Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
File: 323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier: c51QR01fifoJEJAnkqh/narA3QK3vrL/ZX6yrD1gFpo=
Subject key identifier: D2:E2:6F:EC:C6:2B:62:9A:4F:1B:A9:29:36:DE:14:25:B5:5C:DB:BC
Certificate issuer: /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial: 159DD9FCAF21C9BD1B21356938FBD20812EB951F
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access: rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access: rsync://rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
Signing time: Sat 08 Apr 2023 09:21:58 +0000
ROA not before: Sat 08 Apr 2023 09:16:58 +0000
ROA not after: Sat 06 Apr 2024 09:21:58 +0000
asID: 151062
IP address blocks: 2602:fc23:160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9d:d9:fc:af:21:c9:bd:1b:21:35:69:38:fb:d2:08:12:eb:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Validity
Not Before: Apr 8 09:16:58 2023 GMT
Not After : Apr 6 09:21:58 2024 GMT
Subject: CN=D2E26FECC62B629A4F1BA92936DE1425B55CDBBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:41:01:fa:91:ad:2f:e8:ae:99:1f:5f:16:
b1:20:40:fa:cc:99:dd:96:6e:5c:5b:4e:3b:0b:67:
9a:73:c8:da:57:21:00:f2:cd:7d:6c:31:b8:77:c0:
f9:08:a5:4e:69:37:3b:f2:b0:4a:b1:a2:9d:19:50:
88:e0:ae:2d:c4:2f:75:a8:5c:eb:2f:c1:ae:06:87:
3f:a7:2c:1e:e8:0a:64:57:3e:bc:0e:6a:3f:4e:2a:
42:69:92:a9:43:09:3b:11:39:4e:52:b5:20:92:a0:
f2:98:0f:98:2b:96:d9:e3:c4:53:fd:3d:a1:cb:7a:
24:07:56:46:c7:03:37:13:d4:72:5c:b7:84:4d:53:
c6:93:fc:dd:36:09:5e:63:0e:29:35:16:c6:bf:16:
0b:8a:30:84:7e:41:a9:e8:f8:4c:b7:48:8d:c8:6c:
46:8d:75:1f:80:74:f8:6e:e8:9c:f0:f1:5d:82:33:
35:9f:d5:1b:40:8f:b4:e0:50:46:8b:d3:03:fc:27:
c4:04:a9:86:a0:bd:4f:37:ed:b1:31:47:ce:80:54:
63:29:43:fb:ac:0a:ce:83:64:d6:e1:21:1c:f1:b5:
dd:cc:f9:9b:ef:59:88:8d:6f:d6:21:09:b7:c4:5a:
05:ef:65:39:dc:22:8f:94:74:95:07:07:e2:b4:78:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:6F:EC:C6:2B:62:9A:4F:1B:A9:29:36:DE:14:25:B5:5C:DB:BC
X509v3 Authority Key Identifier:
keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:160::/44
Signature Algorithm: sha256WithRSAEncryption
6b:54:a4:8a:7e:31:72:95:58:fd:76:b1:3d:51:b6:cb:62:64:
ca:24:cc:8a:44:bf:5b:84:46:30:63:38:55:1d:5b:a6:89:b6:
af:d0:0c:e2:bf:33:8e:8c:f1:9e:41:47:69:8e:7a:d4:7e:f3:
93:d7:49:cb:36:7a:c9:09:10:86:5e:63:77:64:ed:6d:b2:a2:
4f:29:fa:8b:7f:1a:71:33:88:df:97:28:4c:ef:91:63:ec:35:
34:f6:4c:83:23:61:64:25:d6:00:6f:7b:98:27:32:64:47:b5:
91:87:4b:fc:03:32:ce:8e:67:06:00:26:05:2e:67:53:6d:fd:
81:b7:7c:89:0d:c7:08:7f:93:75:01:4e:4f:0d:74:db:3d:18:
32:94:f6:24:2f:cc:0b:09:31:74:1c:3e:f3:46:21:03:03:56:
66:07:8a:9c:d4:00:07:97:df:d2:11:97:c8:3f:73:7b:56:da:
a0:f0:a5:c1:fb:28:66:b3:63:82:6e:85:2d:7a:32:23:fa:8f:
f1:ba:9c:7f:fe:f7:0b:ea:8c:18:ae:57:a8:6a:cc:79:4c:15:
43:18:54:e3:39:a8:98:63:dd:fe:ea:91:71:84:22:60:1e:bc:
b3:8e:82:eb:91:f7:db:c0:eb:47:9f:70:d1:88:93:c1:9b:76:
cd:2f:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:44 2025 by rpki-client