Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
File: 323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa (raw, json)
Hash identifier: r1JqpTwwkLKI2wrHCDBoZfhod/CHIrKCvs3F2oIqOCU=
Subject key identifier: 7B:23:C8:C1:EF:C4:96:DB:A5:AC:D2:00:84:D6:1F:79:88:62:FB:FE
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 5EC81F39016D473F96BE804BBA4E8EE5AFBA3519
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
Signing time: Sun 09 Apr 2023 21:04:32 +0000
ROA not before: Sun 09 Apr 2023 20:59:32 +0000
ROA not after: Sun 07 Apr 2024 21:04:32 +0000
asID: 203069
IP address blocks: 2602:fc23:120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c8:1f:39:01:6d:47:3f:96:be:80:4b:ba:4e:8e:e5:af:ba:35:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 9 20:59:32 2023 GMT
Not After : Apr 7 21:04:32 2024 GMT
Subject: CN=7B23C8C1EFC496DBA5ACD20084D61F798862FBFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:41:44:1a:83:af:91:16:1e:10:42:27:e4:
df:e1:f8:46:32:ae:26:24:9d:7e:23:b2:b8:43:00:
7a:a4:ff:88:ad:bc:7d:5c:32:75:df:ec:f8:fc:d5:
ed:27:f3:ed:05:9a:9f:14:5e:12:e2:8b:4c:a0:fb:
e9:00:56:f9:5d:3a:eb:04:d6:88:c1:e3:0d:da:f7:
69:4f:3d:c5:c9:bd:0d:7d:f6:60:7b:01:f5:4f:53:
fe:d6:2e:da:48:b9:13:66:1d:3d:d9:9e:c8:a2:87:
f7:46:16:8b:06:b3:09:10:a1:0f:9d:d0:1c:a4:3f:
02:e6:f8:dc:a3:35:7e:33:e9:7e:ef:4a:44:bf:0d:
47:28:9e:12:38:97:90:ec:c8:f4:f4:c5:61:08:d8:
50:29:ed:d1:30:ab:78:01:cc:88:73:0d:e3:cb:6e:
54:dd:44:12:81:33:d5:88:1d:2a:cf:32:36:97:33:
3a:87:04:e2:ae:15:24:bf:2b:08:4e:3b:89:b4:74:
3c:f4:6a:3f:4f:9f:c5:a8:aa:d2:f5:86:7e:d5:82:
05:89:23:fb:b4:06:2c:86:82:d4:9f:e5:51:eb:ce:
87:c1:2a:90:cd:3e:42:89:e1:99:9e:c7:92:33:32:
97:da:49:a2:3e:be:7f:d2:c9:37:b4:57:1d:6d:8c:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:C8:C1:EF:C4:96:DB:A5:AC:D2:00:84:D6:1F:79:88:62:FB:FE
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:120::/44
Signature Algorithm: sha256WithRSAEncryption
6d:66:dc:7c:0c:43:13:91:d6:f6:1f:dc:82:9f:b1:b3:2e:39:
4f:0c:e0:48:e3:3f:4e:38:08:5e:c7:df:ca:4a:f2:ef:23:7f:
a3:0c:f0:41:12:17:eb:15:fe:8d:0b:81:b1:7f:07:e5:5b:19:
ae:2d:75:64:7d:c5:13:94:42:15:da:ba:10:f0:c9:55:a2:40:
e7:a7:9b:fa:50:c7:0f:89:45:75:30:18:fe:7c:a8:d3:f1:0f:
07:0b:b6:f8:0b:f0:33:30:7a:13:86:d6:16:a8:f6:e8:46:36:
d6:ab:6c:e0:db:87:75:eb:bd:38:f3:04:b0:30:87:b7:56:61:
72:32:09:02:db:bf:e6:2c:ba:b8:e8:7f:a6:27:0b:aa:49:7f:
bb:03:31:51:d4:52:f5:8c:e8:a2:25:14:3d:13:37:a1:75:b4:
3a:e2:11:b6:03:75:b3:ee:ee:e2:55:0a:62:7e:ba:ad:a2:4e:
f8:7d:2f:ac:01:c5:d3:72:69:77:af:b4:66:1e:50:38:82:fb:
96:c9:64:f3:0a:21:5f:99:48:58:37:08:7a:eb:2c:c7:ec:60:
ee:be:bb:fb:e5:4b:9a:e0:93:35:72:72:ee:44:0b:b3:dd:6d:
a6:7f:47:4a:73:79:68:8e:ab:bc:ee:9a:e2:5e:1f:94:c4:0a:
00:dc:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:07 2025 by rpki-client