Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa
File: 3231362e3134362e33302e302f32342d3234203d3e203539373838.roa (raw, json)
Hash identifier: hSY5ei35S7oHcdMH3R4PA9XKKgKKUO1pJ62BBl/Ksvo=
Subject key identifier: EA:D9:A6:8B:26:D0:58:E2:CD:63:23:15:16:9B:CF:98:0C:69:DF:E9
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 791C35112A76B4DF375BE88F080A8D1FD6DF90DB
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa
Signing time: Mon 10 Apr 2023 03:31:30 +0000
ROA not before: Mon 10 Apr 2023 03:26:30 +0000
ROA not after: Mon 08 Apr 2024 03:31:30 +0000
asID: 59788
IP address blocks: 216.146.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1c:35:11:2a:76:b4:df:37:5b:e8:8f:08:0a:8d:1f:d6:df:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:30 2023 GMT
Not After : Apr 8 03:31:30 2024 GMT
Subject: CN=EAD9A68B26D058E2CD632315169BCF980C69DFE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:59:e9:e7:63:0a:df:a3:06:67:9e:ba:e4:
d9:28:65:8f:cb:2a:c4:a5:90:a5:c6:a8:b5:e9:fa:
44:1e:1f:83:50:d2:fe:00:9e:2d:8a:11:2c:18:f8:
0e:91:a0:60:92:3d:aa:79:72:26:0e:3d:49:0a:0d:
c4:04:b9:b9:1d:0e:8a:a8:6e:79:36:a5:cb:78:8c:
76:e3:45:32:7a:48:d9:8b:ad:c4:82:2d:89:d1:2d:
06:cd:5b:bb:79:be:db:e8:1d:43:3c:8f:79:04:52:
cf:50:4f:b0:4f:05:49:e9:f8:2a:37:cb:76:40:0d:
f0:d3:03:4b:25:55:ff:5e:78:66:32:4e:0c:55:25:
7d:c5:c1:f5:d7:84:09:c0:94:44:cb:b2:ef:62:30:
09:db:2f:3e:13:66:40:9d:6b:47:0e:4f:3b:44:45:
7b:29:1f:c8:a9:ae:63:76:b6:42:d6:51:79:d1:8a:
14:b3:68:b6:40:63:d1:e6:67:a5:9b:a2:5c:eb:be:
1b:d7:09:8d:83:f8:e6:09:9d:d0:15:6a:de:5f:8e:
cd:cb:e3:42:8d:d5:45:48:7e:2c:43:8d:1b:4d:92:
27:f8:a2:4d:6c:18:04:f9:cd:7c:81:91:aa:d0:16:
04:b9:c1:db:7c:fa:be:09:51:00:d5:bd:97:7f:f0:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:A6:8B:26:D0:58:E2:CD:63:23:15:16:9B:CF:98:0C:69:DF:E9
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:69:40:79:56:ee:8b:f1:cd:b7:71:24:92:21:25:61:43:55:
8c:c6:6f:19:99:b1:46:6d:83:0d:56:57:27:c5:db:fc:84:89:
7e:03:6d:bf:cd:fd:90:12:c1:7c:15:76:6c:72:03:49:c2:9a:
25:c9:52:ca:fb:74:ae:b7:6f:5e:23:28:5b:88:aa:dd:51:13:
ce:3b:b4:a6:4f:23:fb:59:a4:68:b6:80:09:43:58:98:12:c8:
2f:ee:81:24:d7:67:b5:08:49:2f:19:29:11:bd:27:c5:f9:60:
36:9e:45:81:18:e9:76:6d:1f:9e:61:10:26:8d:f6:85:63:f0:
85:40:58:cb:a4:ef:19:0b:b2:7a:8b:2b:38:ad:2d:32:ce:15:
5c:a2:be:9f:6a:bb:f6:ca:4d:27:2e:0f:69:ed:be:b9:45:2a:
1f:53:e2:13:ff:d3:90:1c:ab:6c:c1:f0:63:db:e2:f6:57:70:
fc:a2:90:e9:67:a7:54:2e:06:c8:8e:7a:1b:5f:e7:ac:1b:02:
2c:35:da:a8:77:9a:13:1a:47:b5:d6:79:96:8a:ca:75:56:1b:
14:7b:40:da:6e:a4:bd:35:9d:20:4f:d8:c8:5d:0b:0f:fa:7c:
03:73:ea:d3:0b:7d:bc:ba:a2:9f:a1:20:f3:1d:61:ba:a2:8e:
0c:4d:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:19:26 2025 by rpki-client