Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20393435.roa
File: 32332e3133332e382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: rbSD14FFeP/PfC4R5eVmNnpr7euO0Rz5kwPfCFliTpI=
Subject key identifier: 68:D3:9B:08:FB:DB:47:C3:42:F4:C0:97:1B:05:4E:44:B3:5F:8D:D1
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 2D9FF17D011509A0AADFDEA2AD68AE6704B13E35
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20393435.roa
Signing time: Wed 20 Sep 2023 22:22:56 +0000
ROA not before: Wed 20 Sep 2023 22:17:56 +0000
ROA not after: Wed 18 Sep 2024 22:22:56 +0000
asID: 945
IP address blocks: 23.133.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9f:f1:7d:01:15:09:a0:aa:df:de:a2:ad:68:ae:67:04:b1:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Sep 20 22:17:56 2023 GMT
Not After : Sep 18 22:22:56 2024 GMT
Subject: CN=68D39B08FBDB47C342F4C0971B054E44B35F8DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:f6:61:bc:73:23:cf:0a:b3:fa:ba:a4:1a:
3d:78:2e:37:c2:30:90:b1:54:68:ae:bc:4f:d1:d2:
a5:a8:d9:d1:78:5d:c7:a7:d8:b4:e3:0c:10:fd:a0:
3e:50:e8:f9:14:47:9c:e4:26:9f:d2:ed:63:16:4e:
dd:07:41:c9:96:24:35:88:5b:b6:67:d9:a3:2f:6f:
17:34:8f:e8:db:90:a9:61:eb:1c:b8:63:6d:af:a8:
f8:52:1f:ab:ad:69:35:b9:b9:df:92:1e:52:0f:8c:
84:46:9f:ca:1b:f1:a1:b7:b6:46:52:46:bc:d1:26:
9a:fe:11:9f:50:3f:a2:58:f7:2e:0b:ca:fe:45:ad:
b6:10:76:ba:9d:ac:eb:bb:48:a5:ac:56:83:a2:96:
b6:26:62:7e:44:f2:c6:e9:0a:73:09:cd:cb:1e:be:
2c:c4:e3:a8:f6:ca:79:9f:94:73:4e:7b:73:b7:c4:
6f:3f:22:a9:12:0c:e2:46:2d:1b:76:6a:70:fe:3e:
ba:6b:94:af:42:f2:66:f6:08:ef:32:9d:4e:a9:4c:
ab:bd:bc:3c:36:67:bc:b5:48:e7:c6:3a:0e:4a:8b:
77:62:5a:1b:8b:d2:f7:8a:ec:20:53:e7:9e:87:9a:
0c:32:ed:e5:d0:eb:67:29:96:a5:16:59:07:d2:4f:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:9B:08:FB:DB:47:C3:42:F4:C0:97:1B:05:4E:44:B3:5F:8D:D1
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.8.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f4:41:76:00:93:9e:73:99:01:51:b1:49:9a:71:6f:56:95:
29:a2:5f:71:36:b3:af:b9:d7:07:2e:69:c4:2c:dc:a3:b0:6f:
48:29:32:1f:8a:8a:d4:3b:6f:c4:5e:82:18:e3:52:73:7d:58:
ee:41:ed:80:61:f8:ed:d9:23:ea:4a:da:e4:ae:93:a7:b8:c1:
0d:19:b2:c7:02:68:98:1a:df:17:23:04:ff:50:16:43:e4:e4:
29:4f:f8:cc:14:6e:a9:71:36:ba:0b:e1:1e:69:67:65:55:b7:
96:bb:65:bc:03:3d:d8:0d:de:0b:25:d1:a4:03:ea:09:2c:ff:
0c:e4:95:3f:b3:d3:12:78:ee:86:9b:2b:8b:e2:b2:6e:2b:4c:
8b:ca:e8:92:96:b0:8f:f5:6f:3b:19:e0:8c:88:fa:b7:41:45:
32:3b:c8:8a:1b:ca:37:4c:bc:9f:03:f5:7e:a6:ca:09:f6:47:
9d:89:ee:27:d2:63:36:f1:e6:38:2f:4c:f2:46:76:ca:41:3d:
f7:41:5a:9f:59:c0:15:72:ae:f2:1a:9a:4c:84:f2:c5:62:61:
25:f3:b1:02:7a:b2:dc:43:c2:32:8a:df:80:65:7a:f7:67:d9:
ac:df:43:3a:fb:2b:c0:62:be:03:7b:62:58:68:e1:4d:a6:39:
a2:78:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org