Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2037373139.roa
File: 32332e3135302e382e302f32332d3233203d3e2037373139.roa (raw, json)
Hash identifier: pQCcttCmb2rZPY7iYG90kd1v5CEKfREdJl7qS+ub3MA=
Subject key identifier: EA:09:DD:9A:5F:4F:EB:D4:B5:E8:D2:4C:75:79:F0:10:13:2A:5E:1B
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 7409A43B607AF5E15A599DADEE34329E3437B585
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2037373139.roa
Signing time: Wed 12 Jul 2023 01:34:32 +0000
ROA not before: Wed 12 Jul 2023 01:29:32 +0000
ROA not after: Wed 10 Jul 2024 01:34:32 +0000
asID: 7719
IP address blocks: 23.150.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:09:a4:3b:60:7a:f5:e1:5a:59:9d:ad:ee:34:32:9e:34:37:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Jul 12 01:29:32 2023 GMT
Not After : Jul 10 01:34:32 2024 GMT
Subject: CN=EA09DD9A5F4FEBD4B5E8D24C7579F010132A5E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:cb:41:49:34:75:9a:8f:96:81:0b:17:72:
b6:2e:61:c1:90:c7:d0:61:71:e2:f0:0d:b2:de:bc:
40:51:2d:19:51:e3:29:e6:f6:05:85:9b:25:46:d7:
32:08:57:a8:0d:76:08:b6:33:68:7c:b7:67:90:64:
6d:56:3a:03:72:da:9b:ce:1d:03:28:91:54:ba:25:
2b:8d:b9:da:6a:68:82:83:db:d5:f5:d0:84:c9:7d:
8e:a6:c7:2f:d1:2e:ee:f9:76:87:3c:65:5d:48:a0:
4c:e1:db:2c:9e:49:ee:31:f5:f2:78:c6:f2:52:81:
61:52:e0:87:2b:cb:56:2b:53:a8:9f:fc:2e:16:34:
b5:cc:9d:bd:ea:e8:8f:d2:e9:2c:25:4c:c1:16:91:
ac:b8:86:94:54:0e:b7:33:70:01:3b:c7:f2:f8:3a:
3e:3b:b4:6d:5d:9f:ce:c5:52:c9:01:58:fc:e4:56:
15:9d:d7:8e:78:8b:c6:4f:af:13:ae:f8:4c:24:b8:
60:94:fd:bc:1a:f0:55:3d:81:f0:30:90:91:36:5f:
bb:5c:41:64:32:24:88:45:37:dd:c9:5e:47:56:a9:
35:5d:50:6b:33:e2:6a:ef:7e:eb:66:08:b3:16:6c:
0f:9c:c4:e0:c3:d7:e1:1f:d0:30:4d:96:b1:31:8b:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:DD:9A:5F:4F:EB:D4:B5:E8:D2:4C:75:79:F0:10:13:2A:5E:1B
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ec:f6:5f:e3:a4:2d:ef:c7:7c:be:c8:25:ff:f4:43:b3:4f:
a3:6c:5c:46:75:c5:7e:f8:5b:37:ec:54:2f:9d:80:61:8b:d6:
fd:09:b5:43:1d:57:4e:33:7c:fc:31:8d:98:9e:39:c5:e6:53:
52:4e:17:2f:07:5a:bd:b4:08:ef:b0:2f:a6:b3:08:60:4e:ef:
2a:9b:c1:6f:76:e4:9e:98:3f:fa:03:85:c8:36:a2:a6:45:41:
d1:22:f4:31:d0:38:0f:53:82:07:7a:2d:46:d9:78:2d:b1:67:
95:30:24:98:c7:a6:8c:2b:83:13:49:a3:ba:a5:30:37:8c:e5:
22:a7:6a:d1:2e:76:8c:9f:99:2c:ad:16:7f:a1:11:66:38:ce:
8b:d5:01:3b:e0:57:5d:87:8a:8a:8b:93:79:74:95:f0:2c:ad:
a0:52:b4:3b:b2:fb:2d:81:26:ea:ad:7b:f5:48:ed:54:61:26:
59:3f:73:af:b4:ae:4f:8a:a4:1e:4f:e3:52:61:5e:a2:de:84:
0a:38:1c:61:01:9a:f5:36:d5:25:87:79:d8:c8:a3:bd:12:52:
23:1d:7e:cf:08:fd:5e:31:94:ca:f0:d4:09:5c:d2:c4:6d:49:
c9:4b:ce:37:30:99:b8:d2:7c:79:76:01:f5:b2:b0:8a:11:7f:
b3:6a:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:50 2025 by rpki-client