Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
File: 3231362e3134362e32382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier: bf6bqF63Bgb42PZchRzdtfNdxIgbon8jMijtwDizsoE=
Subject key identifier: 45:CF:DA:E9:24:BF:D1:AE:FF:FA:84:7F:50:65:E4:23:9C:15:68:66
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 25C90F74C674929824BD518DC403AA2BB3CB7B73
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
Signing time: Thu 31 Aug 2023 04:23:31 +0000
ROA not before: Thu 31 Aug 2023 04:18:31 +0000
ROA not after: Thu 29 Aug 2024 04:23:31 +0000
asID: 945
IP address blocks: 216.146.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c9:0f:74:c6:74:92:98:24:bd:51:8d:c4:03:aa:2b:b3:cb:7b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Aug 31 04:18:31 2023 GMT
Not After : Aug 29 04:23:31 2024 GMT
Subject: CN=45CFDAE924BFD1AEFFFA847F5065E4239C156866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:09:04:6c:53:ae:cf:57:e7:0a:c6:fc:6a:17:
7b:0b:84:9c:7d:43:33:38:6e:72:b2:af:a6:81:6d:
6a:c0:cf:9b:f1:22:1d:ff:ac:fb:7b:2a:da:da:95:
e1:b9:a2:b9:d5:fa:6e:07:69:8f:13:af:77:bf:86:
e8:a4:6d:2c:56:cf:09:c9:de:33:c7:dc:c1:77:11:
ef:e9:64:f9:68:3a:96:27:01:99:93:b7:9c:44:3f:
a0:0b:19:9e:f8:d4:9a:fd:40:4e:a8:3c:9f:78:55:
40:25:16:e9:63:01:e2:25:71:52:55:dd:d7:65:28:
65:07:28:5b:0d:15:e7:83:31:5b:c7:d4:79:cb:04:
7b:7b:a1:db:08:66:24:b2:65:48:42:81:cd:92:e7:
30:98:ec:0e:d8:1a:48:5c:f9:d5:1b:c3:f4:ca:dd:
e4:23:fd:ab:b4:70:0d:e8:1d:10:46:ba:f4:c4:e2:
88:44:02:59:b5:8a:43:4d:52:fd:bf:3c:74:de:5b:
95:e6:0a:af:61:c2:6f:f3:4a:0b:9b:17:33:cb:75:
11:b0:a3:75:d4:69:ac:3e:61:84:e3:21:8a:7c:96:
dd:85:6b:dc:48:51:fa:6e:17:38:9a:40:82:34:d7:
21:37:11:05:93:d3:ea:6b:41:9b:b6:a5:d7:00:02:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:DA:E9:24:BF:D1:AE:FF:FA:84:7F:50:65:E4:23:9C:15:68:66
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
92:73:a0:46:5f:30:0c:d4:5c:33:22:fa:c1:91:2e:16:07:3c:
1a:3f:16:fd:d0:a6:47:d6:13:a5:aa:53:e1:f7:7b:ee:99:c3:
68:0a:f9:98:87:bc:0f:58:a3:ef:59:1c:d8:b3:53:23:87:bf:
fb:04:d7:d5:fd:00:ca:87:c7:2f:52:f7:5e:c8:99:ca:2a:e9:
70:5b:61:8b:31:ea:22:92:37:70:36:a3:a7:dd:28:5e:cc:6a:
0c:a5:db:36:e5:ad:cb:31:fc:ef:58:62:3a:6f:af:21:c7:21:
50:74:66:f5:9f:49:67:5b:b2:67:c2:1f:f0:c1:7a:3d:8f:ab:
9d:49:50:9c:f5:03:d2:7e:b3:b1:ed:3d:52:f5:3a:6d:2d:4d:
73:59:ac:a1:2f:8c:9d:2c:ba:a4:1a:76:1d:97:24:ad:c6:d2:
1a:73:e6:6f:d2:56:6e:21:43:d3:09:85:cd:8c:7e:0b:73:dd:
3a:64:df:4b:e4:3e:57:60:bc:0a:5b:73:a1:87:f1:96:90:89:
ce:39:7a:c3:a2:61:3c:b7:ab:ae:1e:c5:73:fc:48:2c:ac:5e:
0b:56:cd:0a:d5:2d:b6:ac:9f:ac:9c:3b:3a:14:5b:78:c0:95:
4d:e5:3c:e9:2c:ae:56:37:66:82:93:fc:49:6a:91:42:25:36:
7f:c1:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:18:21 2025 by rpki-client