Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
File: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (raw, json)
Hash identifier: 96o5E3l8VX2A9M6Mv6rN9cqwbqxcVJnLdu+NXHSrwR0=
Subject key identifier: 4A:67:23:29:8C:06:8D:85:CE:33:60:7F:5D:E7:0F:99:6B:65:01:90
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 0EAECD2456CB81A4CF851A3D5972C9834F6A2AB6
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
Signing time: Sat 14 Sep 2024 01:22:24 +0000
ROA not before: Sat 14 Sep 2024 01:17:24 +0000
ROA not after: Sat 13 Sep 2025 01:22:24 +0000
asID: 55158
IP address blocks: 142.147.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ae:cd:24:56:cb:81:a4:cf:85:1a:3d:59:72:c9:83:4f:6a:2a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Sep 14 01:17:24 2024 GMT
Not After : Sep 13 01:22:24 2025 GMT
Subject: CN=4A6723298C068D85CE33607F5DE70F996B650190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:d4:c2:a9:48:17:34:ce:09:34:1e:3c:59:
16:07:1d:7a:1d:f5:e5:f4:4d:19:11:27:53:fb:47:
ec:5d:c7:e8:4a:41:de:e4:55:9e:bc:72:5b:2c:e7:
1c:7d:6a:1c:0c:ba:0a:6d:c3:4a:b1:43:0d:3d:62:
a7:58:b8:1c:82:fe:10:83:74:a6:47:9e:62:6e:d8:
6d:a9:74:6f:6c:74:19:1c:11:c9:3f:5e:a3:b7:fe:
fe:f0:0a:84:08:37:dc:df:9c:23:0e:5c:ca:c6:3b:
c5:a4:83:b8:3b:1c:d8:85:51:41:0d:43:1e:a2:a1:
02:db:89:70:82:c3:a3:62:ad:d1:30:15:ef:b0:d4:
32:51:6f:f7:af:45:65:ed:81:05:e8:18:d5:f2:39:
8e:27:55:85:8e:a1:27:2b:14:03:22:2e:a5:98:71:
62:c3:f4:fc:2d:8e:13:7c:b6:c5:29:92:64:4c:d7:
1b:ad:d9:c5:28:a3:d6:10:a7:f0:df:13:cc:93:8a:
64:4f:e6:24:1d:1d:57:b1:a3:4c:cb:8a:dd:c5:57:
ad:af:fd:8e:f8:4b:04:c5:05:b5:b9:53:be:16:bf:
5c:9e:18:e3:5d:40:97:92:13:2b:59:87:e2:a6:97:
cc:57:fe:73:92:b2:c6:eb:3e:f1:d3:01:3a:a8:c3:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:67:23:29:8C:06:8D:85:CE:33:60:7F:5D:E7:0F:99:6B:65:01:90
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.94.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:3e:cc:40:2c:2a:8b:34:a6:48:c1:6d:29:ce:cc:b4:0d:
5b:bc:e5:d0:30:64:a8:eb:e5:2c:fc:87:93:94:73:79:93:bf:
02:a9:0e:8e:4e:fa:1e:02:35:99:ce:9a:4d:4a:8e:a9:1e:ee:
88:24:07:c6:a0:4b:e5:e1:3a:e0:48:6f:bc:4f:c4:d9:8c:7b:
db:dd:3e:25:75:40:14:57:41:6c:ae:48:95:7b:28:c8:3b:22:
11:03:a7:dc:e0:d3:63:49:f4:7d:52:b5:82:dd:5d:d7:26:98:
eb:e0:ee:f8:67:e8:42:61:6a:e6:20:b3:c6:e2:38:d1:a9:6c:
71:80:40:23:ad:bf:c2:e0:6e:31:ab:47:ef:0a:4f:1d:e7:b9:
12:df:a5:b5:cd:43:f5:a3:a1:5b:cd:e7:54:93:42:be:43:10:
94:76:11:94:cf:6d:86:90:fe:ce:83:4a:7f:28:4c:d6:94:46:
93:54:87:9a:fc:34:70:e9:3a:00:f3:18:ec:6e:9c:67:1b:c3:
41:cf:06:d3:b4:7a:b2:77:28:0a:31:93:82:72:41:0b:b6:8d:
7b:10:96:08:ab:fb:99:2b:d9:f0:83:01:71:b9:fb:ca:32:0b:
47:09:d8:d6:e3:be:22:19:2a:5d:e6:20:04:11:18:cf:34:aa:
bc:d1:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:29:42 2025 by rpki-client