Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/9/323630323a666139343a3a2f34302d3430203d3e203439383637.roa
File: 323630323a666139343a3a2f34302d3430203d3e203439383637.roa (raw, json)
Hash identifier: oTVEAXvlPZf6DO0RvIBtQN/FkweyRcs3tVz7HEasML4=
Subject key identifier: 85:D3:3F:8C:88:61:DA:45:76:F4:80:70:6D:78:57:9C:81:59:5D:16
Certificate issuer: /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial: 3EB8A1D6309695A2F31B1A367A1B00C6A327F5D6
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access: rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access: rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f34302d3430203d3e203439383637.roa
Signing time: Mon 10 Apr 2023 03:31:26 +0000
ROA not before: Mon 10 Apr 2023 03:26:26 +0000
ROA not after: Mon 08 Apr 2024 03:31:26 +0000
asID: 49867
IP address blocks: 2602:fa94::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:a1:d6:30:96:95:a2:f3:1b:1a:36:7a:1b:00:c6:a3:27:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Validity
Not Before: Apr 10 03:26:26 2023 GMT
Not After : Apr 8 03:31:26 2024 GMT
Subject: CN=85D33F8C8861DA4576F480706D78579C81595D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:07:2e:5b:9c:46:03:cf:d0:70:61:91:97:
8e:aa:fa:1b:98:9f:c6:c3:09:dc:76:82:6c:e1:29:
e1:77:bb:b1:06:a5:d5:fc:21:49:57:89:77:0b:11:
ba:1c:99:f3:1d:2e:a5:8d:1c:da:ef:84:9b:1e:f5:
40:75:46:61:4c:6d:ad:bc:71:25:7a:59:0d:50:b4:
78:50:71:d1:c7:c7:ca:ef:48:29:ae:f0:fd:7f:1d:
13:78:f2:ae:eb:98:db:b9:d9:c8:b6:52:c0:05:84:
67:3e:e4:5d:ae:a7:06:29:93:d9:f3:39:fa:90:85:
11:45:bb:20:fd:be:b9:1b:2d:81:90:79:72:ab:8f:
4f:b0:8b:96:6f:11:c2:08:6e:f0:67:91:94:9d:c3:
8e:6e:7f:4c:20:e0:c2:3b:25:eb:70:2c:2e:9f:d8:
d7:57:29:33:7b:0a:f6:a1:bd:50:b5:9a:5d:90:6a:
0a:16:7e:30:ec:50:88:21:b4:10:d9:7b:9b:01:f1:
64:64:4f:60:eb:7e:29:0e:db:56:8a:b0:67:b5:b2:
39:ed:60:f6:40:cc:cc:b8:7d:88:4c:40:47:60:35:
18:be:ae:30:9c:e1:6b:f4:b6:d0:ca:9c:81:b0:9a:
ae:ac:b5:23:85:88:36:30:ae:0a:c9:9b:87:01:5a:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D3:3F:8C:88:61:DA:45:76:F4:80:70:6D:78:57:9C:81:59:5D:16
X509v3 Authority Key Identifier:
keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f34302d3430203d3e203439383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa94::/40
Signature Algorithm: sha256WithRSAEncryption
b4:b9:f9:70:87:e0:16:fb:fa:0d:b1:21:af:74:1c:fa:01:ea:
ec:45:16:4b:90:2f:c3:75:01:eb:57:8f:7d:b3:5d:70:96:e5:
37:cd:44:37:8c:74:c2:2c:b0:26:68:43:d3:1c:52:bd:46:b2:
35:67:90:05:a8:48:f2:df:6f:34:90:de:63:b9:5e:bd:b8:66:
d1:29:b3:09:79:7a:ea:3c:af:61:d4:ac:68:32:a5:66:f6:bc:
4a:3e:c9:07:77:1e:61:94:fb:ac:91:5e:4e:c5:bd:0a:0a:48:
4a:78:ce:a3:10:06:3c:0a:9e:b5:d0:57:07:ef:89:c2:9a:d5:
f3:e4:9e:ed:ad:76:3f:05:dd:7d:a1:f2:4b:0a:5e:ad:52:bf:
a2:83:b1:e8:36:c3:8c:b7:b3:e4:e2:ac:7b:06:53:77:95:c4:
48:bd:88:e2:6b:1a:c2:1d:ba:fb:90:9e:73:75:94:d2:7f:f6:
be:89:5d:4a:3e:56:be:46:67:b2:48:df:ea:65:31:6d:0a:81:
7d:ee:40:22:8b:58:77:73:de:e4:ed:a0:14:ab:e7:03:b3:99:
ed:a7:58:40:6f:c6:dd:fb:53:19:e4:26:fb:8e:2a:f1:1a:10:
7c:77:a8:17:06:93:d1:1f:90:48:48:9e:63:9b:91:de:38:e9:
c9:02:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:42 2025 by rpki-client