Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa
File: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=
Subject key identifier: 11:B0:1D:C0:0B:EE:29:2F:1D:54:88:A7:8F:90:33:4B:B0:C8:D3:8D
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 5855418FDB113EDB4E0DEC899778660938E5C63C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa
Signing time: Sat 14 Sep 2024 01:22:30 +0000
ROA not before: Sat 14 Sep 2024 01:17:30 +0000
ROA not after: Sat 13 Sep 2025 01:22:30 +0000
asID: 4785
IP address blocks: 103.56.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:55:41:8f:db:11:3e:db:4e:0d:ec:89:97:78:66:09:38:e5:c6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000
Validity
Not Before: Sep 14 01:17:30 2024 GMT
Not After : Sep 13 01:22:30 2025 GMT
Subject: CN=11B01DC00BEE292F1D5488A78F90334BB0C8D38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:99:9a:cb:0f:2c:b5:88:12:af:90:96:6a:21:
21:95:63:ca:59:a3:9f:0f:4f:39:6b:a6:2d:a1:ff:
b7:58:02:84:dc:d1:d9:36:cf:d0:14:6c:83:73:97:
b6:2f:8b:f6:a3:54:32:b1:1c:f5:fd:9d:0b:f2:f6:
79:ae:9e:e3:e6:18:a7:05:74:df:ba:6c:e7:f4:cf:
6d:61:e6:53:e8:e8:3b:ad:a8:52:f5:71:67:c9:e1:
db:0b:62:65:d4:17:26:32:f3:a9:5e:c4:67:d9:82:
aa:62:96:c1:cb:78:7a:a1:0f:95:1f:bc:ea:a2:6c:
fa:55:df:07:0c:d6:88:9a:ff:11:ce:00:05:e1:08:
b2:42:24:f9:9f:97:bb:74:80:e9:9f:e9:13:45:63:
c2:01:7f:c9:e6:05:76:66:a3:64:0b:3a:27:66:5c:
1f:4d:5b:b6:2f:32:d1:3a:3e:60:22:ff:e0:7d:24:
96:6d:46:4c:89:e5:af:49:25:94:3c:09:17:f5:e4:
f8:d9:e8:d4:22:b3:b4:41:33:e0:7e:8b:55:17:0b:
d6:72:4d:32:cd:4c:aa:19:3f:03:21:ab:9c:d1:86:
b1:c8:34:0d:e9:f4:57:8e:75:7e:ca:02:79:20:84:
c4:24:f5:5f:4a:08:16:53:96:5c:d9:2c:c5:00:b7:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:1D:C0:0B:EE:29:2F:1D:54:88:A7:8F:90:33:4B:B0:C8:D3:8D
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.55.0/24
Signature Algorithm: sha256WithRSAEncryption
24:57:0d:c4:79:18:c0:78:56:57:ff:e9:4b:5c:aa:3f:fb:e8:
ba:0b:8e:ee:0f:7d:09:64:fd:42:0d:b7:d7:bc:7a:b5:1f:4d:
3d:9e:8a:0b:48:53:a7:c8:64:e5:e9:e4:cf:a4:e7:14:54:2a:
d6:0d:8c:3d:de:9b:6e:20:3a:b5:ab:7b:5d:3f:e3:b8:46:f5:
ed:d6:9d:27:e9:81:dc:e0:0d:f7:73:1f:fe:a0:69:60:71:73:
c3:1e:0c:99:0c:55:d9:9f:16:51:b2:df:5c:3e:a7:3e:c5:e1:
c2:83:3f:e0:a6:93:8b:cd:8a:d2:77:ed:95:ab:6b:f7:49:c8:
b7:a5:a2:02:e5:77:95:0b:c1:a4:7a:6d:0f:de:e4:80:09:85:
67:3b:ef:af:10:82:40:65:fc:1c:5a:9b:68:e2:a9:b8:bc:2d:
b3:1d:dd:79:da:4a:e3:cc:34:8b:92:b0:98:ff:7e:20:3a:d7:
2a:de:87:0a:35:a8:60:f9:2d:20:0c:64:dc:8f:40:e5:57:ed:
2f:93:0e:69:08:a7:6c:22:a0:ac:aa:ec:f6:88:20:07:84:1f:
31:fa:d3:5e:c4:30:18:43:e6:ba:6e:79:d2:79:d0:a1:b1:88:
ee:d4:9b:26:32:c1:26:62:a3:76:ae:f4:cb:c5:8a:19:be:b1:
d8:20:7f:f4
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUWFVBj9sRPttODeyJl3hmCTjlxjwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI0MDkxNDAxMTczMFoX
DTI1MDkxMzAxMjIzMFowMzExMC8GA1UEAxMoMTFCMDFEQzAwQkVFMjkyRjFENTQ4
OEE3OEY5MDMzNEJCMEM4RDM4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPSZmssPLLWIEq+QlmohIZVjylmjnw9POWumLaH/t1gChNzR2TbP0BRsg3OX
ti+L9qNUMrEc9f2dC/L2ea6e4+YYpwV037ps5/TPbWHmU+joO62oUvVxZ8nh2wti
ZdQXJjLzqV7EZ9mCqmKWwct4eqEPlR+86qJs+lXfBwzWiJr/Ec4ABeEIskIk+Z+X
u3SA6Z/pE0VjwgF/yeYFdmajZAs6J2ZcH01bti8y0To+YCL/4H0klm1GTInlr0kl
lDwJF/Xk+Nno1CKztEEz4H6LVRcL1nJNMs1Mqhk/AyGrnNGGscg0Den0V451fsoC
eSCExCT1X0oIFlOWXNksxQC3gXsCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQRsB3A
C+4pLx1UiKePkDNLsMjTjTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTM1MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnODcwDQYJKoZIhvcNAQEL
BQADggEBACRXDcR5GMB4Vlf/6Utcqj/76LoLju4PfQlk/UINt9e8erUfTT2eigtI
U6fIZOXp5M+k5xRUKtYNjD3em24gOrWre10/47hG9e3WnSfpgdzgDfdzH/6gaWBx
c8MeDJkMVdmfFlGy31w+pz7F4cKDP+Cmk4vNitJ37ZWra/dJyLelogLld5ULwaR6
bQ/e5IAJhWc7768QgkBl/Bxam2jiqbi8LbMd3XnaSuPMNIuSsJj/fiA61yrehwo1
qGD5LSAMZNyPQOVX7S+TDmkIp2wioKyq7PaIIAeEHzH6017EMBhD5rpuedJ50KGx
iO7UmyYywSZio3au9MvFihm+sdggf/Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:15:33 2025 by rpki-client