Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File: 323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier: nUeQJzxbpKi6SXi0xExEDv/FnRA9tfIGTade0HPRLB8=
Subject key identifier: 17:F3:E3:C5:31:D0:CC:3B:9A:C9:1B:A8:07:7A:5B:46:9E:5B:18:4F
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 34597BFE478D67B736F745A920A899213306B674
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time: Sat 08 Apr 2023 09:22:00 +0000
ROA not before: Sat 08 Apr 2023 09:17:00 +0000
ROA not after: Sat 06 Apr 2024 09:22:00 +0000
asID: 57429
IP address blocks: 2602:fc23:111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:59:7b:fe:47:8d:67:b7:36:f7:45:a9:20:a8:99:21:33:06:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 8 09:17:00 2023 GMT
Not After : Apr 6 09:22:00 2024 GMT
Subject: CN=17F3E3C531D0CC3B9AC91BA8077A5B469E5B184F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:0e:0c:fa:2a:d7:00:0a:ac:3d:35:2b:2c:
37:ae:62:d3:31:14:8b:e3:15:f9:4b:51:ae:eb:e2:
11:65:94:41:5d:69:7b:92:43:b7:c4:2f:29:e5:92:
8a:ad:63:8a:8d:b6:2f:f3:bf:73:34:74:b9:20:48:
aa:b7:a9:70:a0:7b:49:31:4e:00:3e:6e:29:f1:3d:
38:10:76:7b:ab:b2:aa:09:ae:89:11:4f:0a:86:b8:
be:34:06:b0:3d:6d:a5:8f:34:60:1a:10:68:53:7c:
c0:18:5d:45:3f:87:ae:da:0a:da:73:41:4a:3c:9a:
86:e9:4b:d3:8f:41:ea:86:9d:b8:b5:c9:a3:0d:97:
94:f0:94:55:60:be:b9:b7:5a:c3:f1:d4:1e:ea:bb:
a0:d9:45:a0:bf:9d:b1:5e:10:50:45:ee:fc:3e:77:
29:c9:25:d2:08:40:82:23:e6:8a:29:9d:17:d8:da:
3b:d5:3c:11:bd:e5:6a:23:cc:65:a5:e1:1d:af:c3:
17:03:7d:26:43:78:1f:d6:20:65:7d:9f:24:9a:c9:
fa:c7:eb:f0:bd:de:1e:4b:d5:8e:b1:a4:d5:8d:5e:
f7:50:27:ec:81:9f:ab:87:b9:a2:5e:dc:55:9e:38:
c6:f8:43:71:42:3f:4f:5a:91:b7:f3:b2:93:a8:22:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:E3:C5:31:D0:CC:3B:9A:C9:1B:A8:07:7A:5B:46:9E:5B:18:4F
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:111::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ba:b5:66:10:89:d7:1a:7a:86:6e:db:e4:46:8b:23:1d:0f:
af:46:b0:06:cb:da:0b:e2:28:8d:0a:e6:7e:5a:30:4c:ee:6f:
d9:65:08:18:e5:fa:be:50:74:76:89:26:fe:e4:90:b2:2a:30:
1b:1a:86:18:39:85:a5:60:d1:c0:5b:de:32:2b:e1:51:b4:7c:
0a:a3:92:e9:29:80:3d:1a:33:8a:a6:76:45:fb:de:7d:95:2e:
14:e4:44:6b:c5:7e:22:9f:bc:5d:ab:c1:9b:ec:c6:fa:9c:d6:
4e:c5:27:25:f0:96:8c:7c:46:af:2b:fe:a2:9f:b2:4d:c0:2c:
7a:9e:03:1d:92:82:12:e4:26:69:fb:50:ea:ac:a8:a5:dc:3c:
47:5e:77:3e:b4:f6:a7:80:ef:0f:5b:b4:cc:a6:c6:a6:61:80:
ee:f7:95:a4:da:64:71:c4:d4:7d:ad:be:6c:2b:7e:bb:83:62:
e5:2c:2e:34:ca:48:50:3b:b8:b4:5a:ac:06:17:69:24:b3:1c:
d1:b1:2c:ba:58:18:fd:ac:ec:47:c8:9a:04:ef:4a:67:22:9a:
de:76:a0:d7:14:01:9d:f1:db:d9:2f:f3:2f:6b:65:15:c9:72:
33:cb:a9:21:41:8a:e6:17:9d:15:b4:03:3a:a1:17:b5:90:a7:
67:59:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:47 2025 by rpki-client