Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Matt/1/3130342e33372e34332e302f32342d3234203d3e203439353932.roa
File: 3130342e33372e34332e302f32342d3234203d3e203439353932.roa (raw, json)
Hash identifier: dfnzI1b1E0CB5f/R1TFMO9R1ImCY2jo4Kowmk8ZxGco=
Subject key identifier: 73:F9:75:DF:E7:E3:E0:3C:CB:A5:A6:29:17:44:F1:FB:74:80:67:CD
Certificate issuer: /CN=F6C9D934383DB93C7203D4C8BF331DB6D9F472BB
Certificate serial: 480D42D1FA818E086075A7A11ED500D8BBD48D6C
Authority key identifier: F6:C9:D9:34:38:3D:B9:3C:72:03:D4:C8:BF:33:1D:B6:D9:F4:72:BB
Authority info access: rsync://rpki.co/repo/AS945/12/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.cer
Subject info access: rsync://rpki.co/repo/Matt/1/3130342e33372e34332e302f32342d3234203d3e203439353932.roa
Signing time: Fri 12 May 2023 14:24:21 +0000
ROA not before: Fri 12 May 2023 14:19:21 +0000
ROA not after: Fri 10 May 2024 14:24:21 +0000
asID: 49592
IP address blocks: 104.37.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0d:42:d1:fa:81:8e:08:60:75:a7:a1:1e:d5:00:d8:bb:d4:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6C9D934383DB93C7203D4C8BF331DB6D9F472BB
Validity
Not Before: May 12 14:19:21 2023 GMT
Not After : May 10 14:24:21 2024 GMT
Subject: CN=73F975DFE7E3E03CCBA5A6291744F1FB748067CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:58:2c:54:d3:ee:3e:b5:2f:ce:a9:a6:4e:
a9:d6:85:78:03:69:32:ff:31:a0:c0:21:6e:67:81:
1a:fe:14:90:c8:ae:15:77:42:f6:28:bc:9d:94:59:
89:25:12:0b:3c:eb:11:d1:e3:07:bb:33:b9:d0:33:
fb:7a:a8:51:88:e9:a8:bc:5d:3b:89:a0:05:fb:72:
4f:27:18:3a:06:ec:d5:e8:2e:9d:bd:d8:ae:4b:a7:
e6:e4:c7:f9:ba:a3:40:03:83:61:6a:e3:a4:2b:46:
e2:17:ef:fa:c8:75:b4:2e:57:60:33:0c:c7:6f:60:
72:97:b8:7d:0f:7a:02:54:6e:bd:0d:f8:62:02:f5:
bf:d3:7f:fa:17:e3:87:4d:72:c3:cf:bf:50:32:0b:
f8:25:39:bf:a1:c2:e8:07:ca:8d:2f:3b:40:a5:15:
aa:1d:80:f0:95:be:85:27:cd:cb:4a:c1:e7:48:98:
97:c3:de:0c:e3:26:18:16:ed:f3:79:ff:8c:b9:7b:
ac:18:1f:91:df:f5:ed:6d:5d:94:b9:f7:11:77:29:
2d:af:ae:e9:9f:7c:f7:55:40:01:43:3d:43:11:4f:
93:15:7c:1a:87:5c:21:c3:d8:d5:c4:39:9d:47:18:
4f:d6:c3:c9:43:ba:76:31:9b:84:bf:5e:0e:f7:75:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:75:DF:E7:E3:E0:3C:CB:A5:A6:29:17:44:F1:FB:74:80:67:CD
X509v3 Authority Key Identifier:
keyid:F6:C9:D9:34:38:3D:B9:3C:72:03:D4:C8:BF:33:1D:B6:D9:F4:72:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Matt/1/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/12/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Matt/1/3130342e33372e34332e302f32342d3234203d3e203439353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.43.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:9f:2c:be:79:ae:f6:a4:7f:dc:bc:ce:4b:8a:f4:ca:08:
00:4e:88:28:3d:04:3a:d4:9f:4f:0c:71:4a:0e:dd:bc:5e:2d:
ac:73:d3:8a:2c:1b:34:d8:aa:ef:fd:71:ba:c7:47:3b:56:74:
fc:18:b2:03:3d:29:57:5f:c7:86:ff:13:e2:26:5c:7c:33:6f:
6d:50:82:74:0c:7b:47:f8:ea:ba:2a:5c:0f:de:08:a5:d5:08:
88:af:3e:31:36:06:e4:47:f5:b7:71:79:cb:9e:41:f6:bb:12:
31:14:ef:d8:0e:44:a8:d6:ae:9c:11:27:4f:4e:d1:19:7b:17:
f5:0e:8f:7f:b0:4f:c3:86:6b:96:1e:5e:19:0a:b3:01:37:a8:
0f:fc:5f:d1:51:95:c3:d9:96:74:4f:33:e1:c3:13:43:92:ae:
10:67:16:48:5f:1f:85:11:45:e3:3a:c5:8a:51:40:58:42:10:
d9:e5:90:15:e8:19:45:0e:da:cd:13:fd:ca:41:c7:e7:fc:96:
32:75:7e:a1:0c:4c:55:e8:30:d5:e8:02:8c:04:80:d1:0f:c7:
65:2a:09:e9:9b:17:e8:9e:6f:6e:ee:80:6d:6b:5b:35:08:c9:
6c:0c:53:e5:48:5d:ed:d1:6f:28:fc:d7:d2:f0:59:03:1b:77:
75:c2:d2:2b
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIUSA1C0fqBjghgdaehHtUA2LvUjWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDOUQ5MzQzODNEQjkzQzcyMDNENEM4QkYzMzFEQjZE
OUY0NzJCQjAeFw0yMzA1MTIxNDE5MjFaFw0yNDA1MTAxNDI0MjFaMDMxMTAvBgNV
BAMTKDczRjk3NURGRTdFM0UwM0NDQkE1QTYyOTE3NDRGMUZCNzQ4MDY3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpVgsVNPuPrUvzqmmTqnWhXgD
aTL/MaDAIW5ngRr+FJDIrhV3QvYovJ2UWYklEgs86xHR4we7M7nQM/t6qFGI6ai8
XTuJoAX7ck8nGDoG7NXoLp292K5Lp+bkx/m6o0ADg2Fq46QrRuIX7/rIdbQuV2Az
DMdvYHKXuH0PegJUbr0N+GIC9b/Tf/oX44dNcsPPv1AyC/glOb+hwugHyo0vO0Cl
FaodgPCVvoUnzctKwedImJfD3gzjJhgW7fN5/4y5e6wYH5Hf9e1tXZS59xF3KS2v
rumffPdVQAFDPUMRT5MVfBqHXCHD2NXEOZ1HGE/Ww8lDunYxm4S/Xg73daDjAgMB
AAGjggHEMIIBwDAdBgNVHQ4EFgQUc/l13+fj4DzLpaYpF0Tx+3SAZ80wHwYDVR0j
BBgwFoAU9snZNDg9uTxyA9TIvzMdttn0crswDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL01hdHQvMS9GNkM5RDkz
NDM4M0RCOTNDNzIwM0Q0QzhCRjMzMURCNkQ5RjQ3MkJCLmNybDBmBggrBgEFBQcB
AQRaMFgwVgYIKwYBBQUHMAKGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEy
L0Y2QzlEOTM0MzgzREI5M0M3MjAzRDRDOEJGMzMxREI2RDlGNDcyQkIuY2VyMHAG
CCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
TWF0dC8xLzMxMzAzNDJlMzMzNzJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDM0MzkzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABoJSswDQYJKoZIhvcNAQELBQADggEBAHlH
nyy+ea72pH/cvM5LivTKCABOiCg9BDrUn08McUoO3bxeLaxz04osGzTYqu/9cbrH
RztWdPwYsgM9KVdfx4b/E+ImXHwzb21QgnQMe0f46roqXA/eCKXVCIivPjE2BuRH
9bdxecueQfa7EjEU79gORKjWrpwRJ09O0Rl7F/UOj3+wT8OGa5YeXhkKswE3qA/8
X9FRlcPZlnRPM+HDE0OSrhBnFkhfH4URReM6xYpRQFhCENnlkBXoGUUO2s0T/cpB
x+f8ljJ1fqEMTFXoMNXoAowEgNEPx2UqCembF+ieb27ugG1rWzUIyWwMU+VIXe3R
byj819LwWQMbd3XC0is=
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:43:43 2025 by rpki-client