Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20323030383237.roa
File: 32332e3135302e31312e302f32342d3234203d3e20323030383237.roa (raw, json)
Hash identifier: weUl0mWU/1kP2NXBssxgrHYrVFsrfxJic10Z2m1FOA8=
Subject key identifier: C0:C5:91:32:45:0A:15:E4:69:DB:1B:84:41:F9:00:51:D8:19:C0:3D
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 2240483E9949141B5AE9B2BA05B40F85445C71D6
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20323030383237.roa
Signing time: Fri 09 Jun 2023 07:14:12 +0000
ROA not before: Fri 09 Jun 2023 07:09:12 +0000
ROA not after: Fri 07 Jun 2024 07:14:12 +0000
asID: 200827
IP address blocks: 23.150.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:40:48:3e:99:49:14:1b:5a:e9:b2:ba:05:b4:0f:85:44:5c:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Jun 9 07:09:12 2023 GMT
Not After : Jun 7 07:14:12 2024 GMT
Subject: CN=C0C59132450A15E469DB1B8441F90051D819C03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:81:9b:bb:6f:ee:cf:f4:8d:cb:36:86:fa:
b8:dc:4b:79:38:92:32:d6:b5:6d:09:42:9b:6f:c7:
0a:a0:bb:6e:af:d2:b6:09:6d:c0:39:65:12:eb:88:
6a:27:4f:ae:3f:07:c2:b1:cc:e3:6a:39:d6:55:a4:
84:76:e6:21:14:df:c1:e5:c8:5e:14:11:b4:74:3f:
73:9c:26:1d:f6:65:ee:81:15:b9:fd:f1:0e:00:61:
8f:b9:d4:6b:f5:30:ab:a7:2a:af:e9:2c:52:e2:7f:
6a:59:11:18:83:3f:60:6a:ba:63:05:5f:50:d8:a2:
d5:1a:c4:8b:cd:88:0e:17:72:cb:08:2a:eb:9a:d0:
d3:c1:69:1b:a1:6e:d4:f7:35:5d:e6:e3:9e:fc:90:
b5:99:56:44:b1:e5:5f:97:65:f7:74:07:25:13:05:
df:99:86:26:1f:ad:92:94:76:97:d7:62:93:29:7c:
17:83:71:b8:f9:0d:cf:f3:26:3c:c6:88:5b:b3:0e:
de:f2:41:7a:52:88:4e:2b:23:57:c3:a6:8b:6c:6f:
8b:0c:12:90:e3:d3:86:c3:5a:5d:1e:17:d9:82:b1:
33:25:22:6d:14:cf:b0:59:2b:b0:ad:42:03:84:c5:
33:cc:9d:00:8b:2f:eb:8b:56:23:e8:c9:47:12:ee:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:91:32:45:0A:15:E4:69:DB:1B:84:41:F9:00:51:D8:19:C0:3D
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e20323030383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:dd:f7:81:08:e3:bf:27:b6:13:47:4b:c9:54:13:25:69:12:
d0:d1:2e:e6:ce:2a:9a:6e:54:83:0e:7d:78:72:a8:19:7a:7e:
9a:10:fe:b7:f7:de:54:b2:46:66:d8:29:47:f0:13:33:66:50:
5e:29:d5:f4:10:db:1e:09:86:a4:67:34:9f:4a:3b:79:0d:3c:
c7:fa:f2:df:43:16:7f:0b:94:7e:6e:f1:c6:94:a7:6f:13:d2:
bb:c6:20:79:5a:db:83:18:5c:3e:f3:bb:bd:61:e9:3e:1d:f6:
41:0d:dc:60:4d:a5:e6:18:cf:16:46:71:6f:a3:23:12:71:d0:
4e:a4:48:31:1d:50:f4:11:5f:e9:af:69:f9:8c:65:b8:2f:72:
ae:ba:6d:8f:f5:0b:27:67:1d:9b:03:53:61:16:96:bf:8e:66:
94:37:82:d1:a7:08:30:8d:09:31:e1:13:6d:fd:80:a1:9a:1e:
18:a9:43:62:94:8e:12:bf:05:b4:32:5c:d7:b0:3a:ad:46:35:
68:ca:5a:b9:61:4b:04:c3:9a:58:bc:01:2f:94:8d:94:43:5d:
26:b1:22:61:44:1d:05:ce:d3:60:d8:ec:86:0e:8b:65:db:20:
5d:63:7e:69:8e:19:4a:ff:c1:dc:f8:85:88:2a:cd:67:6b:1b:
2e:8c:46:1d
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUIkBIPplJFBta6bK6BbQPhURccdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBN0Y3OEYwQjg2NjBDMzk3QTY4RDQ2RDgwOTU5QzI5
RTcwNzZGRTAeFw0yMzA2MDkwNzA5MTJaFw0yNDA2MDcwNzE0MTJaMDMxMTAvBgNV
BAMTKEMwQzU5MTMyNDUwQTE1RTQ2OURCMUI4NDQxRjkwMDUxRDgxOUMwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkm4Gbu2/uz/SNyzaG+rjcS3k4
kjLWtW0JQptvxwqgu26v0rYJbcA5ZRLriGonT64/B8KxzONqOdZVpIR25iEU38Hl
yF4UEbR0P3OcJh32Ze6BFbn98Q4AYY+51Gv1MKunKq/pLFLif2pZERiDP2BqumMF
X1DYotUaxIvNiA4XcssIKuua0NPBaRuhbtT3NV3m4578kLWZVkSx5V+XZfd0ByUT
Bd+ZhiYfrZKUdpfXYpMpfBeDcbj5Dc/zJjzGiFuzDt7yQXpSiE4rI1fDpotsb4sM
EpDj04bDWl0eF9mCsTMlIm0Uz7BZK7CtQgOExTPMnQCLL+uLViPoyUcS7uLvAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUwMWRMkUKFeRp2xuEQfkAUdgZwD0wHwYDVR0j
BBgwFoAUJqf3jwuGYMOXpo1G2AlZwp5wdv4wDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzkvMjZBN0Y3
OEYwQjg2NjBDMzk3QTY4RDQ2RDgwOTU5QzI5RTcwNzZGRS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
OS8yNkE3Rjc4RjBCODY2MEMzOTdBNjhENDZEODA5NTlDMjlFNzA3NkZFLmNlcjBz
BggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzkvMzIzMzJlMzEzNTMwMmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzIzMDMwMzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YLMA0GCSqGSIb3DQEBCwUAA4IB
AQCa3feBCOO/J7YTR0vJVBMlaRLQ0S7mziqablSDDn14cqgZen6aEP63995UskZm
2ClH8BMzZlBeKdX0ENseCYakZzSfSjt5DTzH+vLfQxZ/C5R+bvHGlKdvE9K7xiB5
WtuDGFw+87u9Yek+HfZBDdxgTaXmGM8WRnFvoyMScdBOpEgxHVD0EV/pr2n5jGW4
L3Kuum2P9QsnZx2bA1NhFpa/jmaUN4LRpwgwjQkx4RNt/YChmh4YqUNilI4SvwW0
MlzXsDqtRjVoylq5YUsEw5pYvAEvlI2UQ10msSJhRB0FztNg2OyGDotl2yBdY35p
jhlK/8Hc+IWIKs1naxsujEYd
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:45:06 2025 by rpki-client