Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa
File: 323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa (raw, json)
Hash identifier: sXzYeLPYvvrk410fe26qR3d+3Y+eoqr6TB06NYMYo8o=
Subject key identifier: 87:2C:FC:95:E5:11:85:63:24:E7:73:45:9C:D8:5B:2E:75:D4:C8:2F
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 514D2BFB0DD75A0C64FAA72F77F4778294113225
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa
Signing time: Sat 08 Apr 2023 09:22:00 +0000
ROA not before: Sat 08 Apr 2023 09:17:00 +0000
ROA not after: Sat 06 Apr 2024 09:22:00 +0000
asID: 204340
IP address blocks: 2602:fc23:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4d:2b:fb:0d:d7:5a:0c:64:fa:a7:2f:77:f4:77:82:94:11:32:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 8 09:17:00 2023 GMT
Not After : Apr 6 09:22:00 2024 GMT
Subject: CN=872CFC95E511856324E773459CD85B2E75D4C82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:20:68:00:b8:ce:2e:61:aa:a7:66:6a:0f:
e2:99:8f:7e:8a:81:48:05:5a:0d:f9:29:a5:86:b1:
ce:73:aa:31:eb:c3:04:18:7f:7b:31:05:35:26:b2:
68:c1:46:c6:d0:81:74:b7:e4:7c:1f:82:d3:27:7e:
24:60:51:4d:47:f5:43:b2:e1:18:a0:2c:8e:ae:6b:
b0:af:16:c2:00:bc:2c:93:48:84:a5:ba:5e:c1:6c:
a7:1c:40:c2:4d:1d:42:ec:22:77:26:55:36:a8:27:
6e:e2:ef:84:4d:8f:06:b6:ca:83:e9:b1:04:b0:3c:
ff:98:8b:97:84:d3:e0:50:db:91:f0:11:29:59:0f:
76:ae:36:c6:d2:54:6d:41:0e:1c:6e:23:26:8c:ad:
67:06:4c:73:48:82:57:c5:f8:29:60:3f:86:25:af:
02:96:c8:2e:6e:48:4e:72:4b:8f:0e:49:d9:bc:8d:
8b:e7:5f:84:ad:cb:da:58:3a:86:1d:5e:a3:52:16:
5c:51:a9:d5:c3:f0:ea:55:1f:fb:bf:49:09:a3:13:
fc:85:b6:01:36:99:5c:ec:5e:9e:b5:11:f0:59:ce:
17:ef:99:e1:a6:ac:0b:81:63:63:bd:1e:2e:98:5b:
0f:68:c3:28:3e:9e:90:eb:bc:4d:cb:06:68:80:77:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:FC:95:E5:11:85:63:24:E7:73:45:9C:D8:5B:2E:75:D4:C8:2F
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:100::/44
Signature Algorithm: sha256WithRSAEncryption
56:25:79:e8:7a:b7:24:3f:42:2e:94:59:a4:60:d7:b5:19:0b:
e6:cd:09:a9:a0:8f:44:4c:7d:79:27:ec:fd:50:f7:cf:75:c6:
bd:14:d1:a3:48:78:f7:d5:db:6d:d0:eb:4b:1d:e3:24:21:89:
15:21:a6:85:78:9c:57:b9:a6:78:74:bf:fa:3f:74:ee:ed:8e:
c4:e2:2c:44:4a:ab:1f:5e:8d:85:ca:1d:b6:3b:44:9a:30:95:
5d:99:26:46:17:e1:a2:3c:f7:fc:8a:83:28:a4:79:8b:15:99:
94:1e:9d:10:40:84:40:b8:12:0a:90:8a:43:ac:99:2c:2b:5a:
08:00:04:3e:25:71:67:b3:ea:ef:17:43:f5:7a:4a:e4:f8:f2:
15:4d:ef:7e:dc:54:2e:d6:82:aa:22:c2:ea:84:f9:01:0d:c2:
f7:df:4c:19:7f:0a:a3:9b:07:36:38:8a:15:18:35:6b:6c:2f:
ec:f6:27:d0:72:0e:91:25:84:5e:d7:d8:c6:ea:81:11:e6:58:
8d:38:3e:bb:54:32:c4:25:00:27:7e:b2:ca:e0:83:94:81:e8:
c1:0c:dd:51:40:3a:74:48:35:de:fc:17:9d:c3:90:d9:3a:6a:
30:39:3a:8b:17:f9:2b:d3:ec:12:4a:9c:4c:b6:65:2e:14:ee:
73:8c:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:47 2025 by rpki-client