Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/7/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
File: 3134392e3131322e35332e302f32342d3234203d3e203531383138.roa (raw, json)
Hash identifier: q1dDYs5Jivz2qv9wWPFVdRgrOOzmzoJD1aCHac/doys=
Subject key identifier: DC:6A:49:E0:7C:C5:5E:3C:64:D3:3A:52:85:27:F2:04:14:56:7D:EE
Certificate issuer: /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial: 5C42CA376B91F445B12AE9D7F788EA0A1B5114A7
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority info access: rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access: rsync://rpki.co/repo/AS945/7/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
Signing time: Mon 10 Apr 2023 03:31:27 +0000
ROA not before: Mon 10 Apr 2023 03:26:27 +0000
ROA not after: Mon 08 Apr 2024 03:31:27 +0000
asID: 51818
IP address blocks: 149.112.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:ca:37:6b:91:f4:45:b1:2a:e9:d7:f7:88:ea:0a:1b:51:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
Validity
Not Before: Apr 10 03:26:27 2023 GMT
Not After : Apr 8 03:31:27 2024 GMT
Subject: CN=DC6A49E07CC55E3C64D33A528527F20414567DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:ce:cb:76:7c:3d:32:2e:2e:4e:48:8d:2e:
72:e2:83:7b:ed:f9:6b:94:84:82:3b:f4:cd:c3:cf:
33:be:68:c0:aa:bf:27:96:0c:78:17:bb:1f:68:17:
2a:6d:9b:0c:8e:aa:d3:c9:46:3f:4b:b8:6d:be:4f:
a1:e2:40:4e:34:76:cd:01:f3:f1:c7:9b:f7:3b:be:
0a:c2:86:98:27:0d:fd:50:4f:e8:d8:f6:3d:0f:17:
85:c2:26:94:bc:75:18:e9:8b:da:fe:85:90:99:be:
23:f9:18:31:c6:c2:67:f9:3d:8d:e5:f9:00:22:7b:
05:e2:5b:23:3d:ae:15:f2:4a:cb:61:15:4c:e5:11:
52:dd:53:a9:65:ed:10:a4:2b:6d:07:f6:d7:9e:72:
8b:ee:4e:fd:20:0a:90:16:0d:15:e4:b8:0d:d7:2a:
ee:36:6b:56:91:5b:26:a5:a7:8f:e8:1a:8c:26:24:
6d:b6:a8:5f:ae:94:cf:6a:13:c7:be:ed:a1:a9:db:
39:82:48:69:29:2f:78:ce:40:fc:74:6d:bd:7b:54:
db:a8:05:25:20:4c:85:a1:1d:8e:41:8b:95:21:48:
7a:cc:15:51:8c:fe:f0:07:09:c6:7f:8d:a1:02:19:
b1:96:15:31:4b:6d:f7:a0:76:e0:71:f4:34:20:08:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:49:E0:7C:C5:5E:3C:64:D3:3A:52:85:27:F2:04:14:56:7D:EE
X509v3 Authority Key Identifier:
keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/7/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:98:31:a0:21:29:ed:e5:3a:8e:a4:95:d6:fd:cf:97:3d:59:
9d:9e:ef:4d:6a:e1:89:01:4c:dd:e5:6b:4b:e1:62:b3:46:e8:
9e:22:47:f1:db:f3:ea:11:b8:00:2c:d3:3f:63:0d:c3:07:90:
e3:0d:c5:20:09:e7:dc:b1:e0:e2:c2:8e:08:52:9c:86:c8:9c:
50:2f:5c:67:b1:99:9e:5c:cc:c2:c7:0e:85:1d:ea:ee:0d:2a:
69:33:04:3e:6d:db:9f:d4:6a:da:02:52:d3:4a:4a:66:99:75:
98:8e:18:78:87:ea:4b:60:df:7c:a0:a3:75:28:d0:8d:04:c8:
9b:3c:28:bf:5a:88:f2:2a:c3:0b:e0:38:bb:3a:74:f6:9f:cb:
27:ab:5a:f2:c9:03:72:06:b1:3f:48:27:c3:91:65:d4:65:f7:
6c:69:0c:ee:33:63:3f:e7:a1:6a:14:8a:c2:d9:4e:3a:fa:96:
79:6b:82:6e:c6:d0:df:39:89:5a:77:8e:aa:64:c8:52:47:5a:
a8:dd:18:79:af:18:b2:79:48:da:80:a2:52:e3:c9:22:a8:14:
e4:2e:8b:a7:93:ed:ab:7d:60:c3:30:43:1a:2e:06:74:5a:62:
5a:dd:79:cc:14:f3:50:2a:72:ad:91:7a:34:10:ae:6d:ef:7a:
bb:d2:fc:8a
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUXELKN2uR9EWxKunX94jqChtRFKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ4OTg2M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0
MzZGQ0Y5NTAeFw0yMzA0MTAwMzI2MjdaFw0yNDA0MDgwMzMxMjdaMDMxMTAvBgNV
BAMTKERDNkE0OUUwN0NDNTVFM0M2NEQzM0E1Mjg1MjdGMjA0MTQ1NjdERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Nc7Ldnw9Mi4uTkiNLnLig3vt
+WuUhII79M3DzzO+aMCqvyeWDHgXux9oFyptmwyOqtPJRj9LuG2+T6HiQE40ds0B
8/HHm/c7vgrChpgnDf1QT+jY9j0PF4XCJpS8dRjpi9r+hZCZviP5GDHGwmf5PY3l
+QAiewXiWyM9rhXySsthFUzlEVLdU6ll7RCkK20H9teecovuTv0gCpAWDRXkuA3X
Ku42a1aRWyalp4/oGowmJG22qF+ulM9qE8e+7aGp2zmCSGkpL3jOQPx0bb17VNuo
BSUgTIWhHY5Bi5UhSHrMFVGM/vAHCcZ/jaECGbGWFTFLbfegduBx9DQgCI5RAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQU3GpJ4HzFXjxk0zpShSfyBBRWfe4wHwYDVR0j
BBgwFoAUhImGOkMthR7+oEOVA2XuI0Nvz5UwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzcvODQ4OTg2
M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0MzZGQ0Y5NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
OC84NDg5ODYzQTQzMkQ4NTFFRkVBMDQzOTUwMzY1RUUyMzQzNkZDRjk1LmNlcjBz
BggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzcvMzEzNDM5MmUzMTMxMzIyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzNTMxMzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXA1MA0GCSqGSIb3DQEBCwUAA4IB
AQC5mDGgISnt5TqOpJXW/c+XPVmdnu9NauGJAUzd5WtL4WKzRuieIkfx2/PqEbgA
LNM/Yw3DB5DjDcUgCefcseDiwo4IUpyGyJxQL1xnsZmeXMzCxw6FHeruDSppMwQ+
bduf1GraAlLTSkpmmXWYjhh4h+pLYN98oKN1KNCNBMibPCi/WojyKsML4Di7OnT2
n8snq1ryyQNyBrE/SCfDkWXUZfdsaQzuM2M/56FqFIrC2U46+pZ5a4JuxtDfOYla
d46qZMhSR1qo3Rh5rxiyeUjagKJS48kiqBTkLounk+2rfWDDMEMaLgZ0WmJa3XnM
FPNQKnKtkXo0EK5t73q70vyK
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org