Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa
File: 3130332e3232342e39322e302f32342d3234203d3e203332353935.roa (raw, json)
Hash identifier: nypk/ixJOTU8ADWTMPq4+8d3pjfOmmIAowX6Mk4OiJA=
Subject key identifier: 72:5B:AD:4F:1E:F1:26:F5:6A:B5:BE:07:03:69:FF:F3:07:99:F4:4F
Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial: 5810A20B728C493BC50BEBFC67BE01EC321FCFD1
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject info access: rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa
Signing time: Tue 16 Jul 2024 13:26:11 +0000
ROA not before: Tue 16 Jul 2024 13:21:11 +0000
ROA not after: Tue 15 Jul 2025 13:26:11 +0000
asID: 32595
IP address blocks: 103.224.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:10:a2:0b:72:8c:49:3b:c5:0b:eb:fc:67:be:01:ec:32:1f:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF50000
Validity
Not Before: Jul 16 13:21:11 2024 GMT
Not After : Jul 15 13:26:11 2025 GMT
Subject: CN=725BAD4F1EF126F56AB5BE070369FFF30799F44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:45:4f:66:d1:89:ce:54:a9:a8:a6:3b:b6:
ea:f8:9e:fd:34:d8:58:5e:53:57:f7:78:6e:45:17:
c3:2c:35:0b:d3:2f:5d:6b:23:b0:bc:f6:5f:a4:10:
05:f7:1a:4b:f6:15:24:96:17:87:b5:cc:f8:ec:51:
15:02:51:ff:fa:ba:d0:c5:59:5f:dc:f2:ef:4d:d0:
12:3f:00:5b:0f:c0:26:63:6f:46:2f:2f:03:b9:75:
94:3a:41:f5:a1:0c:6e:c5:3f:80:cb:e6:db:e1:73:
73:b9:5d:01:a7:7b:7d:96:90:6e:cb:9c:ea:a8:e4:
03:31:11:f7:ef:30:97:b1:47:da:66:e0:60:08:9b:
f9:56:bd:19:2a:c8:a4:6f:eb:ce:05:21:06:68:74:
cb:ed:7f:98:3a:2f:30:cf:8b:5e:c4:76:9d:b4:29:
f0:d4:fe:08:45:26:c4:ab:a9:60:a3:00:e3:e4:c2:
2c:1b:50:90:9f:bc:de:de:40:24:17:7b:3d:b5:65:
13:52:5f:50:69:17:c3:ea:60:99:99:03:01:a2:ac:
d4:cf:9a:26:00:22:b4:a5:d3:02:19:37:e7:e8:07:
e4:f5:54:d8:1b:29:0e:31:7d:8a:45:0d:b9:97:b4:
2c:f5:f2:11:71:87:ec:06:ae:3f:d3:d5:3a:cc:4f:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:AD:4F:1E:F1:26:F5:6A:B5:BE:07:03:69:FF:F3:07:99:F4:4F
X509v3 Authority Key Identifier:
keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:45:1e:5d:9d:6f:63:93:32:06:74:35:2e:02:d5:48:eb:3a:
02:94:e5:87:fd:06:3a:d6:1b:cb:f8:f1:59:5a:6f:75:ab:74:
02:4d:7f:6c:95:09:97:44:7d:0e:6a:13:64:f9:f1:92:5e:f4:
92:b9:c8:86:ad:f4:93:2b:ad:03:ae:a8:48:36:72:90:0b:25:
0a:a8:41:19:98:4b:d2:5b:04:d6:67:a5:57:b5:8f:33:10:d9:
3d:80:d8:f2:6e:d6:82:f5:89:2b:dc:33:46:db:d4:7b:b8:eb:
75:1e:9e:19:d5:28:35:a9:50:1f:4b:1a:6b:ca:ee:b9:66:6d:
31:2f:8b:23:0e:d8:eb:38:74:90:00:0f:77:0d:37:11:14:21:
5d:fd:40:4d:89:ef:32:7e:44:ff:35:2a:6a:c2:2b:f1:f8:c1:
ef:ee:e7:7e:8e:4f:65:ba:4b:e1:6c:32:8a:fb:db:f5:e3:ea:
94:7b:79:74:f1:36:a2:f9:6c:21:a6:7e:1b:8e:09:56:61:e6:
ec:34:1d:a5:dc:c8:65:da:0a:76:1d:e9:0c:0f:92:9e:58:9e:
4e:5e:f3:a6:42:8d:9a:ca:7b:df:09:f0:9d:81:da:96:03:c7:
16:df:10:0c:b4:c8:88:50:dc:d2:41:d6:a9:0b:a9:ad:3e:65:
be:26:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:36:51 2025 by rpki-client