Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e203331383938.roa
File: 32332e3135302e382e302f32332d3233203d3e203331383938.roa (raw, json)
Hash identifier: 2LBp1LTBEvGx/9WBF/SfACmGQa2wPNhU3XBPeHVpfJw=
Subject key identifier: 3A:FB:EA:33:0C:EE:85:A5:01:00:39:F0:78:2A:2A:85:B0:08:63:74
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 04E03729913D8958C4A154C7FB307E99F5C51D55
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e203331383938.roa
Signing time: Wed 12 Jul 2023 01:35:14 +0000
ROA not before: Wed 12 Jul 2023 01:30:14 +0000
ROA not after: Wed 10 Jul 2024 01:35:14 +0000
asID: 31898
IP address blocks: 23.150.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e0:37:29:91:3d:89:58:c4:a1:54:c7:fb:30:7e:99:f5:c5:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Jul 12 01:30:14 2023 GMT
Not After : Jul 10 01:35:14 2024 GMT
Subject: CN=3AFBEA330CEE85A5010039F0782A2A85B0086374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:68:41:20:54:aa:64:e7:d0:b0:a0:fe:d3:
ea:4d:9b:0a:fe:6e:96:2b:f1:c1:13:9f:de:22:b7:
39:b3:b7:d5:fa:4a:b5:8e:2c:ee:44:81:ad:a1:9a:
2b:90:67:91:9c:ad:61:7b:3f:88:b0:a4:49:7c:06:
4c:47:fe:9c:45:29:cd:ed:6f:14:45:19:d5:f5:ab:
15:84:8f:6c:b3:1d:e8:f5:16:05:b1:d6:9f:0c:c9:
96:11:1d:90:cf:2f:42:e4:89:19:33:8b:11:98:62:
57:ba:af:e5:f3:44:d7:e5:b9:c8:e6:5b:c4:8c:72:
58:af:60:15:0e:b5:18:c6:3c:49:dc:f3:fe:56:ad:
e2:4c:d6:68:fc:f4:ad:f5:b7:9a:aa:1c:ce:e8:75:
e5:8a:ef:81:34:14:ce:12:5d:78:bf:ef:5b:d1:98:
e4:bc:30:ce:d1:05:32:33:cb:6e:bb:05:e6:4a:65:
0b:03:60:75:34:b7:26:bf:41:fb:54:23:7c:c6:d1:
60:d0:56:4a:0e:36:8a:68:fe:bb:25:38:7e:a4:4b:
70:4e:67:80:99:48:e3:5a:4a:4d:46:59:e0:6d:42:
ee:ee:96:97:d8:16:cb:cc:16:ed:02:34:5d:81:f2:
e2:df:91:89:1c:78:f4:67:dd:4e:58:e2:02:ac:15:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:EA:33:0C:EE:85:A5:01:00:39:F0:78:2A:2A:85:B0:08:63:74
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.8.0/23
Signature Algorithm: sha256WithRSAEncryption
15:f3:4a:af:62:e0:f6:3f:2a:9e:74:13:d0:ca:d5:da:33:aa:
70:66:be:a1:59:c6:31:24:0d:4f:93:65:06:dc:5a:68:3b:3e:
0a:38:4e:e6:1b:c2:bb:d5:3f:3d:15:09:8d:90:03:d6:ba:13:
97:5f:20:2f:d5:23:a6:73:73:85:88:1b:cf:67:91:6a:68:9e:
e5:2b:b4:a3:9d:a7:73:19:d3:dd:72:e0:e2:ce:ad:fb:e1:ef:
e3:10:7b:55:74:ed:a8:28:a5:d6:d7:de:23:c2:98:44:9b:ba:
51:1d:fb:8e:84:e6:2c:4a:0a:23:12:6a:e1:c1:6b:1c:e8:91:
f2:bf:2c:d2:28:a6:0c:5a:79:1f:93:de:f0:b2:30:01:1d:47:
36:c0:af:e5:34:ff:d9:4d:cf:ce:a0:e1:6f:fc:85:77:9c:52:
20:c0:af:f1:14:33:be:3b:89:37:3e:f4:0a:71:a3:80:1a:b3:
51:bc:92:e9:13:d1:ed:f9:42:a3:ec:48:b8:a2:7e:7e:a2:8c:
98:fc:9b:64:3d:e7:ce:df:ad:88:41:cb:09:33:e5:d2:34:33:
64:a8:56:76:7a:7b:56:82:28:35:c3:ca:f9:d1:a2:f4:65:6f:
47:b9:40:06:fb:74:f2:04:32:e9:af:1a:82:fe:44:e8:98:36:
0b:df:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:09:47 2025 by rpki-client