Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
File: 323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa (raw, json)
Hash identifier: v5quPoHHxOMeeT5ymJNamXpX/617DZ2i6nRatlING6E=
Subject key identifier: E6:13:05:95:62:47:46:32:BB:4C:C2:A3:EC:27:B9:A5:13:46:AF:D9
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 4E047A88FA7702A5D642B91FA9C5896C73862170
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
Signing time: Sat 08 Apr 2023 09:22:00 +0000
ROA not before: Sat 08 Apr 2023 09:17:00 +0000
ROA not after: Sat 06 Apr 2024 09:22:00 +0000
asID: 44406
IP address blocks: 2602:fc23:114::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:04:7a:88:fa:77:02:a5:d6:42:b9:1f:a9:c5:89:6c:73:86:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 8 09:17:00 2023 GMT
Not After : Apr 6 09:22:00 2024 GMT
Subject: CN=E613059562474632BB4CC2A3EC27B9A51346AFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:77:bb:d6:42:d7:18:76:6b:90:b7:c9:30:
f3:2b:bd:36:b2:f7:43:93:06:c4:b8:b3:39:1c:62:
89:4a:6a:5b:b9:81:82:d4:f0:42:65:0c:00:92:7f:
4c:5d:06:ad:8f:ec:7d:b8:6a:39:2e:e9:64:82:5d:
a8:82:96:3d:62:c5:93:17:a9:eb:6d:6a:30:7b:73:
6e:d3:08:33:5f:56:2e:65:2c:87:12:35:76:6b:25:
ee:70:14:53:b8:8e:6b:c0:fd:fa:81:76:2a:28:53:
21:48:58:ca:13:7c:3f:7e:73:31:68:f5:93:d6:75:
c8:46:17:2e:b1:e3:98:f8:ea:fc:cb:cc:40:02:93:
e2:e9:6d:82:50:9f:d2:9d:91:98:20:1a:10:b5:9a:
db:98:34:83:98:45:cc:38:e4:48:c1:25:48:39:7c:
45:75:79:e4:2d:a4:27:f9:04:6f:c5:a4:84:dc:f8:
64:d7:3c:26:e4:12:5d:48:6c:01:f1:90:06:c2:b3:
d8:2d:cb:41:f4:63:a9:67:fe:c3:38:11:dd:c6:66:
03:1d:27:4c:5f:8e:12:41:ba:3a:37:2b:eb:62:c3:
10:38:40:03:50:a1:1e:0b:a8:81:f7:72:73:7e:05:
25:b8:88:ec:88:fa:b4:65:80:8e:0c:fc:36:6d:9f:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:05:95:62:47:46:32:BB:4C:C2:A3:EC:27:B9:A5:13:46:AF:D9
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:114::/47
Signature Algorithm: sha256WithRSAEncryption
4c:d2:3e:f9:5d:47:a9:36:05:cc:ce:e5:2c:2b:0a:29:44:23:
4c:b9:bb:74:9c:49:2e:4b:a8:32:8d:7f:a1:c1:09:ed:4e:b4:
15:fa:16:85:d3:b7:aa:83:89:50:d1:78:fe:8e:19:10:4c:39:
ae:ff:73:d4:86:5f:7e:5d:ad:c2:71:5c:a5:2e:0d:82:e1:9e:
6e:29:c6:ed:30:a0:e0:af:bc:c7:d3:f6:63:d0:0c:a3:4a:3f:
3b:cf:87:db:c9:1c:73:b6:59:89:da:b0:c7:2d:9c:2d:e7:17:
84:71:df:25:c7:08:9c:5c:ee:b2:72:e2:8b:e1:c4:65:2d:79:
7c:cf:6a:c6:0e:de:e4:8f:3b:c0:20:67:09:44:be:37:f8:c3:
c2:57:12:c9:a5:bc:7a:cc:9d:0e:15:7c:cd:58:c7:99:80:a0:
70:11:bc:11:59:63:a8:bb:21:4e:6e:e5:98:cf:00:e3:2a:e5:
85:b2:01:02:17:70:85:97:b6:53:04:c5:2c:bd:4e:73:dc:d4:
e7:40:1e:07:e8:87:9f:ab:dd:33:6e:c0:2c:fe:b8:e2:77:02:
9c:ca:7f:f9:d1:1b:b6:64:12:40:a5:de:e0:05:37:a5:37:88:
bd:72:f8:0a:65:1a:5d:27:6c:23:52:aa:c0:ca:52:fe:fe:40:
38:b8:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:18 2025 by rpki-client