Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
File: 323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa (raw, json)
Hash identifier: xdRWCN/CACOtuSj32n3hSa2uIrvsvDDAnAZtxu1smbY=
Subject key identifier: 05:25:BB:F9:21:60:FB:7E:1E:55:00:18:0E:AB:3D:0F:19:1C:D0:0F
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 108BB9CCE9CDC9BB38910FCCFE70D0838CE01A25
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
Signing time: Mon 10 Apr 2023 03:31:28 +0000
ROA not before: Mon 10 Apr 2023 03:26:28 +0000
ROA not after: Mon 08 Apr 2024 03:31:28 +0000
asID: 203069
IP address blocks: 2602:fc23:120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8b:b9:cc:e9:cd:c9:bb:38:91:0f:cc:fe:70:d0:83:8c:e0:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Apr 10 03:26:28 2023 GMT
Not After : Apr 8 03:31:28 2024 GMT
Subject: CN=0525BBF92160FB7E1E5500180EAB3D0F191CD00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:f1:ff:65:a1:1f:97:eb:f7:2e:49:b0:36:
23:e8:8e:44:6b:3e:4f:74:fc:7f:6e:78:bf:1a:5a:
e3:1c:ae:72:04:ce:f5:0c:fc:f0:90:73:70:97:49:
8c:f8:a0:7f:6b:7a:3a:de:17:6a:42:ce:ee:25:a4:
a0:af:b4:5d:0b:cb:67:a0:53:21:c8:ab:ef:f6:8e:
2b:4b:41:b2:79:15:f1:09:63:6b:e8:93:23:21:f8:
09:36:df:2b:86:2f:cc:62:b5:a6:b7:26:14:8d:91:
5b:30:b6:95:e8:b2:a8:bb:66:ef:38:58:d2:dc:ee:
9a:68:8d:05:a6:65:64:f9:fa:2d:14:d3:55:e5:08:
12:7d:4a:84:71:66:e3:7d:f4:3c:97:d5:7c:b4:0c:
7c:a1:8b:73:1f:b0:52:d9:b1:fb:d1:02:ca:e9:25:
be:d5:19:76:de:13:fd:16:9f:ae:a3:bc:34:f0:b4:
0a:d5:2c:ac:f0:13:62:da:9f:4a:f0:b3:ab:12:96:
69:ca:09:66:cf:51:6a:d4:e8:c3:44:09:a5:25:c9:
f5:24:ed:3f:51:55:a9:a7:2a:e7:c2:31:d7:29:4d:
9a:75:44:0d:46:37:6f:e5:d4:72:50:f5:bb:1d:61:
69:0a:d4:f2:33:25:fc:62:7f:53:07:4e:cd:f0:e6:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:BB:F9:21:60:FB:7E:1E:55:00:18:0E:AB:3D:0F:19:1C:D0:0F
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3132303a3a2f34342d3434203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:120::/44
Signature Algorithm: sha256WithRSAEncryption
3b:a1:b1:9d:14:54:5b:8f:df:bc:fc:9c:2c:9b:7d:7a:0c:98:
99:e8:24:08:6c:d5:27:75:a0:f1:b8:ed:1e:4b:a4:e7:c6:b5:
02:27:07:c2:82:61:26:f8:8e:e0:38:c7:79:fe:74:b2:5f:45:
93:df:57:d9:0d:75:80:05:06:03:b9:85:fc:62:bf:69:a8:03:
a2:b8:61:5b:79:06:15:ab:37:31:66:d9:7b:42:7b:7b:af:fa:
2b:8f:dc:42:c6:d4:26:9e:31:c9:85:97:e3:46:5a:29:42:7b:
59:f0:2c:f4:aa:6d:da:2d:ce:8b:7f:4e:24:73:31:82:7c:94:
5e:28:93:8a:2a:8b:a1:72:bc:19:5b:13:32:46:d1:0c:bb:74:
32:f6:9d:d9:40:e2:46:92:bc:36:b0:69:f7:10:e0:f1:44:2e:
be:62:ef:da:94:ac:90:8a:6c:18:5a:71:32:49:a7:b0:ed:9e:
91:4c:12:d1:6e:2a:12:14:cc:a8:d6:6a:cd:08:49:2f:a7:83:
8d:be:60:88:89:d2:88:98:57:b4:5f:ad:83:e6:18:6d:1e:53:
5e:7b:dd:fd:7f:80:8b:c8:9b:e9:5c:72:84:dc:d6:73:65:7b:
3e:47:fe:b5:52:1f:a1:6a:fa:aa:01:52:e1:fa:e6:c9:b5:3d:
d5:5e:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:14 2025 by rpki-client