Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20313334383233.roa
File: 3130342e33372e34332e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier: jjW2F2t+bYsLGl66+7Wj3ohMFMmMBU2ZsuM/hanT+D8=
Subject key identifier: E9:FD:3F:5C:DD:3C:B6:4E:DA:1B:27:22:5D:10:E5:AE:EF:25:A4:46
Certificate issuer: /CN=338A77CF88DD64F23FBC649EBD286448F9071586
Certificate serial: 478D3B531BBF956D08455A557E4357F331151EB3
Authority key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority info access: rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject info access: rsync://rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20313334383233.roa
Signing time: Thu 27 Jul 2023 05:37:38 +0000
ROA not before: Thu 27 Jul 2023 05:32:38 +0000
ROA not after: Thu 25 Jul 2024 05:37:38 +0000
asID: 134823
IP address blocks: 104.37.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8d:3b:53:1b:bf:95:6d:08:45:5a:55:7e:43:57:f3:31:15:1e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Validity
Not Before: Jul 27 05:32:38 2023 GMT
Not After : Jul 25 05:37:38 2024 GMT
Subject: CN=E9FD3F5CDD3CB64EDA1B27225D10E5AEEF25A446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:10:30:0a:1e:a7:be:e6:4f:7f:94:71:9d:
cc:38:cf:1a:f4:24:9f:5c:13:94:9b:9d:6d:53:b1:
0f:e6:1c:9b:60:fb:fd:bf:e7:ce:5b:57:bd:1a:ca:
41:b5:3f:02:fa:99:f5:60:3d:b0:dd:ee:67:48:a6:
4d:60:98:68:cd:03:f1:2f:d7:ca:a3:07:bc:b0:9e:
42:c8:0e:9e:2a:e2:5d:20:3f:ca:c8:c5:08:2c:7f:
84:19:cc:07:66:e7:cf:16:2d:45:0b:00:a6:e1:1f:
aa:74:c9:1f:33:4d:be:65:15:25:b0:85:91:6a:82:
ba:79:81:ac:27:61:76:e4:92:d9:5a:cd:c4:6c:a1:
ed:8a:f4:8a:11:d2:0f:ee:68:97:b9:4c:6f:e2:98:
6c:d9:7b:90:4d:b9:a3:e2:e1:66:67:af:39:65:fd:
7e:aa:3c:a0:ef:d3:01:c3:9b:c0:5e:aa:19:84:b8:
c2:4b:6d:4c:d7:66:00:33:c0:eb:b1:cc:86:71:f3:
0b:5f:a9:fd:62:7c:5f:ef:34:d9:d0:09:b5:94:36:
b7:b3:ed:17:69:57:c4:ee:db:46:e5:7d:e4:fe:e6:
03:28:bc:76:c9:68:a3:04:eb:6a:d3:b9:4d:c0:84:
77:41:da:a8:98:4b:7c:78:76:9f:b2:88:29:80:9b:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:3F:5C:DD:3C:B6:4E:DA:1B:27:22:5D:10:E5:AE:EF:25:A4:46
X509v3 Authority Key Identifier:
keyid:33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:90:1c:18:bd:15:be:ca:e1:f9:34:f3:7b:de:e6:46:aa:
a6:ad:ab:b7:c4:32:38:b4:87:3c:f3:c2:48:98:96:b4:d9:a5:
f0:38:11:0c:51:b6:4e:e8:97:97:bb:5c:5d:be:8b:48:03:74:
f8:dc:f2:04:76:38:ff:eb:43:42:ed:9d:fc:ea:e5:83:43:a9:
e3:e2:d5:39:39:e5:81:81:ec:7d:3c:0c:92:a9:40:81:91:d1:
30:4f:00:f3:cb:6e:8d:0a:ce:1d:cc:de:39:48:26:bb:8e:5d:
0d:b7:f7:51:ad:b1:36:ef:c4:8e:13:86:86:76:80:31:d8:65:
d6:5b:3d:91:35:8c:10:68:67:87:f7:16:0a:ed:a0:c1:2d:09:
d8:67:17:25:89:23:a4:fc:ff:49:fd:05:d4:1a:60:cb:b7:96:
f4:5b:d5:85:b9:45:c7:47:66:1d:96:e8:9b:0d:3a:6a:4d:b3:
61:83:ad:65:18:8f:2c:b6:9c:86:7c:40:51:60:79:e3:c4:f9:
8b:02:6d:fc:19:09:a9:68:3c:04:09:5f:e5:4c:0d:e4:79:99:
fa:25:76:62:76:4c:b5:6d:d8:2b:21:62:e0:d6:a9:54:25:71:
db:76:01:8e:b5:4f:96:8d:e5:42:9e:4d:5f:97:7f:08:d9:a0:
ac:dd:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org