Route Origin Authorization
$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
File: 3230382e38352e382e302f32322d3234203d3e20323030343534.roa (raw, json)
Hash identifier: jlaV0ITW8XxUp4zMTXEi8Z9yUZgNYuFd83EPimbiU5k=
Subject key identifier: 8A:16:49:50:5C:AC:48:27:D4:5A:7E:D6:59:BF:F8:48:32:F5:E5:EA
Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial: 016A362582D5E649A493B4A38F90FF8FD35991DB
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
Signing time: Mon 14 Apr 2025 10:09:42 +0000
ROA not before: Mon 14 Apr 2025 10:04:42 +0000
ROA not after: Mon 13 Apr 2026 10:09:42 +0000
asID: 200454
IP address blocks: 208.85.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6a:36:25:82:d5:e6:49:a4:93:b4:a3:8f:90:ff:8f:d3:59:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Validity
Not Before: Apr 14 10:04:42 2025 GMT
Not After : Apr 13 10:09:42 2026 GMT
Subject: CN=8A1649505CAC4827D45A7ED659BFF84832F5E5EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:34:18:d8:4c:c8:9c:77:83:c4:5d:72:c6:
bf:44:0e:43:56:b0:d4:19:b6:71:10:6f:e3:37:9d:
b8:eb:be:f3:fc:5f:64:85:15:50:32:d4:27:fc:c4:
48:99:03:9d:ef:91:43:c0:04:71:2c:0a:e9:e8:b9:
97:41:93:b7:50:b5:2a:8d:c0:c6:70:2f:ae:c5:8f:
24:c8:bb:a5:32:12:9f:37:f8:cd:86:e1:f4:8b:ca:
3c:d9:18:ad:66:06:38:01:4e:70:81:79:4a:46:6f:
84:b8:69:b5:f2:b5:63:a8:89:6f:68:a7:2b:06:42:
b7:df:d8:c5:bc:51:a2:1c:66:04:47:66:b6:a0:f9:
35:eb:2b:74:b7:5d:0d:ba:37:da:51:9b:6c:23:6a:
17:24:cd:4b:8e:1a:f1:4b:6d:81:85:6a:82:7e:7f:
f8:e9:fb:6c:7d:1c:c1:7f:9e:3d:e3:b4:a5:25:0f:
22:80:79:a0:a1:4b:dc:f8:62:9d:44:26:61:ac:58:
f9:90:19:e5:52:f4:32:39:2d:7a:ee:be:49:0c:93:
56:e6:f7:65:d0:de:15:2f:9d:f9:33:b6:97:49:c3:
c1:14:5d:41:e6:99:9c:58:2c:a3:48:21:22:4b:3d:
64:07:d3:d3:b4:17:f9:df:f9:da:90:1c:33:78:d2:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:49:50:5C:AC:48:27:D4:5A:7E:D6:59:BF:F8:48:32:F5:E5:EA
X509v3 Authority Key Identifier:
keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.85.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a7:92:98:fa:e5:f7:ea:f1:34:5b:eb:d4:50:fd:56:45:df:
9c:af:9d:18:5b:9c:60:a0:88:fa:38:0e:35:af:c4:51:3d:37:
5b:49:17:76:37:94:65:f8:97:cf:dd:5f:4f:a3:86:33:e5:d0:
6a:cd:50:07:68:6d:95:95:9a:77:3e:d4:91:e0:ad:bf:eb:15:
c1:fb:70:1c:5e:98:59:78:3e:e3:f1:f5:71:0f:71:cb:c1:07:
44:b0:43:bc:7c:f9:ca:68:96:fc:47:ec:1f:81:7f:f5:bd:67:
9f:0a:5f:b9:5f:7d:aa:25:2a:aa:fb:7b:03:ec:d0:e4:8e:6b:
1e:b1:68:ff:0f:78:f0:b8:77:1b:26:52:c6:75:a0:1c:59:fd:
4d:81:5a:1d:1d:bc:77:7f:91:49:5f:c1:6d:5c:a5:7b:12:af:
89:f0:57:9a:fe:de:bb:c0:2f:7b:87:77:69:5f:27:e4:9e:9f:
81:e8:8f:4c:d5:fb:a9:4c:46:08:5b:50:d2:a4:2e:be:f3:a5:
a8:bf:d6:97:bb:56:7b:4d:ab:77:a5:62:31:be:90:80:96:d9:
79:2b:f1:11:15:00:90:b5:71:e1:74:89:32:9c:44:c9:0b:e3:
e3:df:d5:37:e6:ea:d2:c5:ad:eb:6a:7e:2c:0e:a4:78:81:5d:
c5:f9:5b:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUAWo2JYLV5kmkk7Sjj5D/j9NZkdswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk
MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjUwNDE0MTAwNDQyWhcNMjYwNDEzMTAwOTQy
WjAzMTEwLwYDVQQDEyg4QTE2NDk1MDVDQUM0ODI3RDQ1QTdFRDY1OUJGRjg0ODMy
RjVFNUVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw700GNhMyJx3
g8Rdcsa/RA5DVrDUGbZxEG/jN524677z/F9khRVQMtQn/MRImQOd75FDwARxLArp
6LmXQZO3ULUqjcDGcC+uxY8kyLulMhKfN/jNhuH0i8o82RitZgY4AU5wgXlKRm+E
uGm18rVjqIlvaKcrBkK339jFvFGiHGYER2a2oPk16yt0t10NujfaUZtsI2oXJM1L
jhrxS22BhWqCfn/46ftsfRzBf54947SlJQ8igHmgoUvc+GKdRCZhrFj5kBnlUvQy
OS167r5JDJNW5vdl0N4VL535M7aXScPBFF1B5pmcWCyjSCEiSz1kB9PTtBf53/na
kBwzeNI6KwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFIoWSVBcrEgn1Fp+1lm/+Egy
9eXqMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u
Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG
Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi
N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt
NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm
OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBvL0NB
U1RSTy1JTlRFUk5FVC8xLzMyMzAzODJlMzgzNTJlMzgyZTMwMmYzMjMyMmQzMjM0
MjAzZDNlMjAzMjMwMzAzNDM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALQVQgwDQYJKoZIhvcNAQEL
BQADggEBAF6nkpj65ffq8TRb69RQ/VZF35yvnRhbnGCgiPo4DjWvxFE9N1tJF3Y3
lGX4l8/dX0+jhjPl0GrNUAdobZWVmnc+1JHgrb/rFcH7cBxemFl4PuPx9XEPccvB
B0SwQ7x8+cpolvxH7B+Bf/W9Z58KX7lffaolKqr7ewPs0OSOax6xaP8PePC4dxsm
UsZ1oBxZ/U2BWh0dvHd/kUlfwW1cpXsSr4nwV5r+3rvAL3uHd2lfJ+Sen4Hoj0zV
+6lMRghbUNKkLr7zpai/1pe7VntNq3elYjG+kICW2Xkr8REVAJC1ceF0iTKcRMkL
4+Pf1Tfm6tLFretqfiwOpHiBXcX5W5Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:46 2025 by rpki-client on console.sobornost.net