Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3234203d3e203530303538.roa
File: 3130342e33372e34322e302f32332d3234203d3e203530303538.roa (raw, json)
Hash identifier: JVhsfaDvXkhu+vxWsXUSmxrwFq5Oa4+7J9IP06tDhSU=
Subject key identifier: 25:9D:BD:4D:43:33:EC:8F:8F:F5:01:A1:8D:6E:52:24:81:E4:D6:F1
Certificate issuer: /CN=338A77CF88DD64F23FBC649EBD286448F9071586
Certificate serial: 445E26A8BABC37E5EA3D9D158C89A754097CBB8B
Authority key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority info access: rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject info access: rsync://rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3234203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 06:55:25 +0000
ROA not before: Mon 10 Apr 2023 06:50:25 +0000
ROA not after: Mon 08 Apr 2024 06:55:25 +0000
asID: 50058
IP address blocks: 104.37.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5e:26:a8:ba:bc:37:e5:ea:3d:9d:15:8c:89:a7:54:09:7c:bb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Validity
Not Before: Apr 10 06:50:25 2023 GMT
Not After : Apr 8 06:55:25 2024 GMT
Subject: CN=259DBD4D4333EC8F8FF501A18D6E522481E4D6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:e8:42:b9:19:c3:8a:0a:78:85:8c:b4:e2:
9f:68:d7:4f:12:c1:33:52:3a:de:03:98:d5:c0:0a:
c1:15:8a:56:44:73:1c:bc:c9:72:ce:6f:4c:82:ec:
b7:5f:9a:f6:62:fd:fd:81:2e:51:80:36:a7:7d:ac:
cd:41:ee:1d:88:57:1e:79:3b:2c:84:35:98:30:8b:
f3:4e:14:81:eb:e3:cf:75:d9:1a:c1:8d:3c:45:f2:
83:53:06:53:02:48:6c:c4:14:1a:70:2b:35:e3:1e:
71:e6:4e:32:71:df:f6:cc:62:76:75:2e:b0:ee:6f:
e7:b6:06:99:5b:6d:3b:f5:86:1a:95:3c:a2:e2:7c:
a3:7f:f8:1f:5d:cf:bd:38:f9:a7:6d:45:84:4e:db:
8e:c3:b4:34:d8:ef:f6:fe:d9:97:59:10:74:6c:1d:
a4:e0:46:81:15:a9:d6:27:a2:9f:b1:8c:b8:fe:45:
a4:04:a7:3d:32:db:a6:40:f9:f2:a2:44:a3:88:34:
96:40:d6:2b:eb:f6:92:41:27:46:44:a2:be:2b:b0:
9d:83:8f:63:96:96:01:49:50:63:b8:5e:35:59:b5:
c0:9a:2c:6e:fb:b8:56:00:97:a4:72:8a:88:7b:3d:
a0:46:f6:38:41:de:0f:d6:62:2a:6c:61:4f:28:da:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9D:BD:4D:43:33:EC:8F:8F:F5:01:A1:8D:6E:52:24:81:E4:D6:F1
X509v3 Authority Key Identifier:
keyid:33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/12/3130342e33372e34322e302f32332d3234203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a1:d1:0c:7f:f6:2b:1b:6c:28:8e:e5:04:79:a5:06:60:2e:
58:c5:0a:1f:f7:f1:63:32:91:6f:b7:d9:c3:04:a3:af:04:bc:
d3:6e:77:bb:28:48:7d:22:f1:ab:37:1a:5b:ae:79:ed:c8:36:
aa:de:96:6f:73:2f:1f:73:cf:d8:86:ee:a0:2f:cf:8a:a6:20:
6f:e7:11:05:8a:f1:ee:fc:fb:f4:76:d7:d5:16:6f:b2:f3:51:
fb:c5:fd:3a:18:b4:3b:7c:ee:5f:14:a6:b0:d3:79:8c:c5:ca:
bd:27:01:87:e6:6a:d6:3e:eb:bf:af:8b:eb:0a:92:7e:62:24:
c8:cd:e0:33:87:6e:5e:af:1d:37:69:13:32:c3:77:a5:8e:29:
33:98:21:d6:52:37:8b:79:32:16:89:3a:d2:a0:f1:39:31:09:
f6:3a:f8:c8:61:d9:93:f1:7a:44:54:1e:f9:3a:5f:0e:75:16:
f6:f0:9d:3e:24:ef:56:08:42:ee:30:a6:39:15:f7:18:6c:ba:
35:ab:66:14:1b:62:e3:d3:a4:7d:a6:2c:bc:b7:a1:d2:2d:e0:
dd:e0:63:73:71:54:50:a8:c2:48:8a:75:26:12:1b:b1:f2:82:
df:de:d8:8f:cc:c5:23:55:18:74:85:85:27:26:08:87:82:55:
f6:99:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org