Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e20393435.roa
File: 323030313a3530343a3133303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: pJnPkxPyvuE2gOzJpZkNq7YrQafqjaQNVe2ZzdllmLc=
Subject key identifier: 49:5D:8B:6F:FA:21:65:6D:1A:39:F9:E7:4F:93:B3:C4:0F:CA:8F:3A
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 7C1FA5F828AD405DF3275D2C3AD5600FFC9A7243
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e20393435.roa
Signing time: Fri 04 Aug 2023 23:39:22 +0000
ROA not before: Fri 04 Aug 2023 23:34:22 +0000
ROA not after: Fri 02 Aug 2024 23:39:22 +0000
asID: 945
IP address blocks: 2001:504:130::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1f:a5:f8:28:ad:40:5d:f3:27:5d:2c:3a:d5:60:0f:fc:9a:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Aug 4 23:34:22 2023 GMT
Not After : Aug 2 23:39:22 2024 GMT
Subject: CN=495D8B6FFA21656D1A39F9E74F93B3C40FCA8F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:06:61:af:e9:6f:70:2c:49:3d:51:73:70:
96:3a:17:f6:5e:4c:64:a9:29:e5:30:64:00:ab:49:
e8:55:fc:15:1c:1e:61:3b:ff:f8:2f:37:3f:2f:27:
65:a4:06:3c:b8:93:11:b3:55:09:3f:78:68:c6:57:
30:dd:7f:22:01:9f:1c:53:81:8a:b0:8f:48:9e:e2:
50:b2:b0:6e:3d:15:c7:96:19:5c:87:81:f4:8e:4b:
e0:23:4a:8d:b3:3e:f0:b8:3e:87:38:d3:00:3a:f2:
b3:f5:2c:cf:c7:e3:80:2e:7a:b2:3f:d8:7c:23:76:
6d:b5:c6:e9:62:9d:2a:17:24:10:a0:ad:5d:28:af:
43:ce:d9:22:78:5d:4f:68:79:d7:09:1d:25:16:94:
ef:fc:33:ac:27:c1:8e:8a:cd:05:a5:54:1e:e9:8f:
24:2f:4b:7e:4d:a6:49:39:4d:16:e7:5f:2a:49:ec:
66:93:3f:18:00:91:80:b1:d0:41:8a:f8:0f:53:09:
f0:f1:2d:5e:88:df:8d:94:55:68:3d:f2:9d:22:79:
c9:63:ee:27:c7:80:b6:74:a7:cb:4c:33:e5:b4:02:
b5:c3:9f:61:39:15:9a:95:48:59:96:ee:58:f3:b9:
ab:04:8d:74:39:af:26:2a:85:32:0e:c6:d3:6e:09:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:8B:6F:FA:21:65:6D:1A:39:F9:E7:4F:93:B3:C4:0F:CA:8F:3A
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:504:130::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f0:e7:37:cd:71:af:15:30:a9:9c:d8:cb:4d:d2:0b:c9:b3:
dd:52:4b:b3:63:7e:a6:68:de:0e:d2:38:0e:8f:a6:b4:5b:c4:
11:f1:08:e3:02:84:b2:07:00:8d:3c:47:eb:5b:8e:68:bc:0f:
4a:ec:15:ed:67:0e:72:3b:d9:ff:ce:26:ec:77:f4:74:46:20:
ef:ef:ba:e6:df:16:c8:4a:5b:fd:4d:32:bc:67:9d:cd:03:8c:
fa:af:98:44:6c:0b:0c:dd:ed:91:55:72:03:35:f6:be:e0:55:
0f:e7:28:e9:e3:eb:a5:dc:cb:4f:a7:a3:fb:71:19:4a:8a:b6:
83:a3:c4:af:bb:0c:78:18:c8:33:0e:08:75:63:8c:e4:1b:ab:
8d:a2:2e:0c:37:1c:63:06:f2:20:80:bf:67:cd:2d:2e:11:4b:
e2:f9:8c:30:de:17:f3:48:0b:aa:71:80:c7:30:35:27:ea:98:
dc:0d:1f:9d:2e:09:b3:ad:ee:b5:01:1c:fd:79:16:94:37:2b:
07:41:44:1f:3b:47:09:50:fa:15:b6:eb:4f:84:56:3f:a0:fc:
79:3f:b7:f2:11:fa:8a:a8:0e:ec:fe:3e:84:51:64:25:5c:a0:
f0:51:c5:22:27:f8:f4:19:ec:23:9d:59:be:c9:93:ad:79:45:
33:d7:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:42 2025 by rpki-client