Route Origin Authorization
$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33362d3336203d3e20323030343534.roa
File: 323630323a666161353a3a2f33362d3336203d3e20323030343534.roa (raw, json)
Hash identifier: Qp70HoukpCO6OXHIDkPFCfE7PgUl8THgA8NZfPwIx7k=
Subject key identifier: C9:4E:9A:3E:03:F5:AD:49:78:8E:66:10:7E:9D:0A:6E:4B:7C:1E:2A
Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial: 2B4AAB1E949012EB158C149C99D67AAF05F2CB6F
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33362d3336203d3e20323030343534.roa
Signing time: Mon 17 Aug 2026 22:48:08 +0000
ROA not before: Mon 17 Aug 2026 22:43:08 +0000
ROA not after: Mon 16 Aug 2027 22:48:08 +0000
asID: 200454
IP address blocks: 2602:faa5::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4a:ab:1e:94:90:12:eb:15:8c:14:9c:99:d6:7a:af:05:f2:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Validity
Not Before: Aug 17 22:43:08 2026 GMT
Not After : Aug 16 22:48:08 2027 GMT
Subject: CN=C94E9A3E03F5AD49788E66107E9D0A6E4B7C1E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:c7:c7:59:8f:94:55:55:a6:c1:5a:05:a6:
db:99:c2:1b:9c:02:cf:31:17:97:0e:e8:1f:1e:4f:
29:8d:c5:9d:f3:70:6a:1d:22:0a:29:fc:d3:03:1e:
a9:54:7e:e8:2a:7b:ea:a5:ee:bd:af:88:b4:b8:52:
24:ba:0d:02:c8:9b:5a:2b:4b:bb:46:df:14:d4:3d:
98:61:5c:d8:2f:8b:cf:0f:cd:18:3a:ae:7f:a9:2e:
ab:99:d9:f6:e1:55:2f:ad:d9:7b:49:5c:6d:7c:ff:
c0:bc:98:17:57:ef:a0:a5:00:95:4f:37:f6:52:90:
e7:92:2b:86:c1:ea:00:b4:b9:ed:59:44:90:b5:ee:
39:63:69:36:5a:0f:9d:e3:52:2f:01:49:4e:3e:78:
15:17:f4:fc:c6:12:41:57:04:2a:1d:77:79:13:89:
12:a0:8c:21:51:80:76:3f:35:d9:a9:09:f5:f9:27:
8e:01:56:6f:8f:42:39:67:2c:f5:72:d7:83:78:39:
31:b6:2c:2a:55:ab:6e:fc:91:e4:67:08:bf:5a:77:
3b:d2:87:3a:96:d7:ca:23:52:2d:d1:ce:d8:5b:e9:
29:c5:f9:b1:fe:bb:e0:15:f9:92:e4:00:aa:dc:c2:
5a:46:4d:01:fd:8a:66:01:13:5b:09:69:34:88:e7:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:9A:3E:03:F5:AD:49:78:8E:66:10:7E:9D:0A:6E:4B:7C:1E:2A
X509v3 Authority Key Identifier:
keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33362d3336203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa5::/36
Signature Algorithm: sha256WithRSAEncryption
01:9f:90:b1:3d:1f:4b:bc:9c:21:4e:19:68:d5:67:d5:1b:01:
f4:d5:11:5a:96:b1:49:4f:5f:ef:73:2d:42:23:e8:9c:21:75:
c3:f4:7b:24:97:41:28:e3:28:7c:29:c2:a6:c8:0a:77:db:ac:
82:9e:64:c0:91:06:5d:61:a6:58:1a:2e:e5:00:32:0e:e4:16:
63:08:8b:bb:99:41:70:39:2b:de:ab:ac:f1:8c:91:82:46:9c:
f0:cd:97:fe:aa:41:21:91:fb:7e:b8:0d:5e:73:48:b1:ba:1d:
45:64:50:be:ca:b9:3b:5e:4d:4a:ea:84:6e:49:27:f8:73:34:
cc:96:ac:76:fa:ae:55:31:0d:00:8a:5e:1c:5a:1f:74:a4:20:
3e:fc:a2:15:18:14:c9:84:2e:dd:06:80:03:dc:98:49:ae:7c:
5e:57:10:48:b3:0f:37:9a:0c:74:61:fa:a2:47:80:20:06:db:
8f:20:c6:27:c0:ff:df:50:ff:d7:f6:d2:e7:0a:a0:95:c7:77:
f3:bb:39:57:aa:9b:a1:e4:0e:eb:4c:cd:6c:95:61:9c:27:27:
cc:37:00:6c:ed:39:72:c1:be:47:74:85:8a:9c:4d:12:4c:73:
95:f0:26:75:79:be:52:a4:76:81:cc:4d:64:43:fb:90:89:3c:
df:61:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:32:59 2026 by rpki-client