Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2031303132.roa
File:                     32332e3135302e382e302f32332d3233203d3e2031303132.roa (raw, json)
Hash identifier:          WNP5GWNTEq3yQoI7+KaKkzwu45RGiheNRVUtRlzvCpY=
Subject key identifier:   05:D8:3F:B9:39:6B:F5:7D:6A:CC:B0:91:8E:65:6C:1D:18:37:D8:A3
Certificate issuer:       /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial:       0CCA0F48AEE6C4E2D488307F806FEAD4254E1BFD
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access:    rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access:      rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2031303132.roa
Signing time:             Thu 06 Jul 2023 07:31:47 +0000
ROA not before:           Thu 06 Jul 2023 07:26:47 +0000
ROA not after:            Thu 04 Jul 2024 07:31:47 +0000
asID:                     1012
IP address blocks:        23.150.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:0f:48:ae:e6:c4:e2:d4:88:30:7f:80:6f:ea:d4:25:4e:1b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
        Validity
            Not Before: Jul  6 07:26:47 2023 GMT
            Not After : Jul  4 07:31:47 2024 GMT
        Subject: CN=05D83FB9396BF57D6ACCB0918E656C1D1837D8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:04:b4:16:0d:df:6e:ca:c5:b3:35:d3:df:
                    94:36:c3:c9:47:a9:1e:76:f6:91:e7:f0:c8:53:25:
                    dc:6a:12:33:ca:95:b7:74:01:9b:fd:0b:97:ad:a0:
                    bd:26:54:34:49:35:23:af:6b:92:1b:97:e6:6c:41:
                    84:d0:59:80:81:fc:5b:97:4d:db:db:02:fc:32:7b:
                    22:71:e9:bd:5b:a4:3b:a2:38:b8:29:c7:60:ba:87:
                    0c:d5:f8:87:72:42:06:f4:83:c7:08:00:42:b2:00:
                    91:f2:71:c3:51:e1:04:31:1e:af:90:f1:55:7a:5e:
                    39:66:a4:1b:e4:65:09:36:0c:87:67:11:80:19:e6:
                    7b:4e:18:ee:21:02:30:8f:01:44:59:c8:a5:3d:28:
                    8d:e9:ae:f0:ca:1b:90:3c:02:09:cb:75:a6:29:37:
                    4d:02:e9:cf:a5:b2:9f:ba:2c:2c:aa:1a:9b:02:e0:
                    e4:b5:50:90:29:5a:d0:c8:16:5f:e0:5a:37:43:c0:
                    9a:14:9c:80:84:50:4c:ec:a4:37:5b:a4:ba:d1:08:
                    f0:f8:5e:f0:37:fc:31:21:2e:d2:fe:06:b9:20:5a:
                    ac:d5:41:fc:75:c5:37:94:7e:d6:ea:04:0a:8f:a6:
                    73:6c:3f:4b:93:04:64:b1:69:96:f8:41:5f:67:a7:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:3F:B9:39:6B:F5:7D:6A:CC:B0:91:8E:65:6C:1D:18:37:D8:A3
            X509v3 Authority Key Identifier:
                keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:46:2d:98:df:c0:3f:04:9d:7b:d9:f0:75:b0:41:f6:7a:
         37:e5:9f:d6:a5:8a:34:6e:fb:f7:cc:eb:f3:3b:1e:24:12:60:
         de:df:f5:af:cb:80:80:9d:7a:f7:94:00:11:6d:98:a8:76:ca:
         ba:ed:58:17:43:0b:42:f9:fa:d0:55:5c:e4:60:80:69:e4:8e:
         78:36:ce:67:d3:4d:4c:84:9d:df:7b:c3:5b:97:58:ff:6d:cb:
         de:3d:8d:7b:ab:70:87:58:f8:bc:47:3c:83:e4:a0:e9:68:e4:
         95:af:69:fc:1a:1d:f6:eb:db:1e:36:b2:8d:a0:3c:6e:02:92:
         d9:34:83:07:d1:48:94:3a:fa:8d:52:b7:9c:2f:c3:87:a7:27:
         e5:23:88:d9:4e:46:17:57:4a:75:de:33:75:94:8a:99:40:2a:
         7d:ab:40:36:07:d2:fa:92:b5:d4:49:23:ea:d5:9c:0a:93:4c:
         b2:25:b5:61:64:30:aa:92:5e:e8:04:7c:e5:dd:d3:7e:3f:e7:
         86:7b:6f:c3:06:b6:07:cd:87:c1:16:ae:3d:53:29:75:99:73:
         bd:4e:fa:9e:07:4f:57:42:9e:c4:f1:b8:d5:67:5b:89:0c:9c:
         a4:80:78:59:a7:7a:31:a4:5d:6a:15:5b:71:8c:86:db:79:40:
         f7:4f:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:20 2025 by rpki-client