Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e2037303138.roa
File: 32332e3134392e3233322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: ZW6duAJbtpo0uOHFmJRSho69hcYqFAFn9Qe2qOk9ZxQ=
Subject key identifier: 68:DE:5C:BC:81:8A:CB:4F:62:D7:F0:70:E2:60:65:91:AA:16:A4:1E
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 5DC160F153C2D038B92C16ADDB3DD58D3E23FCC8
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e2037303138.roa
Signing time: Fri 28 Jul 2023 10:49:33 +0000
ROA not before: Fri 28 Jul 2023 10:44:33 +0000
ROA not after: Fri 26 Jul 2024 10:49:33 +0000
asID: 7018
IP address blocks: 23.149.232.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c1:60:f1:53:c2:d0:38:b9:2c:16:ad:db:3d:d5:8d:3e:23:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Jul 28 10:44:33 2023 GMT
Not After : Jul 26 10:49:33 2024 GMT
Subject: CN=68DE5CBC818ACB4F62D7F070E2606591AA16A41E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:6e:a8:d6:47:1d:bb:7e:9f:bb:51:00:68:
6c:e3:42:64:2d:44:7b:65:ac:5d:82:96:30:ef:0b:
a1:6b:fb:4b:3e:ab:35:e3:0c:31:05:b2:11:b9:78:
b6:ff:c6:8b:6d:53:dc:45:9d:0a:40:d3:6d:0a:10:
7d:8b:44:8d:9a:d9:30:8d:eb:f1:0e:24:65:58:91:
76:82:97:bf:fc:ce:3d:ce:1f:83:02:77:6a:82:92:
d4:a2:7d:75:9d:1f:7f:93:53:d8:4a:46:93:37:9b:
b3:0a:83:99:9f:76:c3:53:03:67:c8:24:49:56:45:
73:5a:3f:9d:56:a8:66:25:f9:dc:21:51:e4:7d:a3:
20:ee:df:c2:ae:7d:aa:70:c6:53:95:6b:30:77:75:
6d:ab:18:fb:c7:ea:bd:77:2e:e7:23:55:c5:33:3b:
32:d0:10:60:24:62:b6:1c:a9:28:36:c9:6d:70:e6:
6f:c4:1f:50:3f:80:6a:bc:c0:be:9c:b9:68:f0:40:
11:d8:6e:35:b8:13:3c:5f:22:e6:9d:18:98:33:e7:
91:0a:24:7d:c1:95:a0:b2:c1:a1:9f:0f:21:b3:53:
4f:ee:bf:1e:ab:52:ec:f3:a5:26:16:ed:51:4c:6a:
33:da:22:2d:93:9f:14:6f:dc:fc:46:f9:40:91:17:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:5C:BC:81:8A:CB:4F:62:D7:F0:70:E2:60:65:91:AA:16:A4:1E
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:28:09:45:d2:b1:82:fa:81:5e:e9:1b:15:b1:74:a9:43:ff:
6d:f6:4f:db:f9:57:4f:d5:83:02:7e:fc:fe:2a:1b:63:f9:37:
07:03:e8:02:33:e6:e9:27:27:46:08:bb:a5:42:66:47:cc:31:
22:54:3f:28:3d:72:72:46:50:4a:65:15:56:27:6b:0b:2c:e9:
5a:8f:8e:f5:07:6d:8d:1f:42:c0:cb:a0:9e:fe:0c:1f:bf:88:
78:4c:f3:4b:2b:22:92:dc:39:22:b2:51:67:3b:b2:06:a5:81:
a6:87:a7:4d:57:6a:94:38:b2:d3:69:53:8e:91:f2:8b:b6:1d:
57:04:3d:41:24:c5:58:36:b3:3a:78:52:44:ce:cc:18:21:08:
22:0b:54:db:49:27:aa:02:ff:5b:b8:57:50:0a:32:72:78:9d:
52:6e:21:18:66:0e:78:85:63:c5:d0:08:11:ef:fb:88:ad:53:
fd:a8:04:d4:ed:4a:04:48:91:80:94:d7:d8:31:bc:27:0c:86:
c1:a8:f2:ba:11:06:25:07:95:3c:a1:f0:a4:1a:b0:2a:98:ad:
af:08:5a:2b:48:29:86:67:04:58:a5:7a:9d:8e:20:de:a1:c0:
c1:30:b9:ef:50:d7:79:83:19:a3:33:fa:dd:5f:6b:74:f6:bf:
6e:91:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 14 02:36:39 2023 by rpki-client on console-fra.rpki-client.org