Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa
File: 3231362e3134362e32382e302f32322d3232203d3e203530303538.roa (raw, json)
Hash identifier: 2Rx1SexhCDptwJQs8cW4gpFH1FDMHW9Yzjg4zNu9KUg=
Subject key identifier: 2C:4B:17:0A:E8:B6:FA:07:45:15:80:03:F6:36:52:63:F2:FD:EA:91
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 113DBB5A3AB543833510C0D6E558F884FAD70926
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 03:31:31 +0000
ROA not before: Mon 10 Apr 2023 03:26:31 +0000
ROA not after: Mon 08 Apr 2024 03:31:31 +0000
asID: 50058
IP address blocks: 216.146.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3d:bb:5a:3a:b5:43:83:35:10:c0:d6:e5:58:f8:84:fa:d7:09:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:31 2023 GMT
Not After : Apr 8 03:31:31 2024 GMT
Subject: CN=2C4B170AE8B6FA0745158003F6365263F2FDEA91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:b4:47:08:34:6e:54:3e:d5:ff:54:86:16:
16:d8:b6:9d:56:e1:0f:bc:d5:5e:d7:5e:80:88:77:
72:c9:bf:ba:2c:59:74:8d:52:70:24:cf:ea:04:b5:
71:8a:c6:c4:d5:4b:23:11:7d:d7:1d:37:8f:60:0b:
02:da:9d:ad:83:00:49:d1:03:c3:b1:48:72:6f:a3:
38:ef:99:6d:65:8f:05:64:60:d4:d8:1f:3d:af:1a:
72:e3:26:96:c5:9e:fc:dd:87:14:35:e0:32:03:0a:
89:a8:28:72:ef:7a:e5:b1:58:ea:79:58:32:08:19:
7e:aa:4f:be:84:e2:ab:d7:1b:53:c5:3c:d1:73:78:
f4:58:87:41:67:c0:d6:51:e4:23:73:a7:6a:ab:f2:
60:43:67:a7:0b:eb:aa:9d:65:ec:e4:53:f0:c7:02:
7b:b1:57:1a:30:a0:6a:96:50:bd:19:1b:e4:f3:0f:
17:22:f6:e2:91:b8:40:e1:e0:2f:49:76:34:58:62:
f0:6b:2c:df:15:eb:43:58:1c:47:56:21:df:f6:9b:
0f:ff:4e:61:c4:ca:b0:d3:0e:ac:ab:90:e5:1d:e5:
fc:3b:de:0d:bc:5b:d2:8d:29:21:78:58:5b:89:79:
3e:f7:88:2d:e7:cd:56:35:ba:90:0b:2c:8a:f0:ce:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:17:0A:E8:B6:FA:07:45:15:80:03:F6:36:52:63:F2:FD:EA:91
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c4:07:07:d2:05:84:48:e3:8e:35:85:d4:ad:2a:93:d2:94:
c7:2e:3c:9a:0e:98:e4:5a:0d:41:df:be:9a:67:1d:c4:bc:11:
3d:ab:f3:a8:9a:bc:8e:89:29:20:0b:e2:e0:cc:6f:89:0e:62:
3d:0d:d2:a0:74:08:14:96:e9:46:08:53:c4:1f:5e:66:85:9b:
6e:66:39:66:30:87:1b:38:f9:ef:82:41:6a:30:00:55:91:ac:
be:56:0e:aa:d2:28:c2:b1:42:38:15:96:fb:01:30:5e:e0:ba:
b9:41:4f:5c:e1:1b:e4:be:19:b6:cd:59:9d:fd:2a:81:b1:42:
b0:f5:21:70:a4:69:de:91:8e:ce:25:78:b6:85:46:c9:f3:c9:
7f:1b:57:4b:07:bd:7f:0d:45:c3:38:6b:2b:3f:19:c8:e0:8a:
6a:08:8f:b6:a1:e3:75:49:31:35:fa:b0:21:ed:fa:33:78:67:
98:78:2d:25:30:29:c2:69:f8:40:5a:92:10:75:a9:13:a1:b5:
9d:0d:d2:93:b7:f7:f2:05:19:1c:9e:13:45:c3:e4:1c:8a:ca:
04:35:fd:6d:6a:81:b9:a3:6c:94:b6:83:7d:62:2c:01:7e:4f:
53:1a:64:fe:ef:72:bf:5e:19:36:94:8c:c2:eb:8a:b7:77:0c:
63:23:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 16:43:40 2023 by rpki-client on console-fra.rpki-client.org