Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e203539353338.roa
File:                     32332e3135302e31312e302f32342d3234203d3e203539353338.roa (raw, json)
Hash identifier:          tA29THMsqb7bBoe5d91lsC4daelFCywRRbm0wF7qVu8=
Subject key identifier:   C7:36:35:37:C6:A8:AB:29:6C:8B:A1:02:F4:D3:4F:8A:7C:E4:4C:68
Certificate issuer:       /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial:       74562F9BCE4925D0515A0FFF4EDF484A92192595
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access:    rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access:      rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e203539353338.roa
Signing time:             Tue 23 May 2023 02:52:25 +0000
ROA not before:           Tue 23 May 2023 02:47:25 +0000
ROA not after:            Tue 21 May 2024 02:52:25 +0000
asID:                     59538
IP address blocks:        23.150.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:56:2f:9b:ce:49:25:d0:51:5a:0f:ff:4e:df:48:4a:92:19:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
        Validity
            Not Before: May 23 02:47:25 2023 GMT
            Not After : May 21 02:52:25 2024 GMT
        Subject: CN=C7363537C6A8AB296C8BA102F4D34F8A7CE44C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:86:a1:c3:8a:8d:4f:a2:41:fc:7d:9e:9f:
                    87:e5:83:b7:af:fb:f1:96:9c:45:48:bb:b1:9a:7c:
                    ff:08:6b:89:85:f0:e4:9b:3f:9e:34:3d:64:63:a1:
                    bd:cd:e4:ca:d0:c4:f8:a7:23:00:a2:1c:67:14:d2:
                    75:58:93:25:c8:d8:de:29:5f:0e:08:a1:f9:df:27:
                    4f:e2:ab:2e:bf:28:38:75:ae:b4:97:65:ff:9e:3d:
                    ca:4e:a3:8f:c4:f5:94:c7:72:b0:73:91:8f:0f:48:
                    1f:33:5b:2a:84:aa:f6:ee:0c:81:81:29:ea:e3:eb:
                    c0:30:f2:76:7c:62:5c:cc:fb:2a:4b:0f:9f:5f:de:
                    c7:ed:6f:a5:9f:51:08:b9:29:ff:9b:fb:4b:36:d6:
                    5f:e3:f3:64:ef:01:55:9a:4b:9e:0b:8f:93:c4:b3:
                    73:f0:24:96:76:05:6f:04:a5:2a:b7:61:0e:b9:09:
                    6c:b2:75:70:7e:e8:9e:74:e2:fb:be:1a:36:99:f6:
                    93:cb:db:de:16:97:7e:00:ca:37:18:04:40:34:e8:
                    90:f7:0f:70:7a:f8:22:31:77:44:a8:b8:84:7e:e1:
                    a1:48:44:0b:05:0d:3c:77:2e:eb:ea:b7:3e:c3:df:
                    7f:34:6a:be:e6:c9:9d:26:c5:33:d6:d3:fa:5d:92:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:36:35:37:C6:A8:AB:29:6C:8B:A1:02:F4:D3:4F:8A:7C:E4:4C:68
            X509v3 Authority Key Identifier:
                keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e31312e302f32342d3234203d3e203539353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:3e:69:3d:81:d5:ae:10:18:a8:3b:fe:65:43:df:ca:e4:
         0b:43:7f:98:2e:57:d7:90:f8:f8:7d:99:d9:24:50:93:2d:6a:
         2f:30:c2:ca:ca:5e:a8:81:36:36:56:e7:44:34:2d:e3:29:a1:
         16:a8:61:b3:ab:cd:aa:81:27:6d:74:81:1d:69:43:31:5f:e7:
         fd:0a:c1:88:8c:9b:52:b5:c0:ef:a5:97:30:00:b3:74:1f:bd:
         8d:28:4e:50:71:da:3f:1b:cc:b7:89:7e:8c:7c:17:d9:12:fb:
         98:fc:d5:27:f0:51:2e:b4:1c:22:96:45:8e:b9:d1:78:c0:17:
         d5:2f:b7:cc:96:58:74:69:ba:de:3e:59:eb:59:f6:23:70:67:
         e4:6d:4f:63:df:e8:e2:e9:a9:76:a6:da:b6:ed:ef:1a:13:a9:
         9d:26:03:a0:56:cd:1e:04:96:f2:8e:78:ea:d6:74:8d:42:6c:
         4b:92:c4:77:7f:e6:d9:92:0d:f8:40:7b:80:31:92:88:ca:97:
         f9:13:9f:12:e5:2c:a7:ca:01:6f:e4:b6:29:5b:28:d1:18:11:
         e7:bd:e7:81:50:37:79:c8:8d:a2:51:87:5c:13:50:16:47:9b:
         17:2e:6e:ca:b3:d6:3c:72:dd:5b:7a:14:01:87:dd:4c:cb:11:
         4e:b1:74:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:56 2025 by rpki-client