Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/5/3138352e302e31392e302f32342d3234203d3e203531383138.roa
File: 3138352e302e31392e302f32342d3234203d3e203531383138.roa (raw, json)
Hash identifier: E1aLjwnQO3woc22RlUw088+Rls/9RyMrt/mwfve8Qjc=
Subject key identifier: D2:3A:45:A2:5C:CE:4C:DB:B7:E9:FF:ED:21:09:D9:7F:72:51:30:C9
Certificate issuer: /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial: 12400D10611E06F7EBDF3014870A37F12265320F
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access: rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access: rsync://rpki.co/repo/AS945/5/3138352e302e31392e302f32342d3234203d3e203531383138.roa
Signing time: Fri 07 Jul 2023 04:32:05 +0000
ROA not before: Fri 07 Jul 2023 04:27:05 +0000
ROA not after: Fri 05 Jul 2024 04:32:05 +0000
asID: 51818
IP address blocks: 185.0.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:40:0d:10:61:1e:06:f7:eb:df:30:14:87:0a:37:f1:22:65:32:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Validity
Not Before: Jul 7 04:27:05 2023 GMT
Not After : Jul 5 04:32:05 2024 GMT
Subject: CN=D23A45A25CCE4CDBB7E9FFED2109D97F725130C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:2f:9c:18:2c:cf:77:63:ab:40:b1:91:88:
f4:7e:f2:ae:6a:0d:81:aa:a3:e8:56:97:0b:a3:9c:
b4:44:1a:d3:b1:f4:76:e2:89:f6:43:71:7d:93:0d:
5e:6a:df:26:8d:c2:6a:4e:e1:e5:9d:8f:80:d4:6a:
f9:bb:0b:47:2b:80:d4:27:92:55:d0:e6:35:bd:b6:
74:6f:71:98:0d:20:77:dd:df:22:35:ca:e2:4d:cd:
70:58:e0:3a:b9:26:48:38:4b:67:8d:c7:29:4d:3e:
d9:74:20:1d:14:19:78:39:4b:e8:cc:78:66:a1:ca:
42:83:da:f6:6d:d8:ce:b5:c6:17:f8:e4:39:4b:09:
70:5a:3c:bf:8d:33:d4:76:c3:d5:93:25:c9:22:04:
a0:81:37:d0:22:4a:d5:9e:19:9a:89:18:c7:3d:d5:
11:4c:25:f4:42:ba:c2:87:b3:bf:b7:1b:63:c1:f7:
4f:e8:f6:d9:0f:70:b1:c6:5a:ac:e8:4c:bd:94:65:
d2:79:63:06:46:16:35:df:39:b1:5d:06:ab:fc:47:
0a:0d:e3:94:5e:57:9a:c3:fc:64:33:35:c2:98:58:
ae:11:07:e4:63:2c:ea:05:a7:21:aa:c7:42:9d:39:
3b:90:ee:13:fb:0c:5b:fe:cc:3b:72:83:50:92:d4:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:45:A2:5C:CE:4C:DB:B7:E9:FF:ED:21:09:D9:7F:72:51:30:C9
X509v3 Authority Key Identifier:
keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/5/3138352e302e31392e302f32342d3234203d3e203531383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ac:f3:53:19:28:54:eb:8b:2b:fd:43:ad:ea:0a:98:c8:e4:
7d:28:98:d7:d0:75:b0:48:e0:c7:af:25:4a:34:22:35:10:26:
20:a8:94:a7:c7:51:05:12:5d:ae:f8:e9:9c:9a:67:37:84:23:
02:cc:42:67:a8:4a:0f:0f:42:f5:0b:56:e7:08:a3:3a:24:df:
d8:7a:6d:79:df:a1:29:81:ea:06:b0:5b:87:e2:ab:a2:e1:b3:
76:0b:aa:aa:55:19:62:00:92:2a:69:9f:a2:49:02:90:a2:5f:
98:61:2d:a2:dd:88:fe:c8:8e:d0:66:cc:1f:18:c6:93:9d:1a:
a3:f3:b9:05:62:85:bb:0a:a6:33:04:41:94:46:cf:0e:95:61:
35:8a:e8:ad:6d:ec:23:cb:96:5b:1d:bf:9c:93:15:9c:4f:cf:
2b:54:d2:6a:85:05:6e:93:69:1d:aa:fb:af:cc:79:56:87:0b:
a1:2d:a7:d0:23:83:08:2b:8e:bb:b0:a6:2e:06:a0:23:5e:87:
67:4c:63:f6:98:64:8b:59:65:a8:14:46:f1:00:31:8f:79:9b:
79:0b:17:9d:a5:2f:7d:ed:2d:6d:06:4c:d6:44:ec:1e:cd:c1:
11:de:05:3a:ab:46:bb:54:d5:82:79:1b:e6:bb:c2:62:b6:a4:
d5:f5:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org