Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20313334383233.roa
File: 32332e3133332e382e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier: VR5Um4loIzM/lwB9/xEiaMNysidg84G6bsHLEZFlGck=
Subject key identifier: A6:69:04:7E:9E:91:10:2D:B6:84:BC:DC:E1:D2:2D:27:EF:04:0E:A1
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 511D9DFA058671C3C15867F82C910D1BF877D735
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20313334383233.roa
Signing time: Mon 25 Sep 2023 07:38:19 +0000
ROA not before: Mon 25 Sep 2023 07:33:19 +0000
ROA not after: Mon 23 Sep 2024 07:38:19 +0000
asID: 134823
IP address blocks: 23.133.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1d:9d:fa:05:86:71:c3:c1:58:67:f8:2c:91:0d:1b:f8:77:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Sep 25 07:33:19 2023 GMT
Not After : Sep 23 07:38:19 2024 GMT
Subject: CN=A669047E9E91102DB684BCDCE1D22D27EF040EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:f7:2e:e5:05:af:b2:6d:a8:28:e0:ee:ec:
49:23:bb:37:47:21:8e:c6:2f:da:42:73:3e:ef:ef:
5b:7a:5a:80:9d:fd:78:d9:ac:15:ef:9a:9e:a7:70:
f5:57:88:da:18:e8:29:f5:da:ff:a3:33:ed:a7:cc:
97:9f:cd:b3:06:a6:a3:4e:1e:7a:e9:b3:22:85:b0:
72:71:a5:7c:63:2e:79:de:e2:0d:09:76:1a:87:c1:
5b:e0:2d:3a:76:27:8b:95:9a:7f:22:36:64:19:de:
0e:9c:ee:16:83:b3:6f:63:e0:5b:30:d6:2a:46:91:
25:10:87:29:4d:1a:a5:b2:5b:0e:86:3e:fc:9c:5b:
81:92:80:7d:58:3c:ff:95:e8:58:df:ba:92:bb:e0:
f9:f8:7a:40:f4:0e:50:c5:55:2a:8d:e9:42:7d:3a:
b7:43:f9:1d:5c:3c:0b:7a:4c:81:59:41:d8:5d:c6:
13:9f:48:96:c5:8d:d3:99:df:d1:82:97:06:f9:48:
b6:23:c3:a1:ee:fc:3a:fe:37:76:49:6d:e0:5b:df:
79:3e:09:59:27:4e:85:52:ec:b3:33:f4:01:42:07:
e4:99:ca:94:ea:a6:47:80:f8:15:27:df:34:ea:33:
54:30:af:4e:5b:4e:18:1b:62:9a:3c:49:50:38:be:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:04:7E:9E:91:10:2D:B6:84:BC:DC:E1:D2:2D:27:EF:04:0E:A1
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:d3:45:6e:6a:d3:fa:be:a4:5e:a0:7e:0e:c2:19:9f:cb:
14:51:d2:29:a5:e0:2b:e0:0a:84:15:02:63:1d:a5:3b:ba:fe:
f8:7c:65:64:b7:ed:eb:35:c1:42:c2:0f:37:ad:01:06:8c:42:
27:03:cf:b4:df:d7:3b:2b:7a:28:ce:fb:c0:72:84:b2:f7:30:
d5:61:e8:88:c4:23:50:91:88:75:b8:06:c9:66:8d:60:33:ec:
1b:7e:31:ee:21:ae:3c:90:d1:56:d2:55:d2:40:8a:19:4e:00:
29:68:02:17:6f:95:5f:ec:de:59:47:87:48:72:88:18:d0:c0:
53:0d:25:04:96:2b:a4:e5:08:5e:31:96:cf:3c:b7:3a:cb:ca:
0f:0d:cc:88:91:94:89:f3:2d:11:63:34:73:2e:2c:2e:64:21:
c4:0b:82:3e:94:72:a2:c2:9d:d0:34:88:3f:63:ff:58:cc:57:
23:c7:6a:a3:6e:b1:54:cb:2b:b3:e1:6e:e1:a9:20:1e:5e:02:
20:fd:90:d0:29:89:30:e6:2e:5c:8a:e8:2b:2d:29:1b:12:3c:
de:3d:65:35:9e:7f:55:5b:7f:f4:83:db:6e:0c:72:9e:06:b6:
22:fb:8b:a0:bc:e8:ba:de:00:a1:81:88:48:70:d2:50:af:bd:
39:25:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 09:25:55 2023 by rpki-client on console-fra.rpki-client.org