Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa
File: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier: rpG176mq+Hz0ATWW9+e61ZLrSrpzkMO/+wQlXX8v8ZU=
Subject key identifier: C5:44:30:37:69:F0:35:A2:07:F0:27:48:9D:62:94:21:35:B6:62:B4
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 6D997D099919A28404E3D5B7EA56462F7A3D68EF
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa
Signing time: Sat 14 Sep 2024 01:22:25 +0000
ROA not before: Sat 14 Sep 2024 01:17:25 +0000
ROA not after: Sat 13 Sep 2025 01:22:25 +0000
asID: 6233
IP address blocks: 142.147.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:7d:09:99:19:a2:84:04:e3:d5:b7:ea:56:46:2f:7a:3d:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Sep 14 01:17:25 2024 GMT
Not After : Sep 13 01:22:25 2025 GMT
Subject: CN=C544303769F035A207F027489D62942135B662B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:c6:b2:87:6a:52:f1:ca:e6:f9:45:84:9f:
14:9e:27:50:eb:5b:32:02:21:a8:32:1f:f6:64:08:
89:82:23:f2:47:b2:10:d1:32:c4:92:21:d4:ae:8f:
da:64:96:6b:c0:dd:14:ea:3e:6e:1f:f3:ab:39:60:
7f:26:6b:50:4e:c9:fb:9a:bd:e8:f9:0e:b1:87:13:
f2:0a:1f:91:fe:ad:01:be:b1:95:22:8c:90:d0:68:
f5:01:f0:c6:79:3f:d4:12:14:d0:1b:c8:d8:99:30:
86:ac:df:10:4a:b4:cb:da:7b:54:31:79:f7:a3:93:
d6:eb:b2:48:cc:35:13:77:24:00:52:11:76:a2:2e:
88:2f:83:fe:37:63:fe:ec:d5:3c:81:e0:74:36:ed:
72:d9:06:58:9b:42:63:e1:05:6b:93:b7:1b:a6:98:
c0:af:89:ce:54:a4:de:bd:b1:d5:a0:1d:e2:62:11:
cc:a2:78:0b:a5:d4:c4:44:79:9d:79:07:26:e3:59:
62:4c:5f:f2:9b:68:cd:a9:f5:fb:40:41:b2:68:44:
a0:db:0f:8d:08:ab:27:e5:9e:9f:bb:88:ce:c0:01:
be:62:54:bc:d9:d0:97:79:63:86:86:65:f7:b4:6d:
9f:7c:6f:fa:dd:dc:0f:a5:d2:78:3d:8c:a5:03:d3:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:44:30:37:69:F0:35:A2:07:F0:27:48:9D:62:94:21:35:B6:62:B4
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.89.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9d:50:2c:db:2f:87:77:f0:15:87:d7:d9:22:f2:41:17:67:
a8:f8:0a:3a:79:ae:54:6c:f4:be:08:bd:f8:b2:55:03:a4:40:
7e:6c:f8:71:02:7b:e5:ff:84:8f:3e:5f:d0:a8:b3:5e:f6:27:
77:e2:28:f1:0c:25:b9:7c:f6:45:7c:92:74:db:c1:61:f6:28:
12:04:44:30:88:53:73:58:1a:e4:ce:15:f1:f7:25:e4:7c:e5:
3a:4b:d9:36:03:5a:2f:4e:d6:95:da:b9:13:aa:19:85:67:00:
7a:bd:7f:3d:01:68:1b:43:91:fb:ee:de:23:7a:c9:52:00:aa:
33:38:75:5a:88:2d:09:0f:8c:6e:d0:2a:9d:2e:bd:74:42:4d:
31:59:ed:52:85:f5:f0:19:2b:d2:36:7d:91:51:9b:29:ae:ff:
1c:dd:92:df:c2:3b:6b:b6:26:f9:29:7e:43:ee:b8:81:87:1e:
0a:c2:58:7d:19:b3:39:fd:37:8c:15:91:87:c3:81:2b:9c:80:
af:98:85:f2:e5:07:e1:56:30:3f:eb:c5:c5:47:c8:ce:86:82:
d8:1c:d1:42:f1:05:fe:51:2e:b6:4e:34:bc:18:c4:40:0f:13:
a9:39:39:2e:0c:3f:e2:e7:e7:81:f4:23:66:70:95:eb:9d:51:
b0:47:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:07 2025 by rpki-client