Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
File: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=
Subject key identifier: 3D:DC:80:F5:19:CD:26:65:41:C6:48:56:F5:BE:1E:81:0A:BD:C9:87
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 20C4F5052C3EFCD3732E06190CA57CDC7B179A8C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
Signing time: Thu 12 Dec 2024 06:25:21 +0000
ROA not before: Thu 12 Dec 2024 06:20:21 +0000
ROA not after: Thu 11 Dec 2025 06:25:21 +0000
asID: 3258
IP address blocks: 45.124.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 07:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c4:f5:05:2c:3e:fc:d3:73:2e:06:19:0c:a5:7c:dc:7b:17:9a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000
Validity
Not Before: Dec 12 06:20:21 2024 GMT
Not After : Dec 11 06:25:21 2025 GMT
Subject: CN=3DDC80F519CD266541C64856F5BE1E810ABDC987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:24:b6:63:98:b1:70:a1:79:c1:a4:31:a1:
c2:ce:81:2f:fd:8a:99:55:d1:0a:09:07:c5:f6:0b:
24:c2:e9:76:dc:31:51:e1:a3:d8:f6:a5:26:17:45:
52:34:03:8c:9e:79:e3:b9:d3:57:e3:da:54:2d:f1:
81:bc:6e:59:c2:8b:aa:fb:c5:63:27:cc:c7:83:e1:
43:9a:f7:43:c4:a9:36:60:07:9e:33:94:be:16:c7:
d6:40:68:9a:47:a4:d9:75:a6:61:15:60:55:52:7b:
ae:9e:14:a0:ec:1f:96:d4:64:31:78:3c:42:3b:3e:
c7:4a:14:f1:a7:91:c6:ef:22:64:ea:24:8a:3f:c0:
66:cc:65:e1:92:ce:7e:d9:c1:89:91:3f:da:38:24:
c4:e5:d1:a4:b7:98:38:2f:f4:b0:25:e0:d9:1e:cc:
43:7a:a2:08:7c:1b:a1:06:ab:a0:42:7f:0f:a8:88:
bc:4a:ba:73:13:9f:78:52:08:c3:97:04:00:07:2d:
05:f2:be:90:a7:d0:98:c8:20:8a:13:1a:f7:10:9d:
4e:64:43:47:08:bb:cc:64:72:85:0d:3e:20:fa:f4:
5e:cd:89:de:1a:8d:55:89:53:69:45:7a:31:74:46:
08:c5:43:de:99:e7:7a:7f:28:d5:c4:c2:4f:5c:e4:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:80:F5:19:CD:26:65:41:C6:48:56:F5:BE:1E:81:0A:BD:C9:87
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c0:e5:6d:c2:41:d0:05:15:6a:a7:74:55:85:fa:5e:1f:2d:
2d:c7:0d:e9:86:c5:7c:3d:a5:06:68:01:d2:34:b3:7c:25:4c:
cd:fd:6c:6b:00:b9:a8:44:42:73:20:b6:31:2f:a8:11:bd:38:
75:84:4c:10:20:11:be:7b:30:6a:d2:12:33:5b:27:57:9f:5a:
09:ab:f0:48:48:22:6d:e5:33:c9:85:6a:ac:1d:1f:78:f8:37:
7f:41:79:6c:ea:4a:5e:37:40:c2:f2:5b:01:d3:a4:c8:1d:b7:
81:d2:30:65:04:c3:c4:7e:23:6e:fc:2f:08:32:92:96:15:e6:
e3:77:fd:c1:80:84:05:bb:65:91:41:ad:91:cf:f3:60:29:7e:
28:c4:be:b5:b4:c6:80:52:8d:0f:d3:39:b1:c1:b3:61:2f:94:
cf:a9:0c:f5:31:0e:1b:7b:17:3f:7e:10:78:ba:fc:5b:2a:05:
76:99:9c:4b:7b:a3:ea:dd:d1:81:c9:4e:c9:28:39:82:09:f3:
96:78:00:5b:c3:63:95:17:5a:cf:55:3a:ab:ca:1e:ac:81:3f:
45:b4:ac:db:cf:44:b9:d2:4e:59:8d:14:26:79:75:53:cb:6f:
0b:f0:18:50:b8:10:b2:97:1f:84:42:f1:76:d4:9d:82:49:98:
e5:be:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:33:10 2025 by rpki-client