Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2037373139.roa
File: 3231362e3134362e32382e302f32332d3233203d3e2037373139.roa (raw, json)
Hash identifier: z2EoISiftWBbbWb5TZ0NYuvfItPc9BR4pNdEeJQHSFc=
Subject key identifier: 02:08:2E:3A:D4:80:6B:36:0A:83:81:8C:2A:34:2E:36:5A:6C:9B:8B
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 7CFC320ABFEB1DBBFE573510773EA21779D416F8
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2037373139.roa
Signing time: Tue 04 Jul 2023 06:27:20 +0000
ROA not before: Tue 04 Jul 2023 06:22:20 +0000
ROA not after: Tue 02 Jul 2024 06:27:20 +0000
asID: 7719
IP address blocks: 216.146.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fc:32:0a:bf:eb:1d:bb:fe:57:35:10:77:3e:a2:17:79:d4:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Jul 4 06:22:20 2023 GMT
Not After : Jul 2 06:27:20 2024 GMT
Subject: CN=02082E3AD4806B360A83818C2A342E365A6C9B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:10:de:38:0c:6c:2a:6c:de:53:0a:51:23:
5d:59:19:f5:1c:ef:65:6f:d2:dd:8a:79:0b:1d:5a:
28:cf:47:6d:13:52:cc:40:b2:5a:5c:99:97:7c:88:
f4:52:7f:ea:49:38:10:ca:71:57:30:23:30:2f:b3:
5b:5e:97:7e:18:6a:0d:e9:72:21:49:8d:57:c4:6b:
45:50:c1:16:31:91:c9:cd:66:8f:17:48:c4:e8:2a:
15:6c:d5:12:2c:99:9f:c2:76:b5:23:ea:c4:ef:c0:
8f:fb:0b:d1:a5:de:53:55:e2:ed:31:36:0e:95:83:
f1:99:59:83:e9:47:1a:53:fb:9d:7d:bc:a2:a7:bf:
04:85:a4:40:9e:1b:c2:56:6e:82:f9:bc:40:63:3a:
50:00:68:08:84:66:98:20:ba:73:43:be:0b:7e:3d:
74:25:ca:65:2b:1d:67:10:0b:2e:45:e4:4b:89:20:
7d:71:48:29:c0:85:ec:95:61:4a:8e:51:a9:b2:15:
5e:79:0d:a2:56:2b:e8:af:8e:6a:46:7e:a5:d8:40:
46:3b:e8:c9:37:63:c1:73:5f:de:e4:fa:84:07:a2:
cc:6f:91:03:80:db:d1:dd:6c:f0:38:44:cd:cd:3b:
51:3b:44:42:3c:35:63:b0:49:ed:8f:d4:bf:33:68:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:2E:3A:D4:80:6B:36:0A:83:81:8C:2A:34:2E:36:5A:6C:9B:8B
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/23
Signature Algorithm: sha256WithRSAEncryption
34:cb:64:d4:f9:61:54:08:8d:97:4c:e8:be:8e:3e:a6:5a:18:
7c:6c:44:44:59:05:b0:25:03:57:64:ab:d1:53:1b:9d:3e:e8:
6c:6e:28:95:3c:a3:4d:a7:ea:d0:6f:f9:06:b4:7d:7e:9a:f9:
28:36:64:cd:24:02:2b:5a:ff:ae:5f:27:2c:0f:39:7f:c9:10:
05:a5:62:b6:f4:4e:f2:1f:97:7c:f0:be:29:80:47:44:db:d1:
41:e4:17:2b:ec:b0:c6:03:24:b9:b8:40:08:c0:93:e4:19:06:
43:5b:64:95:d2:00:d5:93:2d:eb:cd:56:c9:eb:ef:65:5b:93:
ca:e0:a2:51:c3:ae:dd:dd:92:f8:86:ef:b8:d0:bc:f6:f6:b5:
db:6a:3e:98:57:e7:df:19:cc:42:eb:79:02:52:a9:0f:c6:f9:
f8:93:91:a4:05:b7:37:15:90:10:9d:29:76:fb:ff:f1:4c:4a:
62:c0:7a:56:ba:08:e8:2b:ab:33:a1:ed:1f:ab:e7:a2:74:e0:
23:b4:7c:f7:82:7e:73:b2:23:19:67:d4:a6:99:f4:ef:dd:27:
79:d1:f0:c3:0d:6d:5b:e0:55:10:83:22:80:8c:0a:ef:31:c5:
a7:71:58:22:64:d4:8b:d9:31:01:75:d6:c8:74:e9:16:3e:d8:
59:b8:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:20:27 2025 by rpki-client