Route Origin Authorization
$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
File: 32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa (raw, json)
Hash identifier: NDYxieDC7Gsy6q5MpR1taj+tlIKiOb4vmPrxdcEnJq8=
Subject key identifier: 2D:EE:6B:93:D3:F9:E9:4A:C9:F3:01:8A:8C:2C:42:4B:85:BB:92:4F
Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial: 5ACE017EC860E8CB2AD5611D67F0F81CDDD14D3D
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
Signing time: Mon 17 Aug 2026 22:48:10 +0000
ROA not before: Mon 17 Aug 2026 22:43:10 +0000
ROA not after: Mon 16 Aug 2027 22:48:10 +0000
asID: 200454
IP address blocks: 23.147.168.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ce:01:7e:c8:60:e8:cb:2a:d5:61:1d:67:f0:f8:1c:dd:d1:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Validity
Not Before: Aug 17 22:43:10 2026 GMT
Not After : Aug 16 22:48:10 2027 GMT
Subject: CN=2DEE6B93D3F9E94AC9F3018A8C2C424B85BB924F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:7b:7f:9d:69:2a:c9:e1:fc:47:eb:ae:80:
25:4e:fd:7d:41:fc:9a:a0:70:2d:6d:a1:b7:07:0e:
0e:96:4c:56:d9:03:10:2c:0a:55:38:2c:12:2c:ab:
8e:db:44:5a:13:ec:a8:0a:82:35:45:14:1f:e6:bd:
52:a7:f8:7c:db:64:a1:92:08:68:a2:6b:80:84:31:
24:ee:74:e8:c3:a0:8d:a3:98:f5:7c:42:52:88:f1:
c3:c6:97:95:fd:1f:59:7d:51:fd:57:73:a9:43:1f:
ca:f4:61:a5:f8:3e:ff:e8:e8:0e:a8:d8:ab:83:0d:
8d:a4:c4:05:3f:87:02:a7:aa:52:b2:54:fb:07:02:
4f:12:ee:4e:ac:5b:45:35:fc:a4:8d:00:d4:b0:b9:
17:be:c0:3a:74:32:d4:8c:a0:00:ab:05:6d:89:cc:
7b:8f:a1:ff:75:63:9a:d9:5e:93:eb:aa:66:5e:08:
47:ca:b3:5d:8a:61:de:dd:39:6d:1a:f4:8a:9e:c5:
b4:ee:60:6b:50:de:92:0c:91:70:b5:52:81:fe:6d:
ed:a8:02:34:fd:11:dc:00:bb:af:5b:c6:4c:33:52:
95:35:c2:68:be:9b:6a:70:88:98:31:34:3a:61:1b:
d6:78:ba:c7:a4:f9:a3:f7:10:cd:a2:8c:54:36:89:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:6B:93:D3:F9:E9:4A:C9:F3:01:8A:8C:2C:42:4B:85:BB:92:4F
X509v3 Authority Key Identifier:
keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.147.168.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e2:60:31:dd:3e:f5:61:53:16:25:14:54:35:b4:9c:04:69:
ee:e0:1e:a3:08:7c:62:28:21:ff:26:13:2f:8c:20:b2:e4:db:
a0:d1:00:b0:eb:47:1d:3a:27:75:49:81:2b:5a:b1:58:17:ce:
b6:bd:b5:0e:2c:66:67:98:81:74:34:e6:a4:33:76:27:b7:95:
47:bf:78:75:9e:19:74:81:0a:e4:ff:37:69:f3:7a:98:79:9d:
38:c1:f4:de:4c:4a:a5:9d:d4:72:8d:8b:03:f9:c6:ff:bd:eb:
4a:fa:9e:fa:ec:b6:d3:73:53:45:b9:61:87:8a:e8:d3:cd:af:
43:6f:04:46:02:32:01:35:6b:c4:06:96:8f:99:8a:8a:f3:4e:
cd:29:6d:20:d6:c5:72:cf:84:18:6d:83:39:6a:4a:61:51:ae:
0e:37:cc:20:14:a1:8e:e3:cf:a7:ad:e6:19:a0:63:a2:df:f4:
51:db:ce:17:9a:0f:81:35:fc:16:c1:4d:fc:dc:f7:dc:6a:65:
17:f3:de:d5:46:0b:86:ff:ed:98:d8:2d:3f:de:95:84:bd:33:
16:5c:a5:eb:41:18:78:fb:27:82:59:d3:f5:07:6d:4d:87:9f:
ba:11:e2:18:4f:f5:33:55:0d:ea:99:cb:0e:46:f9:1d:0c:b2:
18:70:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:17:28 2026 by rpki-client