Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e20393435.roa
File: 32332e3135302e382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier: DYuVOJiyxz/3BIyMIYGMww+2sFV/eKzBTH+2ImtV8es=
Subject key identifier: 45:DC:DE:FA:6B:B6:73:61:06:AA:39:ED:C2:6E:53:4A:C0:F4:0D:46
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 3A6478722EF2BD942A18C437AAD7AB5C4AFD8CAD
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e20393435.roa
Signing time: Mon 10 Apr 2023 03:31:26 +0000
ROA not before: Mon 10 Apr 2023 03:26:26 +0000
ROA not after: Mon 08 Apr 2024 03:31:26 +0000
asID: 945
IP address blocks: 23.150.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:64:78:72:2e:f2:bd:94:2a:18:c4:37:aa:d7:ab:5c:4a:fd:8c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Apr 10 03:26:26 2023 GMT
Not After : Apr 8 03:31:26 2024 GMT
Subject: CN=45DCDEFA6BB6736106AA39EDC26E534AC0F40D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:52:30:ec:1c:34:f4:46:e3:66:d0:df:d5:
c5:a1:7d:22:9c:cc:ad:93:04:f2:08:47:33:06:94:
e0:c4:d2:31:a7:d6:99:8c:dd:cb:51:be:4d:8d:c9:
05:a3:d8:99:20:17:a6:25:28:ff:09:8a:fc:bd:61:
9e:b3:b1:e5:ef:f8:bc:2c:c6:43:e4:2a:52:b3:88:
bd:a5:84:dc:80:7b:4d:60:87:d8:f9:bc:be:ca:39:
37:e5:e2:31:6e:71:8d:62:ee:c5:e8:d4:86:82:07:
5b:db:e2:24:a5:03:69:c7:c7:60:dd:ba:31:ea:44:
79:f7:6d:23:cf:8f:a9:0b:6a:bc:6f:55:ef:99:f3:
a2:e3:5b:2a:d4:fe:a7:6c:77:02:e4:fb:70:e4:d0:
06:7f:ec:03:f8:6e:f4:ec:b5:4b:b4:98:26:b4:a3:
c0:eb:4a:34:8b:89:c6:e5:52:65:0d:4d:cd:95:39:
1d:68:c7:0b:b8:e7:04:4e:78:7f:7a:55:01:16:fe:
1d:8f:a5:95:a0:f6:3b:1f:01:6a:c3:f9:ab:f9:8a:
6b:b9:2a:79:50:cd:4f:f6:40:fe:bb:c1:ad:4a:59:
65:ae:70:89:75:2e:81:38:0d:94:18:50:27:e6:da:
ac:b4:21:4d:5d:29:36:3f:02:2d:d2:a9:58:23:c7:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:DE:FA:6B:B6:73:61:06:AA:39:ED:C2:6E:53:4A:C0:F4:0D:46
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/32332e3135302e382e302f32332d3233203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:4f:69:bf:4e:f6:71:6d:4f:44:ed:02:26:ba:bb:b9:b8:3b:
62:17:00:ae:6c:2b:67:dc:49:d9:45:c8:f9:d1:8e:06:b3:db:
8f:94:d8:b0:e6:ef:67:4a:fe:91:94:94:d8:74:f9:a2:8c:50:
9e:78:27:4f:23:10:a3:d2:8b:0b:a0:88:b4:44:19:9d:0c:d2:
bc:2d:bc:77:6c:5a:9d:d3:c5:41:65:f0:17:8a:c8:23:31:01:
3d:35:7f:a2:90:81:6f:90:89:b8:4e:07:af:a5:70:5a:77:2e:
f1:06:24:25:8c:d0:0d:9a:f4:8b:43:b1:b5:55:30:85:6d:46:
35:71:3b:24:a4:d0:c2:fd:8c:e5:5d:a5:f4:d7:47:9c:8f:46:
a2:ae:9c:af:3c:20:05:f1:eb:c7:14:38:85:21:20:38:d4:11:
b9:39:9c:1f:29:b4:aa:56:ee:ed:b0:a3:0f:43:95:51:53:e5:
46:06:bf:05:a5:fe:5c:20:3b:2d:7b:32:81:49:28:27:2e:37:
63:cb:89:ff:77:71:6c:58:f7:fb:a3:94:af:40:9f:55:0d:3a:
aa:a3:ec:c3:d0:eb:85:0a:07:34:07:ab:ca:db:d1:47:3a:3a:
43:71:0d:f4:e5:0f:d5:ea:20:2f:ce:45:b1:19:07:e6:2f:6d:
e3:9d:b4:9f
-----BEGIN CERTIFICATE-----
MIIEtjCCA56gAwIBAgIUOmR4ci7yvZQqGMQ3qterXEr9jK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBN0Y3OEYwQjg2NjBDMzk3QTY4RDQ2RDgwOTU5QzI5
RTcwNzZGRTAeFw0yMzA0MTAwMzI2MjZaFw0yNDA0MDgwMzMxMjZaMDMxMTAvBgNV
BAMTKDQ1RENERUZBNkJCNjczNjEwNkFBMzlFREMyNkU1MzRBQzBGNDBENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdlIw7Bw09EbjZtDf1cWhfSKc
zK2TBPIIRzMGlODE0jGn1pmM3ctRvk2NyQWj2JkgF6YlKP8Jivy9YZ6zseXv+Lws
xkPkKlKziL2lhNyAe01gh9j5vL7KOTfl4jFucY1i7sXo1IaCB1vb4iSlA2nHx2Dd
ujHqRHn3bSPPj6kLarxvVe+Z86LjWyrU/qdsdwLk+3Dk0AZ/7AP4bvTstUu0mCa0
o8DrSjSLicblUmUNTc2VOR1oxwu45wROeH96VQEW/h2PpZWg9jsfAWrD+av5imu5
KnlQzU/2QP67wa1KWWWucIl1LoE4DZQYUCfm2qy0IU1dKTY/Ai3SqVgjx1UVAgMB
AAGjggHAMIIBvDAdBgNVHQ4EFgQURdze+mu2c2EGqjntwm5TSsD0DUYwHwYDVR0j
BBgwFoAUJqf3jwuGYMOXpo1G2AlZwp5wdv4wDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzkvMjZBN0Y3
OEYwQjg2NjBDMzk3QTY4RDQ2RDgwOTU5QzI5RTcwNzZGRS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
OS8yNkE3Rjc4RjBCODY2MEMzOTdBNjhENDZEODA5NTlDMjlFNzA3NkZFLmNlcjBr
BggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzkvMzIzMzJlMzEzNTMwMmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2Uy
MDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAReWCDANBgkqhkiG9w0BAQsFAAOCAQEAC09pv072
cW1PRO0CJrq7ubg7YhcArmwrZ9xJ2UXI+dGOBrPbj5TYsObvZ0r+kZSU2HT5ooxQ
nngnTyMQo9KLC6CItEQZnQzSvC28d2xandPFQWXwF4rIIzEBPTV/opCBb5CJuE4H
r6VwWncu8QYkJYzQDZr0i0OxtVUwhW1GNXE7JKTQwv2M5V2l9NdHnI9Goq6crzwg
BfHrxxQ4hSEgONQRuTmcHym0qlbu7bCjD0OVUVPlRga/BaX+XCA7LXsygUkoJy43
Y8uJ/3dxbFj3+6OUr0CfVQ06qqPsw9DrhQoHNAerytvRRzo6Q3EN9OUP1eogL85F
sRkH5i9t4520nw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:10 2025 by rpki-client