Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/323630323a666266363a3a2f34342d3434203d3e20393435.roa
File: 323630323a666266363a3a2f34342d3434203d3e20393435.roa (raw, json)
Hash identifier: jAML8y+XKj3zoOGIx5QW2RqDGcvOMKzP53G8EGndqNQ=
Subject key identifier: 5A:9D:61:2F:CD:B6:37:37:64:1F:67:3C:E1:9B:4F:BD:FA:2A:1D:04
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 7C3D069A9AEE9CE8E819323193162F12130544F7
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f34342d3434203d3e20393435.roa
Signing time: Mon 10 Apr 2023 03:31:30 +0000
ROA not before: Mon 10 Apr 2023 03:26:30 +0000
ROA not after: Mon 08 Apr 2024 03:31:30 +0000
asID: 945
IP address blocks: 2602:fbf6::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:3d:06:9a:9a:ee:9c:e8:e8:19:32:31:93:16:2f:12:13:05:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:30 2023 GMT
Not After : Apr 8 03:31:30 2024 GMT
Subject: CN=5A9D612FCDB63737641F673CE19B4FBDFA2A1D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:fa:6d:8a:51:2c:87:cf:e5:e7:ce:73:7a:
2c:60:05:7c:1e:f7:20:d8:33:4e:3e:bd:12:ef:89:
9a:e3:d3:25:93:f4:93:03:57:72:86:ad:2e:f2:b9:
3b:10:31:81:3e:c6:8f:95:c8:cd:b1:67:5c:ac:16:
c2:0a:d0:5e:2d:5a:a1:30:60:9f:77:02:d1:b4:54:
76:51:f0:e2:69:3c:93:e8:bd:35:4c:7e:64:55:ff:
cc:2f:30:a5:c1:b6:21:92:53:c9:d1:83:f5:35:06:
c8:41:c4:f8:c3:db:ec:c1:c0:b1:df:cc:11:bc:12:
00:2d:a7:92:6a:ec:cf:a2:74:3f:f9:65:90:47:34:
23:18:3e:4c:24:f4:b7:3d:2f:fe:51:59:83:a4:f9:
4a:97:95:a0:2b:78:b3:d2:e3:ed:67:ae:13:f3:68:
e6:c5:2e:87:b5:50:3c:f1:7a:68:bb:9d:1c:4c:4d:
57:ec:b6:c2:d5:39:aa:bd:a5:4b:85:2e:10:3b:b8:
68:aa:70:75:2c:95:e8:48:03:fd:bd:88:cb:57:e0:
c4:b0:f1:2a:6e:b5:59:e9:d7:4b:b1:e6:16:97:51:
70:5b:b2:c2:98:99:42:45:cb:c9:04:19:05:c9:c7:
32:da:fe:af:05:0f:03:62:78:cd:00:ec:ee:bd:3f:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:61:2F:CD:B6:37:37:64:1F:67:3C:E1:9B:4F:BD:FA:2A:1D:04
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f34342d3434203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fbf6::/44
Signature Algorithm: sha256WithRSAEncryption
a5:c4:59:43:ad:6a:e0:17:8a:cf:9a:32:70:fb:a0:a9:4e:0e:
35:10:2b:bc:a0:07:33:7f:52:07:be:75:88:e6:da:0c:98:dd:
ca:76:42:b0:ab:aa:d8:b7:a0:3e:da:35:c8:3b:22:1d:db:40:
46:ef:0a:16:b1:2d:b7:5f:3e:9a:80:d6:f3:c4:15:c3:fd:2c:
07:4c:1e:69:92:84:5b:5d:67:1a:47:af:69:b5:1a:ac:06:59:
1a:4e:87:29:3a:17:a7:b0:ef:0f:b9:ca:9c:8e:c2:2c:d3:2a:
2b:b5:4d:ff:f0:84:77:3e:aa:1f:11:ac:63:21:1c:a8:10:66:
c5:29:57:7a:62:f4:69:44:5f:29:5b:45:da:47:d3:6c:43:12:
60:4b:1d:83:c6:00:a6:9c:e7:df:66:0b:54:fa:7e:c0:75:08:
9d:ee:fa:f0:79:87:6e:95:9c:78:f1:0f:09:54:da:b2:15:f5:
07:95:e3:d0:82:f6:ec:bc:f7:e9:45:70:14:0e:52:26:5c:5f:
16:8a:af:d2:73:01:f5:a3:45:0e:62:9e:85:74:5d:96:ce:be:
00:2c:52:08:37:92:c0:5f:e7:8f:ee:14:36:e0:06:51:f5:74:
f4:50:ca:4a:98:95:3e:d2:4a:3d:af:26:af:b7:c9:2b:98:a2:
a4:97:22:ab
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUfD0GmprunOjoGTIxkxYvEhMFRPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk5RTM2NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdD
ODlCNTFDNjAeFw0yMzA0MTAwMzI2MzBaFw0yNDA0MDgwMzMxMzBaMDMxMTAvBgNV
BAMTKDVBOUQ2MTJGQ0RCNjM3Mzc2NDFGNjczQ0UxOUI0RkJERkEyQTFEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNPptilEsh8/l585zeixgBXwe
9yDYM04+vRLviZrj0yWT9JMDV3KGrS7yuTsQMYE+xo+VyM2xZ1ysFsIK0F4tWqEw
YJ93AtG0VHZR8OJpPJPovTVMfmRV/8wvMKXBtiGSU8nRg/U1BshBxPjD2+zBwLHf
zBG8EgAtp5Jq7M+idD/5ZZBHNCMYPkwk9Lc9L/5RWYOk+UqXlaAreLPS4+1nrhPz
aObFLoe1UDzxemi7nRxMTVfstsLVOaq9pUuFLhA7uGiqcHUslehIA/29iMtX4MSw
8SputVnp10ux5haXUXBbssKYmUJFy8kEGQXJxzLa/q8FDwNieM0A7O69P0aZAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUWp1hL822NzdkH2c84ZtPvfoqHQQwHwYDVR0j
BBgwFoAU2Z42d/ji3vKlg3w9SnaGx8ibUcYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzMvRDk5RTM2
NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdDODlCNTFDNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MC9EOTlFMzY3N0Y4RTJERUYyQTU4MzdDM0Q0QTc2ODZDN0M4OUI1MUM2LmNlcjBt
BggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzMvMzIzNjMwMzIzYTY2NjI2NjM2M2EzYTJmMzQzNDJkMzQzNDIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEJgL79gAAMA0GCSqGSIb3DQEBCwUAA4IBAQCl
xFlDrWrgF4rPmjJw+6CpTg41ECu8oAczf1IHvnWI5toMmN3KdkKwq6rYt6A+2jXI
OyId20BG7woWsS23Xz6agNbzxBXD/SwHTB5pkoRbXWcaR69ptRqsBlkaTocpOhen
sO8PucqcjsIs0yortU3/8IR3PqofEaxjIRyoEGbFKVd6YvRpRF8pW0XaR9NsQxJg
Sx2DxgCmnOffZgtU+n7AdQid7vrweYdulZx48Q8JVNqyFfUHlePQgvbsvPfpRXAU
DlImXF8Wiq/ScwH1o0UOYp6FdF2Wzr4ALFIIN5LAX+eP7hQ24AZR9XT0UMpKmJU+
0ko9ryavt8krmKKklyKr
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:28 2025 by rpki-client