Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
File: 323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa (raw, json)
Hash identifier: Ka73Q0JGoOgjiYIva8Ajkvt6pe2Wpo/+Jv4P1gSArhE=
Subject key identifier: 6C:BF:21:8A:01:9C:6F:14:1D:A6:A6:03:6D:AD:A9:90:3B:F8:73:A0
Certificate issuer: /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial: 7DA274FCB5C9FDB6CC5ACD33834F226D35F02195
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access: rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access: rsync://rpki.co/repo/AS945/2/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
Signing time: Mon 10 Apr 2023 03:31:28 +0000
ROA not before: Mon 10 Apr 2023 03:26:28 +0000
ROA not after: Mon 08 Apr 2024 03:31:28 +0000
asID: 57406
IP address blocks: 2602:fc23:130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a2:74:fc:b5:c9:fd:b6:cc:5a:cd:33:83:4f:22:6d:35:f0:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Validity
Not Before: Apr 10 03:26:28 2023 GMT
Not After : Apr 8 03:31:28 2024 GMT
Subject: CN=6CBF218A019C6F141DA6A6036DADA9903BF873A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:74:03:a1:53:da:cd:2f:60:69:0b:6c:10:
62:bf:9b:5e:cc:a7:f9:4e:cf:61:c6:c4:b1:18:a9:
a6:f4:ae:7c:bc:4b:05:15:6b:7f:a0:fb:ef:0d:dd:
25:8a:b2:ca:93:be:c1:fe:a3:57:dd:90:2a:95:80:
0d:03:01:56:8b:1b:86:29:d4:85:43:a6:fb:35:8c:
a4:e5:4e:83:d6:7a:35:c7:c8:78:fc:1e:2f:68:83:
38:92:c7:e4:9d:87:26:de:93:54:38:df:a1:61:10:
da:92:7b:56:ce:68:9a:0c:13:74:ef:96:4e:0d:eb:
76:53:51:ed:39:44:67:04:6f:71:26:8a:8b:e0:43:
90:61:fe:69:63:70:16:bf:1b:2d:ab:6c:b8:5d:6a:
01:7f:e5:aa:e0:57:33:00:87:0b:43:0a:70:3c:1e:
ea:9a:e1:4e:2a:c3:2a:cc:1c:25:ae:26:d9:36:e4:
c3:98:b6:05:73:3a:99:c2:c8:10:9d:f1:8f:30:0d:
82:ba:67:07:8c:b4:e7:32:7f:f5:e7:34:e8:7c:c1:
be:0b:04:99:a5:4f:f5:03:34:28:67:25:c5:51:c8:
72:33:3d:28:7b:44:57:4e:f1:57:e6:a8:1e:c2:78:
0d:21:4a:b3:9d:a8:22:83:83:b6:49:a9:42:2b:48:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BF:21:8A:01:9C:6F:14:1D:A6:A6:03:6D:AD:A9:90:3B:F8:73:A0
X509v3 Authority Key Identifier:
keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:130::/44
Signature Algorithm: sha256WithRSAEncryption
80:ea:47:35:62:32:f1:76:0f:55:ca:f1:98:8a:d8:49:ef:c4:
ee:f2:66:de:94:be:3d:29:e0:5f:b8:78:8a:1a:59:d3:ba:13:
df:01:02:1d:a9:4a:41:c2:1c:62:60:83:28:da:da:3d:14:48:
26:9a:bf:0e:36:4a:3d:2f:a9:be:73:21:e0:78:aa:b8:11:1a:
b1:9e:66:41:a3:d9:3a:b4:f7:29:a3:48:b6:77:f5:f1:b0:73:
26:78:85:56:4e:0d:b3:1c:ef:d3:bc:0f:3f:2a:95:f9:c6:3d:
48:b3:a6:c3:04:34:b3:ab:10:4b:52:03:08:6f:73:b1:64:44:
41:93:81:4e:c1:12:b5:42:54:29:22:6a:59:a9:31:1d:6a:f6:
d9:a7:4c:24:b4:7e:13:c1:f8:5a:c0:ba:7f:81:6d:86:34:1e:
51:e6:0c:22:0d:6a:4e:36:8b:ca:a1:d0:90:54:f0:9f:a3:45:
16:e7:1a:c9:96:d6:f9:4e:ae:6b:f9:3b:e5:14:91:37:32:ff:
d6:ca:08:57:3b:38:9b:0d:b5:d9:52:d4:a2:b6:15:0d:2b:4c:
d9:91:94:92:53:f0:33:55:10:6d:12:2e:75:b4:0e:ea:5e:17:
08:d6:70:07:5c:11:eb:70:41:30:9d:12:4a:61:a3:8d:85:8d:
88:b7:7e:39
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUfaJ0/LXJ/bbMWs0zg08ibTXwIZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2NDY1REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5
MDI4NkM5MTAeFw0yMzA0MTAwMzI2MjhaFw0yNDA0MDgwMzMxMjhaMDMxMTAvBgNV
BAMTKDZDQkYyMThBMDE5QzZGMTQxREE2QTYwMzZEQURBOTkwM0JGODczQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIHQDoVPazS9gaQtsEGK/m17M
p/lOz2HGxLEYqab0rny8SwUVa3+g++8N3SWKssqTvsH+o1fdkCqVgA0DAVaLG4Yp
1IVDpvs1jKTlToPWejXHyHj8Hi9ogziSx+Sdhybek1Q436FhENqSe1bOaJoME3Tv
lk4N63ZTUe05RGcEb3EmiovgQ5Bh/mljcBa/Gy2rbLhdagF/5argVzMAhwtDCnA8
Huqa4U4qwyrMHCWuJtk25MOYtgVzOpnCyBCd8Y8wDYK6ZweMtOcyf/XnNOh8wb4L
BJmlT/UDNChnJcVRyHIzPSh7RFdO8VfmqB7CeA0hSrOdqCKDg7ZJqUIrSBXTAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUbL8higGcbxQdpqYDba2pkDv4c6AwHwYDVR0j
BBgwFoAU4GRl3hqzm5CaNrxbZ/o3l5AobJEwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzIvRTA2NDY1
REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5MDI4NkM5MS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
Ny9FMDY0NjVERTFBQjM5QjkwOUEzNkJDNUI2N0ZBMzc5NzkwMjg2QzkxLmNlcjB5
BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzIvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTMzMzAzYTNhMmYzNDM0MmQz
NDM4MjAzZDNlMjAzNTM3MzQzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8IwEwMA0GCSqGSIb3
DQEBCwUAA4IBAQCA6kc1YjLxdg9VyvGYithJ78Tu8mbelL49KeBfuHiKGlnTuhPf
AQIdqUpBwhxiYIMo2to9FEgmmr8ONko9L6m+cyHgeKq4ERqxnmZBo9k6tPcpo0i2
d/XxsHMmeIVWTg2zHO/TvA8/KpX5xj1Is6bDBDSzqxBLUgMIb3OxZERBk4FOwRK1
QlQpImpZqTEdavbZp0wktH4TwfhawLp/gW2GNB5R5gwiDWpONovKodCQVPCfo0UW
5xrJltb5Tq5r+TvlFJE3Mv/WyghXOzibDbXZUtSithUNK0zZkZSSU/AzVRBtEi51
tA7qXhcI1nAHXBHrcEEwnRJKYaONhY2It345
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:26 2025 by rpki-client