Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
File: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: 9FvqBOh+hrNxslbi5fj1ZmYydU+h7hNTabbbrRPs9U0=
Subject key identifier: C1:6C:EB:2D:5C:6A:A7:66:1A:AE:BD:85:0A:10:08:1D:2D:F5:99:CC
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 317FB0973C3B0ACF898834DA449C50FABD921BAE
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
Signing time: Mon 14 Aug 2023 02:43:43 +0000
ROA not before: Mon 14 Aug 2023 02:38:43 +0000
ROA not after: Mon 12 Aug 2024 02:43:43 +0000
asID: 945
IP address blocks: 165.140.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:7f:b0:97:3c:3b:0a:cf:89:88:34:da:44:9c:50:fa:bd:92:1b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Aug 14 02:38:43 2023 GMT
Not After : Aug 12 02:43:43 2024 GMT
Subject: CN=C16CEB2D5C6AA7661AAEBD850A10081D2DF599CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:d1:58:99:27:2e:fe:71:80:72:8e:b3:8f:
d3:ea:f4:b2:99:f6:13:72:bc:d7:97:3c:84:49:1a:
e7:dc:18:d3:73:5b:de:41:85:95:34:cb:db:b1:52:
6b:05:3f:45:71:ee:8e:24:45:66:1a:b5:76:1f:17:
33:de:60:8c:3b:41:d6:98:33:83:73:48:df:f6:07:
3d:ea:11:c2:b4:78:95:20:4f:f7:10:85:56:f1:87:
78:40:7c:e1:f4:dd:3a:75:99:a5:90:d0:d9:e5:52:
0a:6e:00:c2:71:ef:95:fb:1f:b5:c9:b2:21:29:c6:
0f:6f:2a:08:2f:bf:f5:fc:45:2d:fc:07:4c:46:2e:
fc:ea:f9:db:d1:b1:79:16:ff:30:fb:d5:58:26:5e:
dd:46:d0:d5:30:5d:c1:6e:d6:74:88:dd:89:e2:a9:
73:ed:34:ef:68:cc:ff:b8:59:62:9f:02:90:36:c7:
ae:ee:32:4c:ee:69:e8:84:76:e2:54:29:c5:09:51:
c0:0d:fa:b6:a7:d6:9a:c5:98:b8:4a:5e:94:d3:81:
00:1f:28:76:40:0b:16:03:1e:f8:a7:77:bd:63:d4:
56:ce:86:97:1a:b9:a1:c7:6e:ab:fb:65:29:ca:61:
51:b1:fc:4f:df:9a:b4:cf:45:e5:5b:b5:73:85:ee:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:EB:2D:5C:6A:A7:66:1A:AE:BD:85:0A:10:08:1D:2D:F5:99:CC
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.142.0/24
Signature Algorithm: sha256WithRSAEncryption
55:77:ee:16:b0:52:e6:39:41:45:39:78:d7:d4:8d:87:c8:c9:
5a:ec:3b:b2:60:8a:2b:bf:3e:53:81:43:92:5b:63:10:75:d5:
1a:62:93:ff:cb:51:eb:34:77:99:f4:a9:7b:54:00:bf:a4:36:
52:95:a7:5c:26:8a:49:f1:1e:52:f7:96:ec:57:b4:b3:42:f5:
b3:3b:8c:40:9c:55:9a:76:3f:21:c8:83:53:4d:61:33:f8:30:
27:f9:e2:dc:2d:b7:bc:51:5e:b8:90:65:71:13:ec:c4:ea:18:
36:ab:34:77:e9:08:2d:b3:de:15:9f:0a:06:a4:5c:f6:d9:5b:
2d:c5:c0:25:8c:84:4b:9c:35:02:40:52:36:da:e3:da:c7:db:
da:de:4c:99:ba:97:32:b6:7a:53:4e:2a:f3:08:e7:62:3a:ab:
86:ec:86:a6:a1:f2:b0:b3:30:53:d4:e0:82:34:6d:6f:fa:0d:
73:4b:27:23:e9:0d:4e:b8:e2:c5:1f:a0:36:ac:68:4d:bd:ed:
26:73:63:52:04:a9:be:c7:88:64:e8:1c:b1:9b:80:7d:c7:65:
c9:23:03:b3:94:6e:ef:53:40:69:3f:8b:05:a1:40:2c:58:90:
0a:5d:28:2f:76:de:c2:d2:1b:8c:5c:ac:fd:ba:cd:09:3f:94:
da:fe:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:41 2025 by rpki-client