Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
File: 32332e3133382e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: x1U4yijf9XJkWY0lJsPla1mlZxpHn25Q9EIXyMd72ew=
Subject key identifier: D7:D0:F9:A2:9D:C3:88:8F:91:03:CA:BD:5F:2D:2D:D2:6A:75:DA:19
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 478BC06A89C21079161D80E5CEA4FF87DE759B5D
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
Signing time: Wed 20 Sep 2023 22:23:54 +0000
ROA not before: Wed 20 Sep 2023 22:18:54 +0000
ROA not after: Wed 18 Sep 2024 22:23:54 +0000
asID: 945
IP address blocks: 23.138.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8b:c0:6a:89:c2:10:79:16:1d:80:e5:ce:a4:ff:87:de:75:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: Sep 20 22:18:54 2023 GMT
Not After : Sep 18 22:23:54 2024 GMT
Subject: CN=D7D0F9A29DC3888F9103CABD5F2D2DD26A75DA19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:2d:42:23:8f:d2:d6:2e:4d:80:81:97:7c:
4f:ca:2e:cd:32:a4:bd:16:ac:51:f1:d4:e7:aa:22:
23:2f:e9:bd:ac:49:eb:4a:18:02:9d:33:aa:0c:62:
25:08:5e:9b:32:a9:04:46:49:a9:cd:de:fc:aa:1a:
e5:da:16:c5:28:73:e1:1c:ec:13:f4:81:56:5e:09:
6c:6a:4d:eb:5d:c6:96:cb:cf:0a:dc:4d:30:af:1a:
71:4e:5c:5d:62:c5:8a:9d:64:74:d7:1a:c5:75:fa:
41:d5:0d:d9:62:88:88:e0:f0:fe:e8:d1:41:56:5f:
81:3d:02:b2:51:39:9c:f6:aa:6f:1e:c9:ec:00:66:
7d:bc:6c:aa:d3:70:75:29:41:12:81:69:bf:83:3b:
6a:52:da:5e:12:08:0e:20:47:35:8e:a2:1a:32:87:
2b:f2:6e:22:76:d8:a4:22:62:08:b9:59:cc:40:81:
d9:e8:33:0e:fc:04:30:e4:41:6a:d5:f2:02:ce:b9:
bd:e0:c4:8f:54:fc:02:b8:7b:3a:26:f1:26:5f:cc:
01:08:50:6e:3a:54:75:71:cf:b2:fc:40:35:09:77:
19:77:98:1b:00:17:05:84:ed:90:50:31:6b:ef:eb:
90:9d:8c:f4:10:2c:ed:d7:76:09:8d:f7:57:46:d4:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:F9:A2:9D:C3:88:8F:91:03:CA:BD:5F:2D:2D:D2:6A:75:DA:19
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:01:13:8f:77:8a:17:36:78:68:ac:81:44:a3:8f:69:ff:1a:
4c:ee:8f:bf:59:00:b5:1a:15:07:20:dd:c9:2b:80:5a:af:60:
68:77:eb:48:b9:fa:17:89:dc:58:e2:6f:80:e5:58:16:41:c4:
a2:29:e9:f1:7b:31:a0:98:b2:47:37:9b:f1:98:5b:0e:d2:98:
ac:54:d3:d5:85:74:4d:70:94:e0:3d:fc:98:b8:fc:9d:0a:24:
4b:1e:0b:3f:5a:83:3d:59:86:f1:4f:47:e9:62:b9:f7:ec:de:
68:01:c3:f1:c3:a3:f7:61:aa:50:a0:f5:e2:86:55:60:46:6e:
b3:f1:63:3b:ff:72:64:18:cb:13:08:76:dd:58:6f:1a:1b:6a:
79:91:a9:7d:8a:9f:b6:87:c0:fb:b2:fb:ca:90:ba:07:eb:dd:
b8:9c:7e:ed:45:79:60:b7:ca:98:c6:26:46:98:1a:27:16:98:
ef:6d:0d:f2:67:a6:cf:3b:d0:93:18:12:b0:43:fe:9f:48:30:
74:37:43:d8:e0:bb:e9:4a:6f:38:1b:64:4d:a5:14:3c:95:35:
ff:f4:01:f7:78:d9:0d:9d:16:26:07:b0:03:2a:d6:3e:d6:01:
fe:1d:c2:b4:9e:59:57:27:01:ef:82:82:54:e1:18:6e:57:96:
79:d5:d7:f9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUR4vAaonCEHkWHYDlzqT/h951m10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzA5MjAyMjE4NTRaFw0yNDA5MTgyMjIzNTRaMDMxMTAvBgNV
BAMTKEQ3RDBGOUEyOURDMzg4OEY5MTAzQ0FCRDVGMkQyREQyNkE3NURBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeC1CI4/S1i5NgIGXfE/KLs0y
pL0WrFHx1OeqIiMv6b2sSetKGAKdM6oMYiUIXpsyqQRGSanN3vyqGuXaFsUoc+Ec
7BP0gVZeCWxqTetdxpbLzwrcTTCvGnFOXF1ixYqdZHTXGsV1+kHVDdliiIjg8P7o
0UFWX4E9ArJROZz2qm8eyewAZn28bKrTcHUpQRKBab+DO2pS2l4SCA4gRzWOohoy
hyvybiJ22KQiYgi5WcxAgdnoMw78BDDkQWrV8gLOub3gxI9U/AK4ezom8SZfzAEI
UG46VHVxz7L8QDUJdxl3mBsAFwWE7ZBQMWvv65CdjPQQLO3XdgmN91dG1PHtAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQU19D5op3DiI+RA8q9Xy0t0mp12hkwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
cAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMjMzMmUzMTMzMzgyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeK6DANBgkqhkiG9w0BAQsFAAOCAQEA
CwETj3eKFzZ4aKyBRKOPaf8aTO6Pv1kAtRoVByDdySuAWq9gaHfrSLn6F4ncWOJv
gOVYFkHEoinp8XsxoJiyRzeb8ZhbDtKYrFTT1YV0TXCU4D38mLj8nQokSx4LP1qD
PVmG8U9H6WK59+zeaAHD8cOj92GqUKD14oZVYEZus/FjO/9yZBjLEwh23VhvGhtq
eZGpfYqftofA+7L7ypC6B+vduJx+7UV5YLfKmMYmRpgaJxaY720N8memzzvQkxgS
sEP+n0gwdDdD2OC76UpvOBtkTaUUPJU1//QB93jZDZ0WJgewAyrWPtYB/h3CtJ5Z
VycB74KCVOEYbleWedXX+Q==
-----END CERTIFICATE-----
Generated at Tue Oct 17 17:15:02 2023 by rpki-client on console-fra.rpki-client.org