Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3232203d3e203530303538.roa
File: 32332e3135302e382e302f32322d3232203d3e203530303538.roa (raw, json)
Hash identifier: SzMqT+aqMIDJujMHd00/QtNGn2EW++CO/TEyF86bAWY=
Subject key identifier: 18:A4:15:E8:79:97:FF:44:34:82:F1:28:CA:EF:FA:47:7E:73:B9:44
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 576E897DDF66D951482947DF30572A2B80FC851D
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3232203d3e203530303538.roa
Signing time: Mon 10 Apr 2023 03:31:26 +0000
ROA not before: Mon 10 Apr 2023 03:26:26 +0000
ROA not after: Mon 08 Apr 2024 03:31:26 +0000
asID: 50058
IP address blocks: 23.150.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:89:7d:df:66:d9:51:48:29:47:df:30:57:2a:2b:80:fc:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Apr 10 03:26:26 2023 GMT
Not After : Apr 8 03:31:26 2024 GMT
Subject: CN=18A415E87997FF443482F128CAEFFA477E73B944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:d5:b3:63:96:ce:2f:2f:eb:86:cb:0d:e8:
37:20:0b:dd:46:a7:cb:81:5f:71:1d:fc:36:cb:53:
21:63:88:f2:45:ae:cd:5d:40:a9:70:75:c7:0b:ed:
f1:95:05:7f:11:33:18:65:44:74:ba:68:33:55:c7:
02:33:32:a5:1b:17:7a:5f:a3:8d:51:34:7e:aa:8b:
28:f0:54:90:67:36:26:ac:43:53:aa:b1:1d:eb:8f:
e8:8e:f5:e5:b5:e8:32:06:67:18:85:d5:60:55:c5:
13:d8:f6:8b:7b:a3:36:ea:51:3e:c9:17:b8:f1:ed:
15:43:e8:12:18:5f:5c:66:33:ec:bd:69:7a:dd:4e:
68:92:53:7e:a1:65:d8:c6:c3:26:b9:76:e6:e4:9a:
38:2a:9d:32:2a:12:b2:1d:59:6f:42:99:91:71:aa:
b1:55:3c:0a:32:9b:cd:17:c6:c5:d5:f1:b3:52:a3:
bd:e9:f4:1a:be:51:be:7a:a2:7c:a1:40:70:37:33:
9e:57:aa:4c:bf:b3:83:9a:ba:89:17:c6:54:f7:e7:
ee:04:c4:97:cc:b9:61:af:fd:bd:86:bf:b5:18:d2:
15:7a:59:1a:5b:03:9b:c6:b4:7d:a6:3b:4e:f6:cf:
47:73:ad:c4:0c:d9:6e:73:88:0f:dd:f0:b3:55:56:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:15:E8:79:97:FF:44:34:82:F1:28:CA:EF:FA:47:7E:73:B9:44
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3232203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:70:5f:a3:33:3d:88:d0:10:72:23:c6:74:af:54:4e:d5:f9:
99:ab:63:d2:0f:fe:7d:a1:ec:61:dd:9f:ef:c6:b2:39:d1:97:
da:41:5b:10:e2:f5:f9:57:f6:86:e1:df:15:eb:36:03:59:f1:
88:f0:0f:09:5f:20:3d:a1:d4:b0:95:5c:77:76:1f:81:1c:ce:
c0:36:dc:dd:57:73:fe:33:b8:df:54:ba:95:dc:fa:ba:5b:2a:
4b:cf:bd:a6:c7:03:7a:aa:d6:61:2f:c5:52:9a:3b:53:27:cf:
5e:68:5b:e7:47:ef:82:1e:50:19:fc:b6:81:0b:81:68:19:5d:
2b:25:54:e0:65:c1:08:5f:30:70:82:04:66:47:9c:26:5d:33:
a9:15:94:1f:1a:c9:6b:de:4b:21:f6:ad:c1:59:48:c1:c0:3c:
cc:f8:41:e2:fb:00:e3:66:27:f8:df:b5:07:b4:49:b2:8d:62:
57:97:d5:be:55:56:1c:79:84:fe:8c:b5:74:aa:35:7c:33:28:
99:8e:44:63:a7:cb:9c:96:af:c7:9d:a7:b5:72:eb:ca:6d:3c:
5a:b2:5b:bb:25:7e:46:cc:39:b3:d7:aa:9c:86:a3:e4:cb:f3:
11:e7:55:79:26:75:f7:ca:f3:35:98:9c:3a:7d:32:ce:49:b8:
4e:94:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:23 2025 by rpki-client