Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File: 3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier: uCgd3ApsmaRyx93p+1Z4PDH2ghcP4P49WlKmdziZWe0=
Subject key identifier: B5:AD:D2:E8:C3:A4:72:2C:9E:C1:23:99:88:A0:24:1B:8D:E6:B0:F3
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 0F307F72DD0FEA02974BB89F547C3F6207064B05
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time: Mon 10 Apr 2023 03:31:31 +0000
ROA not before: Mon 10 Apr 2023 03:26:31 +0000
ROA not after: Mon 08 Apr 2024 03:31:31 +0000
asID: 207731
IP address blocks: 216.146.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:30:7f:72:dd:0f:ea:02:97:4b:b8:9f:54:7c:3f:62:07:06:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:31 2023 GMT
Not After : Apr 8 03:31:31 2024 GMT
Subject: CN=B5ADD2E8C3A4722C9EC1239988A0241B8DE6B0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:b9:2f:42:b2:bd:54:23:c3:69:11:2d:da:
48:f6:d1:61:52:f3:2e:e1:6a:9c:46:02:fa:98:fa:
67:fe:99:9b:f1:09:49:fa:58:68:10:d9:2d:3e:e5:
21:12:64:ba:43:ca:96:70:9a:a7:89:1e:18:fb:8b:
64:ca:44:e8:97:09:f1:42:c0:e2:f1:32:4f:9e:d4:
6d:6e:9b:df:64:29:f1:7b:79:44:b8:b4:d0:53:71:
4d:d1:95:53:33:d0:97:fc:9b:4d:3b:f1:df:3e:7d:
74:13:90:53:28:70:bd:71:d5:94:ca:5e:df:82:7c:
31:ec:5b:8f:92:ab:2d:56:e4:6e:d9:35:fd:0e:2f:
c5:bc:be:36:08:db:bc:19:29:c5:67:96:09:be:08:
c7:ba:98:55:d3:d4:45:ca:8b:00:1b:4d:ae:c5:20:
a7:22:b1:b9:cd:c5:b9:02:87:ef:3c:fe:b0:94:ed:
f6:11:eb:6f:4f:77:fb:0a:77:57:2f:93:2c:aa:2f:
4c:0a:1e:94:90:05:18:cf:38:3a:07:b4:ee:99:57:
38:cb:d3:ec:4d:60:f3:c6:98:32:b1:37:8b:86:45:
81:d3:f1:c7:99:bb:d4:b4:aa:7e:63:74:18:dc:85:
68:f2:77:46:7f:fa:d0:35:1c:94:46:50:fd:11:6a:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:D2:E8:C3:A4:72:2C:9E:C1:23:99:88:A0:24:1B:8D:E6:B0:F3
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:76:b3:2a:e0:d4:aa:34:0b:11:37:28:ba:84:27:5d:85:40:
0e:c4:83:06:be:da:9b:2f:bc:07:76:b5:62:31:41:76:62:54:
53:2a:31:3f:e0:9d:1c:11:df:1c:05:57:df:0c:54:aa:24:b0:
29:64:5e:d8:75:32:77:a7:dd:34:a4:ed:62:ac:d8:fc:f4:0c:
e0:81:da:f6:86:39:06:73:76:f3:ac:b1:03:24:a4:bc:4d:b8:
36:af:7a:97:f7:b4:52:5b:a4:dd:a7:b4:19:83:92:d2:0a:27:
1f:e4:2f:9d:61:a8:90:3b:11:9c:67:7a:4c:ce:d6:3b:bf:76:
65:e3:53:72:b6:64:ad:76:00:07:23:20:73:17:80:c7:a5:c9:
72:e2:38:95:4d:ea:df:55:c2:5f:db:dc:05:19:a6:33:78:7d:
13:26:4c:c9:48:13:0b:86:34:3c:03:97:b3:85:d9:40:58:e3:
57:48:3f:90:c5:43:92:24:99:e6:bc:77:dc:73:db:14:87:c0:
51:b1:ba:2e:86:96:58:05:ae:f3:46:bf:ba:af:36:6a:4e:d2:
50:86:a4:52:58:e0:f3:4d:ef:bd:6a:cb:ae:f7:f4:8f:b5:78:
d2:6c:d0:d8:d0:09:b7:66:5b:c0:45:44:5d:48:a9:d8:71:83:
2b:c0:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:19:27 2025 by rpki-client