Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/August/12/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
File: 3134392e3131322e35332e302f32342d3234203d3e203531383138.roa (raw, json)
Hash identifier: Iu8FdH3Krhhr728IJteuq2NBEqFbmm7pp18Gwqhgq5I=
Subject key identifier: 67:1C:71:2C:BE:C4:D2:B6:FE:05:CB:FF:3D:D7:B7:5B:E3:D9:41:AB
Certificate issuer: /CN=F4DF07ED834F20CF7568CB795C226443F7EE040F
Certificate serial: 22256BEBF5A7FDD80D37B681E8DA14C0454108B6
Authority key identifier: F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F
Authority info access: rsync://rpki.co/repo/HYSP/17/F4DF07ED834F20CF7568CB795C226443F7EE040F.cer
Subject info access: rsync://rpki.co/repo/August/12/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
Signing time: Sat 08 Apr 2023 09:22:08 +0000
ROA not before: Sat 08 Apr 2023 09:17:08 +0000
ROA not after: Sat 06 Apr 2024 09:22:08 +0000
asID: 51818
IP address blocks: 149.112.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:25:6b:eb:f5:a7:fd:d8:0d:37:b6:81:e8:da:14:c0:45:41:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4DF07ED834F20CF7568CB795C226443F7EE040F
Validity
Not Before: Apr 8 09:17:08 2023 GMT
Not After : Apr 6 09:22:08 2024 GMT
Subject: CN=671C712CBEC4D2B6FE05CBFF3DD7B75BE3D941AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:d0:01:f2:b8:6c:d1:53:2d:e8:40:3d:c7:
de:ac:e3:d3:c1:22:13:0e:35:8b:8c:14:95:4c:75:
91:e2:d2:bf:bc:58:5f:f4:f7:38:f8:9f:3d:3e:b3:
b1:b9:48:e4:96:13:aa:d6:c9:4f:60:91:70:50:ce:
4d:11:1f:47:09:28:41:96:41:35:94:3b:0f:7f:87:
3d:85:72:48:61:98:15:54:12:87:cb:5a:86:7f:dd:
6f:d9:e7:b2:2f:30:af:af:46:bc:e8:bc:aa:02:50:
b7:7b:25:7f:b3:be:b7:3d:f1:ff:b4:81:d7:fd:f3:
30:72:97:10:c0:8e:df:f7:c5:02:43:61:fe:09:73:
dc:11:33:55:95:13:4c:64:a1:4f:d3:99:bf:7d:fd:
29:19:44:69:0f:f4:ae:14:71:00:08:20:8d:c3:05:
c1:d6:ef:e7:d6:e8:9a:93:b3:e1:57:ba:80:d9:db:
1a:ed:cf:45:76:30:e2:7a:f1:2a:ee:5c:88:2d:46:
50:9d:ea:da:4b:fb:54:fd:39:80:25:fa:8b:1c:79:
11:91:9b:59:e4:7c:57:f3:f6:6c:93:50:6d:3a:e7:
f6:9b:c3:b1:0f:99:39:83:18:ab:66:44:fb:38:fa:
92:0b:26:eb:d2:ce:7d:ac:89:7a:89:81:d9:80:50:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:71:2C:BE:C4:D2:B6:FE:05:CB:FF:3D:D7:B7:5B:E3:D9:41:AB
X509v3 Authority Key Identifier:
keyid:F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/12/F4DF07ED834F20CF7568CB795C226443F7EE040F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/HYSP/17/F4DF07ED834F20CF7568CB795C226443F7EE040F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/August/12/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.53.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5f:91:c8:f6:b3:b7:84:f6:a5:32:cd:c9:f7:8d:8d:9a:ff:
9b:51:17:c7:ea:7f:9c:0f:b3:ae:3c:cc:27:b5:f6:86:08:66:
07:96:ff:8d:06:80:d9:0e:68:4c:c1:ae:0e:62:9b:ef:e8:ff:
db:cb:fc:6a:19:58:46:de:60:10:b7:e8:bc:9e:9f:49:88:f3:
9c:13:9f:82:a5:bc:2f:09:da:ec:a1:00:f7:5c:2b:21:da:2d:
eb:90:f6:06:d4:0e:ec:1e:a2:70:3d:35:ce:99:d3:71:32:ec:
7c:e7:fd:7d:21:4b:ec:a6:6d:96:d0:50:75:8e:50:c0:73:97:
fc:fe:04:f1:48:80:53:3f:f7:04:d9:cb:d5:ed:8b:f2:80:3b:
8c:90:67:5b:53:b2:e2:5e:47:42:ef:7b:60:25:1e:3b:b7:22:
15:e7:7f:a0:45:d2:a8:1c:db:ca:cc:5c:0d:3e:0f:de:75:da:
57:02:f7:49:e5:a1:0c:c7:25:bf:82:7d:6b:70:1f:0c:22:39:
f9:30:3d:a4:8c:09:6a:2a:39:70:e5:84:5a:38:72:5c:8d:d2:
44:95:e5:18:f4:6e:06:78:a4:47:64:d0:35:41:fb:ab:b3:df:
43:1e:78:f4:32:af:0a:b3:f6:c5:0a:eb:ac:ac:6f:e9:27:1e:
cf:2f:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org