Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e203530303538.roa
File: 3139392e3138392e3135362e302f32322d3232203d3e203530303538.roa (raw, json)
Hash identifier: QgG6blkVJK3Os3zZKCIAUpkRLGBuXJZRSPyEUESOkgQ=
Subject key identifier: 1B:E7:BD:81:CD:A5:25:31:C5:0D:C2:12:FC:9C:B1:39:E5:47:F6:AE
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 8B03F3EABDF6A3A4B2B39566E9B539A3F71F09
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e203530303538.roa
Signing time: Fri 29 Sep 2023 22:57:02 +0000
ROA not before: Fri 29 Sep 2023 22:52:02 +0000
ROA not after: Fri 27 Sep 2024 22:57:02 +0000
asID: 50058
IP address blocks: 199.189.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8b:03:f3:ea:bd:f6:a3:a4:b2:b3:95:66:e9:b5:39:a3:f7:1f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: Sep 29 22:52:02 2023 GMT
Not After : Sep 27 22:57:02 2024 GMT
Subject: CN=1BE7BD81CDA52531C50DC212FC9CB139E547F6AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:ae:25:f0:20:c0:a9:0d:43:0d:53:1f:25:
ff:ba:22:55:d1:bc:b4:ff:a7:78:be:68:fc:5b:6e:
c0:f3:ba:1f:fa:86:4e:30:54:6d:6e:55:59:6e:85:
2e:b9:84:8e:c7:a4:9d:46:8b:1c:eb:84:b0:b1:37:
db:14:c1:8f:24:26:e0:bd:cc:2c:3d:bb:de:e7:31:
27:8b:40:7b:a0:be:71:d9:04:48:46:0f:f2:24:b5:
17:2c:9c:9a:99:06:00:9b:74:67:81:35:96:67:a4:
62:80:69:ee:6b:45:84:f8:79:72:f2:3c:f8:0c:3c:
d9:66:78:8d:f1:bf:ea:99:9e:74:dd:7f:22:7b:f5:
52:f9:e0:df:ee:79:eb:41:b7:e5:18:6a:54:63:2a:
54:9b:7c:1f:49:c0:ef:df:57:7e:e4:15:d4:3e:32:
92:c2:18:51:7f:70:9c:67:7f:f9:31:be:32:79:4c:
4e:4f:26:b9:da:1a:cb:76:72:ce:ca:79:d1:d8:f2:
26:f1:c7:a9:d6:6e:33:2e:57:79:77:ef:c8:c0:1d:
d8:61:db:e2:36:c2:69:c6:b9:cb:b9:ea:85:14:7f:
42:9b:11:eb:ff:ac:94:cc:13:d1:4f:46:e2:27:ab:
71:29:91:fa:aa:92:55:31:4a:90:88:56:fa:47:27:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:BD:81:CD:A5:25:31:C5:0D:C2:12:FC:9C:B1:39:E5:47:F6:AE
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.189.156.0/22
Signature Algorithm: sha256WithRSAEncryption
06:76:90:57:fc:d6:64:cb:f2:7d:4f:2f:00:00:da:b6:b2:c5:
08:33:05:9d:60:7f:d2:00:2f:54:2e:cf:f4:1b:ff:4f:e3:ff:
04:fa:90:0e:12:26:cd:ee:a5:22:43:b5:fc:ac:7c:80:92:f4:
e1:95:3b:bc:95:f3:cc:28:45:d4:a5:4d:7f:56:fe:06:7f:45:
1b:ba:3c:b0:3c:a2:88:86:79:40:d4:b6:62:12:80:13:f2:c6:
84:f5:00:44:96:8d:2e:88:09:c5:9e:95:f8:5b:15:45:25:04:
38:aa:93:0b:9f:2d:c1:22:67:82:75:b9:91:b2:68:16:ab:b7:
67:ee:3a:89:d4:f6:60:c5:64:cf:69:9d:a3:c9:59:e0:5c:a3:
ad:94:b4:f6:08:36:64:b6:c2:f9:f3:50:4e:93:d9:6b:3a:bf:
51:f7:25:0d:65:96:7c:04:1d:7a:d3:e8:49:29:7e:5c:f7:c3:
07:9e:51:f2:76:b0:37:ff:4b:28:cd:4f:fe:44:2e:b5:03:4c:
2d:e7:7b:4b:58:5c:b2:0d:eb:68:e2:71:5e:3c:9b:6d:fd:44:
a2:8a:22:19:7e:73:5d:72:4d:0e:f7:03:74:39:66:c6:69:fb:
27:8e:6a:ca:db:6d:02:b6:28:21:47:36:32:68:b3:a1:87:65:
8d:89:79:ef
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIUAIsD8+q99qOksrOVZum1OaP3HwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzA5MjkyMjUyMDJaFw0yNDA5MjcyMjU3MDJaMDMxMTAvBgNV
BAMTKDFCRTdCRDgxQ0RBNTI1MzFDNTBEQzIxMkZDOUNCMTM5RTU0N0Y2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qq4l8CDAqQ1DDVMfJf+6IlXR
vLT/p3i+aPxbbsDzuh/6hk4wVG1uVVluhS65hI7HpJ1GixzrhLCxN9sUwY8kJuC9
zCw9u97nMSeLQHugvnHZBEhGD/IktRcsnJqZBgCbdGeBNZZnpGKAae5rRYT4eXLy
PPgMPNlmeI3xv+qZnnTdfyJ79VL54N/ueetBt+UYalRjKlSbfB9JwO/fV37kFdQ+
MpLCGFF/cJxnf/kxvjJ5TE5PJrnaGst2cs7KedHY8ibxx6nWbjMuV3l378jAHdhh
2+I2wmnGucu56oUUf0KbEev/rJTME9FPRuInq3EpkfqqklUxSpCIVvpHJ+oLAgMB
AAGjggHMMIIByDAdBgNVHQ4EFgQUG+e9gc2lJTHFDcIS/JyxOeVH9q4wHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
dgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMTM5MzkyZTMxMzgzOTJlMzEzNTM2MmUzMDJmMzIzMjJkMzIz
MjIwM2QzZTIwMzUzMDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAse9nDANBgkqhkiG9w0BAQsF
AAOCAQEABnaQV/zWZMvyfU8vAADatrLFCDMFnWB/0gAvVC7P9Bv/T+P/BPqQDhIm
ze6lIkO1/Kx8gJL04ZU7vJXzzChF1KVNf1b+Bn9FG7o8sDyiiIZ5QNS2YhKAE/LG
hPUARJaNLogJxZ6V+FsVRSUEOKqTC58twSJngnW5kbJoFqu3Z+46idT2YMVkz2md
o8lZ4FyjrZS09gg2ZLbC+fNQTpPZazq/UfclDWWWfAQdetPoSSl+XPfDB55R8naw
N/9LKM1P/kQutQNMLed7S1hcsg3raOJxXjybbf1EoooiGX5zXXJNDvcDdDlmxmn7
J45qytttArYoIUc2MmizoYdljYl57w==
-----END CERTIFICATE-----
Generated at Tue Oct 17 16:29:17 2023 by rpki-client on console-ams.rpki-client.org