Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e31302e302f32342d3234203d3e20393435.roa
File: 32332e3135302e31302e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: r/Jm2RItif2ntGv29yun2idGuokZx6W6eO1Krex2wJ0=
Subject key identifier: E8:DE:4A:78:4F:38:79:A0:A4:52:44:CD:D4:61:D7:5F:9F:8B:83:AB
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 47D6DCED459EC1AA04F189885BFA63EECDA9EDF4
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e31302e302f32342d3234203d3e20393435.roa
Signing time: Sat 17 Jun 2023 18:25:05 +0000
ROA not before: Sat 17 Jun 2023 18:20:05 +0000
ROA not after: Sat 15 Jun 2024 18:25:05 +0000
asID: 945
IP address blocks: 23.150.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d6:dc:ed:45:9e:c1:aa:04:f1:89:88:5b:fa:63:ee:cd:a9:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Jun 17 18:20:05 2023 GMT
Not After : Jun 15 18:25:05 2024 GMT
Subject: CN=E8DE4A784F3879A0A45244CDD461D75F9F8B83AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:fe:41:ed:de:ac:86:8b:25:07:96:5b:84:
d6:93:a7:69:f3:55:8e:00:2c:d1:8e:90:73:8e:ad:
5a:b3:7e:c3:4b:f8:3d:15:08:4c:65:84:b6:23:c7:
53:f0:1f:29:c9:41:f2:10:4a:11:5d:c9:f8:9c:65:
a7:f8:9c:9c:07:e8:6f:54:dd:f4:9c:c5:ab:b3:f8:
a2:46:f3:16:ec:21:d6:de:3d:f5:4b:65:fb:5b:6e:
29:b9:12:a4:3d:03:76:ab:75:3e:48:70:4e:ca:75:
ed:84:7d:6b:27:16:fa:9e:94:b5:ef:79:fa:42:16:
cb:65:43:75:64:29:8c:21:a0:4f:8b:dc:d1:f1:b0:
be:34:de:3b:99:e6:02:39:ee:a5:c2:b0:82:83:66:
71:4f:a1:03:f6:8c:0f:74:88:4c:df:12:bb:7d:55:
e2:43:35:7b:92:3d:3a:6d:ed:5b:31:ea:b4:c5:33:
20:56:92:99:03:c4:e4:6d:74:36:47:db:b8:7e:be:
6b:fa:d5:1a:da:f8:64:51:64:d3:a7:48:5e:ec:16:
dc:f5:47:b2:1b:be:6d:19:c7:4f:ea:01:88:b1:4c:
2d:58:1e:9e:4a:ef:9e:1c:9d:a5:7c:e3:e9:9d:5f:
10:bb:a6:8e:1c:a0:34:a9:e7:27:7b:90:41:13:fd:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:4A:78:4F:38:79:A0:A4:52:44:CD:D4:61:D7:5F:9F:8B:83:AB
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e31302e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:14:d3:0d:e2:a2:0c:d4:aa:dc:5a:25:a0:3b:14:42:ef:65:
10:8f:0b:54:cc:3d:90:0a:1c:10:6c:e7:69:af:8b:dd:84:b5:
11:9b:6c:de:7f:f1:f9:18:65:1f:0d:51:91:cc:1c:59:03:5a:
7a:d1:6e:98:a7:04:ac:3d:bc:d3:6a:2e:4f:1a:94:fd:50:40:
6a:e5:43:70:3d:9a:b6:7f:b8:5a:f6:2b:7e:c9:fc:d0:c9:d3:
5e:e1:76:65:63:4d:1d:b1:64:11:b7:f8:5f:f0:8b:ce:e0:7b:
c6:3c:84:70:41:3d:3d:dc:6d:21:b4:e3:e2:99:f8:6b:70:41:
04:89:2a:1b:c5:dc:5f:de:f7:08:11:b6:ff:44:50:54:2f:df:
ce:55:99:8e:ec:b6:ae:db:95:44:44:2b:90:26:f5:87:54:02:
bf:09:02:a1:03:91:a9:38:4c:f8:bc:5f:90:30:d9:d6:22:66:
ad:24:d7:99:0e:82:0c:c6:a8:e9:92:e5:b3:46:b5:41:65:77:
dd:38:53:4e:26:26:79:74:92:74:10:7d:70:76:46:8f:2c:02:
e8:66:02:db:00:e7:fe:98:60:3f:d8:66:52:05:d8:bd:cf:24:
b7:d2:3d:29:04:fd:7f:33:a2:fd:8a:30:56:0c:f5:77:d5:18:
61:3a:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:59 2025 by rpki-client