugunlYnGYHzLhGtY7A=
Subject key identifier: 40:91:DE:FA:55:B3:7B:25:90:29:3F:FA:EF:E0:C3:BA:BA:CB:9B:DB
Certificate issuer: /CN=338A77CF88DD64F23FBC649EBD286448F9071586
Certificate serial: 7F39A784537109BC76F14444D1A75C40CBB5C4FB
Authority key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority info access: rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject info access: rsync://rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3233203d3e20393435.roa
Signing time: Mon 14 Aug 2023 02:43:26 +0000
ROA not before: Mon 14 Aug 2023 02:38:26 +0000
ROA not after: Mon 12 Aug 2024 02:43:26 +0000
asID: 945
IP address blocks: 104.37.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:39:a7:84:53:71:09:bc:76:f1:44:44:d1:a7:5c:40:cb:b5:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Validity
Not Before: Aug 14 02:38:26 2023 GMT
Not After : Aug 12 02:43:26 2024 GMT
Subject: CN=4091DEFA55B37B2590293FFAEFE0C3BABACB9BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:a0:dd:c4:20:b3:e1:74:16:a1:78:00:f5:
21:d2:35:1a:65:8a:f8:a3:7e:b7:a0:6c:07:cd:dd:
26:ca:a2:a7:b3:d1:32:05:2c:86:67:b8:15:e9:32:
73:61:a7:05:74:3c:fe:33:f7:71:4f:76:9b:f6:73:
4c:7a:8b:f8:a3:f9:27:c6:de:68:39:a5:8b:e8:ef:
b9:25:f7:5b:9c:71:26:a4:ed:96:f3:9c:89:c9:35:
fa:7f:7d:11:07:b7:e0:58:3f:13:16:e3:b8:14:7f:
3a:78:16:87:ba:22:a6:99:28:6c:43:19:27:83:16:
05:92:97:e8:a9:98:06:53:17:2c:cd:a6:11:36:e9:
5f:7e:3a:99:57:0b:35:39:71:8d:b2:b6:d7:70:3e:
0f:83:05:dc:3e:87:ac:f7:b1:ca:6f:6c:76:55:07:
0f:13:cb:09:df:37:d0:53:e5:9b:f0:b9:37:ee:dd:
86:04:c8:7f:64:b3:f6:cb:b8:c4:d5:f3:3e:c5:a4:
1a:ff:6e:81:f7:e5:e4:2b:b8:df:6f:73:81:2e:fd:
ba:be:06:16:79:e2:ce:0f:66:da:fd:46:9b:89:cc:
b3:70:7c:f1:3f:68:27:24:db:3c:77:7e:0d:74:9a:
27:bd:ba:97:14:d0:89:19:bd:f3:48:15:1e:98:7f:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:DE:FA:55:B3:7B:25:90:29:3F:FA:EF:E0:C3:BA:BA:CB:9B:DB
X509v3 Authority Key Identifier:
keyid:33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3233203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:36:4a:01:68:63:64:78:2b:bb:19:1d:78:cf:a7:d1:e6:6f:
fb:b9:77:54:55:ea:e2:25:ef:5d:54:b4:64:c1:b4:27:9d:e9:
3f:6b:ff:54:4a:14:19:e7:10:f8:2c:d8:0e:f8:5d:9f:cc:c9:
d5:40:f5:93:0c:3b:1b:44:79:60:90:b6:87:ea:04:05:fa:a8:
e8:11:e8:89:e0:07:b6:1b:c4:8a:4a:37:35:05:0d:30:81:35:
a3:ca:ea:f8:49:82:3a:cd:39:96:01:07:b9:29:56:e9:8a:ba:
34:44:f1:71:6b:ca:20:a6:9e:bb:48:bf:6c:d0:ce:9f:39:13:
e5:fa:42:c1:8e:0f:91:d7:32:18:51:4f:78:1c:9c:a2:de:f3:
0b:29:55:ec:03:7a:26:41:86:21:f9:80:dd:ce:e6:a5:81:e3:
e2:9f:08:72:93:12:26:c0:ef:24:76:c9:99:52:13:0b:30:4f:
e4:55:27:fa:a0:cd:1f:72:8a:0b:d6:03:41:d8:8f:20:0b:e6:
fc:c8:9e:e7:ef:7a:38:4b:62:69:7e:6d:31:a0:9f:29:2c:44:
9e:89:d2:db:49:02:21:6f:2d:02:58:09:59:4f:2f:0c:45:fd:
e5:8c:bd:d4:be:43:20:b4:5f:f3:e6:b5:35:d4:e4:f5:7a:be:
94:9f:c9:a1
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUfzmnhFNxCbx28URE0adcQMu1xPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4QTc3Q0Y4OERENjRGMjNGQkM2NDlFQkQyODY0NDhG
OTA3MTU4NjAeFw0yMzA4MTQwMjM4MjZaFw0yNDA4MTIwMjQzMjZaMDMxMTAvBgNV
BAMTKDQwOTFERUZBNTVCMzdCMjU5MDI5M0ZGQUVGRTBDM0JBQkFDQjlCREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5qDdxCCz4XQWoXgA9SHSNRpl
ivijfregbAfN3SbKoqez0TIFLIZnuBXpMnNhpwV0PP4z93FPdpv2c0x6i/ij+SfG
3mg5pYvo77kl91uccSak7ZbznInJNfp/fREHt+BYPxMW47gUfzp4Foe6IqaZKGxD
GSeDFgWSl+ipmAZTFyzNphE26V9+OplXCzU5cY2yttdwPg+DBdw+h6z3scpvbHZV
Bw8TywnfN9BT5ZvwuTfu3YYEyH9ks/bLuMTV8z7FpBr/boH35eQruN9vc4Eu/bq+
BhZ54s4PZtr9RpuJzLNwfPE/aCck2zx3fg10mie9upcU0IkZvfNIFR6Yf94hAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUQJHe+lWzeyWQKT/67+DDurrLm9swHwYDVR0j
BBgwFoAUM4p3z4jdZPI/vGSevShkSPkHFYYwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEyLzMzOEE3
N0NGODhERDY0RjIzRkJDNjQ5RUJEMjg2NDQ4RjkwNzE1ODYuY3JsMGcGCCsGAQUF
BwEBBFswWTBXBggrBgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzEyLzMzOEE3N0NGODhERDY0RjIzRkJDNjQ5RUJEMjg2NDQ4RjkwNzE1ODYuY2Vy
MG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMTIvMzEzMDM0MmUzMzM3MmUzNDMyMmUzMDJmMzIzMzJkMzIzMzIw
M2QzZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaCUqMA0GCSqGSIb3DQEBCwUAA4IBAQAc
NkoBaGNkeCu7GR14z6fR5m/7uXdUVeriJe9dVLRkwbQnnek/a/9UShQZ5xD4LNgO
+F2fzMnVQPWTDDsbRHlgkLaH6gQF+qjoEeiJ4Ae2G8SKSjc1BQ0wgTWjyur4SYI6
zTmWAQe5KVbpiro0RPFxa8ogpp67SL9s0M6fORPl+kLBjg+R1zIYUU94HJyi3vML
KVXsA3omQYYh+YDdzualgePinwhykxImwO8kdsmZUhMLME/kVSf6oM0fcooL1gNB
2I8gC+b8yJ7n73o4S2Jpfm0xoJ8pLESeidLbSQIhby0CWAlZTy8MRf3ljL3UvkMg
tF/z5rU11OT1er6Un8mh
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:49 2023 by rpki-client on console-ams.rpki-client.org