Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
File: 3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier: gmjFlpqPIKGD4HGmzA/XrVFi0eT0xl3K/hu+GqgFciY=
Subject key identifier: 90:D8:49:D3:6D:0F:96:A3:31:72:59:F3:51:AD:FB:5B:72:52:7F:BD
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 392777480EBCD7E37046F292234F5F5C94CA4AC2
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
Signing time: Sat 08 Apr 2023 09:21:58 +0000
ROA not before: Sat 08 Apr 2023 09:16:58 +0000
ROA not after: Sat 06 Apr 2024 09:21:58 +0000
asID: 50058
IP address blocks: 165.140.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:27:77:48:0e:bc:d7:e3:70:46:f2:92:23:4f:5f:5c:94:ca:4a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 8 09:16:58 2023 GMT
Not After : Apr 6 09:21:58 2024 GMT
Subject: CN=90D849D36D0F96A3317259F351ADFB5B72527FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:50:9d:59:6a:22:2e:19:9c:e0:bd:ca:75:
01:7b:7e:8b:e7:fe:74:8d:b2:c2:86:ed:5e:90:f4:
10:f9:69:90:6c:a2:48:a3:8b:aa:e8:08:05:9a:d0:
a6:54:85:9b:ad:b8:a9:40:3b:52:92:f2:d2:c0:f3:
5a:7d:de:be:56:35:ba:d0:6a:85:d6:71:08:60:ec:
1e:dc:da:5d:12:9f:9d:b9:9c:02:95:2a:b0:43:91:
52:5f:c0:14:15:ea:ef:87:bf:58:2d:54:9d:25:8e:
02:40:d8:f7:5e:9c:c4:c0:20:dc:1d:af:b0:47:4f:
42:a7:82:b3:e0:af:c7:89:19:d3:12:f2:6f:d7:cd:
cd:dd:36:a2:76:5c:92:83:87:a7:aa:d8:2b:e8:f8:
9e:f9:36:78:19:92:95:42:fb:58:34:90:26:a2:7b:
ac:9a:62:25:f8:5f:e6:48:98:14:71:ea:b8:28:0b:
e8:3d:58:1f:8e:56:79:ab:87:63:a5:cb:15:9a:4a:
2e:bf:69:c1:6c:ad:1c:90:d9:aa:8a:4f:9e:c2:a9:
6e:62:28:11:b6:6a:45:08:66:cd:82:71:bd:1c:c8:
88:03:04:21:34:dc:17:68:96:00:74:ad:f5:51:e5:
2e:a9:eb:ef:26:b4:15:17:49:e9:4f:73:60:65:c3:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:49:D3:6D:0F:96:A3:31:72:59:F3:51:AD:FB:5B:72:52:7F:BD
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:d1:dc:95:45:59:22:26:af:15:8a:50:c4:65:66:90:27:a6:
15:30:47:9b:02:39:93:58:33:98:c8:ad:b2:fa:a2:57:33:62:
50:20:bd:53:0c:7a:30:a1:bc:2f:de:2d:57:d8:d4:e8:11:31:
2f:d9:49:2e:8b:50:48:6d:ec:a5:4a:ea:5b:fa:76:31:92:79:
f0:7c:0f:70:1a:8c:e0:e1:ad:ec:08:a5:5c:bb:aa:37:be:1b:
e4:21:f4:30:c8:f4:13:22:51:7a:ab:1e:42:61:cd:87:8f:38:
dd:50:0a:c4:b5:65:96:fb:41:14:28:d1:8d:e4:35:62:96:23:
71:84:50:c9:1d:73:f7:e9:8b:0c:a0:1d:f3:d3:a9:59:79:5d:
e5:31:f7:8f:9e:ec:07:f6:b0:60:48:98:34:a1:18:2d:cb:0e:
b3:32:22:35:a7:b2:56:c9:a0:88:af:a9:28:20:86:ee:17:f3:
c3:9d:d3:8f:4d:0b:2a:41:3f:ca:09:e2:c9:ee:ad:74:76:a3:
1b:d2:22:94:9b:1c:12:06:a4:cd:c0:6f:9f:8a:58:7e:fd:d5:
19:7a:3d:9d:dd:b4:df:9f:22:77:75:d4:a8:30:ed:d8:aa:dd:
28:77:75:bf:30:bb:f8:18:8f:43:46:42:51:af:78:be:5b:74:
03:e1:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:08 2025 by rpki-client