Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
File: 32332e3135302e382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier: 7uIsbx43FKTWG06oNyL6hSkmenYoVN5hnf9ciBzlITU=
Subject key identifier: D4:66:05:A6:ED:C3:F3:4D:02:FE:79:34:0C:6B:FF:52:F0:B9:C7:53
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 57FB81A0C549242BF529112222DC039252DBD68F
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
Signing time: Mon 25 Sep 2023 08:12:43 +0000
ROA not before: Mon 25 Sep 2023 08:07:43 +0000
ROA not after: Mon 23 Sep 2024 08:12:43 +0000
asID: 945
IP address blocks: 23.150.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fb:81:a0:c5:49:24:2b:f5:29:11:22:22:dc:03:92:52:db:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Sep 25 08:07:43 2023 GMT
Not After : Sep 23 08:12:43 2024 GMT
Subject: CN=D46605A6EDC3F34D02FE79340C6BFF52F0B9C753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:66:03:fc:04:c8:f8:57:8a:c7:be:7b:de:
14:79:c4:32:df:48:f7:cb:3c:84:0d:c1:32:36:ac:
6a:c9:4a:9a:a0:10:cf:75:3a:13:97:1a:39:1f:c2:
ed:95:82:9a:75:a8:78:b4:dc:0f:39:a8:4c:52:75:
45:4f:76:17:f8:4d:cc:22:0b:67:1b:c3:4a:f0:73:
c4:f7:93:ac:ca:77:67:0e:4f:f2:39:33:c0:34:a5:
e5:c8:23:fc:63:d9:6b:50:7a:52:91:2e:74:53:0b:
f5:bd:bb:99:da:80:a0:19:69:b0:43:dd:10:a9:90:
d6:b1:f7:08:4d:75:d3:f6:41:a6:63:de:36:01:42:
9f:6a:f0:45:a5:f0:05:93:00:76:df:66:28:d0:c0:
e1:a6:a4:8c:f6:08:73:07:82:9e:df:fb:91:b9:00:
ad:12:6f:02:28:50:97:f7:e4:74:15:2f:4c:7b:43:
d2:ba:93:14:67:ae:46:e0:99:3b:5d:68:6b:ab:d2:
b7:a2:2e:29:05:9b:92:20:4d:f7:5f:43:55:9c:ae:
f4:11:27:6b:65:3f:d8:fd:e6:1e:ec:b1:4f:07:f1:
5c:57:25:94:16:3b:84:52:75:b6:aa:7f:87:f8:89:
b9:43:9d:db:04:30:e7:a1:b8:eb:e1:88:3a:47:2d:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:05:A6:ED:C3:F3:4D:02:FE:79:34:0C:6B:FF:52:F0:B9:C7:53
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
06:64:71:5d:96:2c:ed:c8:06:2d:61:0a:a3:20:9c:b6:a1:1a:
7f:ec:e2:61:36:54:c8:98:09:6a:e8:45:4e:84:14:38:b3:95:
ce:ec:74:18:96:48:59:2b:ef:f4:ec:9b:14:55:2e:5e:e5:c6:
70:16:c1:84:e5:8d:99:f4:4a:22:e8:85:4a:fe:15:2a:d5:fe:
40:b2:ec:72:60:ee:ba:b7:11:7c:82:20:5b:32:79:42:14:ea:
4e:f2:26:11:c3:d0:84:56:4c:1c:5d:99:b1:e0:a6:62:a9:84:
d9:14:1b:24:8b:2e:6d:53:63:b6:3f:31:52:ce:e2:74:8d:f7:
5b:bd:1c:5d:68:e9:f0:71:d9:32:74:97:4d:8f:75:0e:8f:6a:
92:c2:b7:d6:26:64:f3:46:9b:61:00:d1:08:23:4d:c4:89:3a:
61:57:a1:f8:94:50:b5:d8:1e:c5:c0:72:b2:8a:77:bf:3b:28:
5d:94:05:ff:ae:bf:1d:94:8f:28:d4:d6:aa:58:b0:e4:1c:50:
e8:62:d2:ce:69:ab:24:b4:89:94:70:86:60:ba:46:ed:e7:6b:
79:34:b5:33:7d:c4:82:b9:a9:75:8b:30:de:bc:78:ae:b8:05:
fd:63:f4:b6:16:8e:ce:cc:a7:0b:a3:61:06:28:38:51:89:ec:
5c:41:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:43:53 2025 by rpki-client