Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e203530303538.roa
File: 32332e3134392e3234382e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier: aATpLMIlHikLARoNgBC0G+edSBOT2LfTDVL1M/tgs+s=
Subject key identifier: 7C:EF:04:1E:20:D8:63:BE:D8:76:A9:F1:50:D8:96:F8:5B:8F:B7:0C
Certificate issuer: /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial: 52BF50ACC14F7FF54E87C89F60611C653D86133C
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority info access: rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access: rsync://rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 03:31:27 +0000
ROA not before: Mon 10 Apr 2023 03:26:27 +0000
ROA not after: Mon 08 Apr 2024 03:31:27 +0000
asID: 50058
IP address blocks: 23.149.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bf:50:ac:c1:4f:7f:f5:4e:87:c8:9f:60:61:1c:65:3d:86:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
Validity
Not Before: Apr 10 03:26:27 2023 GMT
Not After : Apr 8 03:31:27 2024 GMT
Subject: CN=7CEF041E20D863BED876A9F150D896F85B8FB70C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:eb:92:d8:cb:7d:a8:cc:25:e1:95:34:96:
51:a0:a2:fa:13:86:84:b1:49:e8:7f:2e:de:11:11:
c6:25:10:8b:b3:4d:55:da:31:5b:78:0f:5c:70:06:
41:52:99:27:65:73:ae:f3:22:32:f7:2b:58:17:73:
b0:aa:23:87:c9:f9:a1:fe:68:31:d9:58:29:d3:e9:
5f:71:01:e3:da:54:2b:2d:38:4d:c7:f6:10:d3:b2:
22:43:fe:15:0e:00:e7:91:4c:89:76:05:fb:df:c9:
3d:cf:23:20:38:07:e1:19:75:09:42:35:d8:0f:5c:
fc:dd:0c:8e:a9:60:04:61:8e:24:60:58:e6:27:00:
0f:55:eb:e7:ee:19:6e:6a:76:89:c0:19:7b:e9:17:
70:0a:3f:6e:bd:5a:e5:40:51:f1:5c:9a:90:01:47:
58:0b:13:ef:2e:fc:9f:eb:31:35:49:9f:32:20:cf:
f3:34:55:84:5a:55:52:62:41:7b:4d:9f:39:06:06:
81:b6:5a:8f:f8:57:46:a3:5c:e0:94:cb:24:3c:ea:
57:17:b4:f6:65:73:a7:6e:fe:8b:ab:4b:4d:64:62:
53:da:b2:95:aa:7c:f5:55:c6:b8:36:59:7d:9b:02:
6d:58:39:94:a5:3a:63:a7:3a:95:e2:0a:4a:30:73:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EF:04:1E:20:D8:63:BE:D8:76:A9:F1:50:D8:96:F8:5B:8F:B7:0C
X509v3 Authority Key Identifier:
keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:8b:a1:5a:d9:a6:b2:1b:1b:52:aa:2d:67:50:bf:1d:81:f5:
d4:9d:3f:e4:fb:12:df:e4:6a:e2:e6:19:c8:b7:10:59:3b:50:
6b:4a:3a:c9:d8:73:4f:3d:c3:49:0d:18:ef:c0:ed:d0:90:3a:
52:cf:cf:ce:e8:90:ce:fb:e7:89:39:44:5a:82:0b:fa:67:a6:
34:77:0c:8e:18:12:e6:1a:46:2b:9e:4d:c2:9c:54:e7:66:66:
80:ba:08:15:18:0d:05:56:59:49:55:de:4f:92:91:9d:89:e8:
bd:22:0b:8e:0e:7d:89:b4:f4:98:b8:88:2d:c9:8c:b4:3d:61:
0f:b7:4e:4f:59:e5:fc:42:e3:63:46:5f:f0:b1:98:cb:5e:c5:
f5:49:0e:76:3c:2f:17:c3:b5:36:ff:10:55:19:b7:74:b0:35:
e6:2a:d1:86:ed:b7:b7:3e:af:91:08:30:80:da:b6:ad:22:24:
fb:73:8d:e2:43:95:55:3b:e2:91:c3:a3:6d:b0:da:54:17:09:
7e:84:5a:ef:69:40:3d:5c:ba:28:29:4e:7b:45:26:08:86:9a:
a4:e4:fa:11:85:fb:f2:35:64:94:60:e4:5c:bc:e3:e7:eb:8a:
fb:14:de:58:54:77:04:99:3b:de:01:58:6a:a8:6a:66:1d:8d:
a3:58:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org