Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
File: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=
Subject key identifier: D9:B3:38:64:99:D7:9F:49:3A:FC:3B:4A:EB:43:DE:76:90:2A:14:00
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 623B96441EB577912EAB26A8C0F4660C756F1BDC
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
Signing time: Wed 18 Dec 2024 11:44:16 +0000
ROA not before: Wed 18 Dec 2024 11:39:16 +0000
ROA not after: Wed 17 Dec 2025 11:44:16 +0000
asID: 8888
IP address blocks: 103.193.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3b:96:44:1e:b5:77:91:2e:ab:26:a8:c0:f4:66:0c:75:6f:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000
Validity
Not Before: Dec 18 11:39:16 2024 GMT
Not After : Dec 17 11:44:16 2025 GMT
Subject: CN=D9B3386499D79F493AFC3B4AEB43DE76902A1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:ac:e4:bb:4d:70:3e:74:f4:96:80:dd:6a:
43:25:3c:96:47:7a:bb:77:aa:06:1f:df:39:ff:64:
fb:60:bc:ad:d5:2f:28:1c:37:d0:f6:59:6a:0b:12:
06:00:29:ae:65:5d:20:1f:d1:64:82:ff:cb:bc:d3:
9f:57:97:46:28:b5:7a:77:12:28:e5:22:2d:b3:24:
b6:cc:53:71:9a:5f:7a:65:06:43:73:2e:47:b4:04:
7d:17:8c:fa:51:cf:a2:5f:f7:3f:e9:f4:8a:38:a1:
2c:4b:96:d3:1d:30:86:ff:9b:2c:4e:dc:3b:4f:9d:
73:c9:48:02:81:db:3f:03:8d:86:3d:e9:a8:9d:b0:
d0:2f:e8:03:f6:de:8b:4e:bb:66:b9:35:fd:a1:72:
95:f6:ad:35:92:74:35:58:28:0a:93:a5:ce:ca:4e:
8f:e1:17:e9:e8:29:51:49:18:57:39:59:97:f1:b7:
2f:9c:65:e3:2f:7d:2f:f0:d0:5e:2e:94:6a:1c:35:
1a:38:44:47:f4:2b:08:34:c3:d0:38:fb:ec:7e:06:
77:d7:34:7c:88:27:e4:1f:ee:92:8a:ce:b0:c7:70:
f1:80:f1:57:43:74:09:30:8a:4e:f9:60:9c:52:a4:
58:e7:c7:14:27:f1:df:2b:a5:73:d5:c6:d0:a8:97:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:38:64:99:D7:9F:49:3A:FC:3B:4A:EB:43:DE:76:90:2A:14:00
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.193.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ef:d1:c9:62:36:53:4e:c3:43:f5:d4:6f:b6:70:a7:75:de:
06:35:ca:72:07:7c:fa:cc:34:b0:04:e8:c9:e9:ae:16:e6:42:
f5:46:67:83:37:3b:79:09:d2:76:6c:7c:2b:ac:c3:2f:bb:59:
87:74:08:91:12:4a:5d:5b:d8:dc:f9:e3:e0:9c:35:e9:4d:74:
d5:b4:0f:6c:95:81:26:61:c0:08:f3:f5:e7:69:20:2b:15:cf:
81:60:96:5e:50:a4:ed:13:7b:3b:75:98:ff:b7:05:79:d3:8b:
49:95:52:9e:09:95:b6:16:2d:6c:e2:10:6e:21:b2:0c:a5:d0:
7a:c6:d0:4c:7b:60:cf:cd:1e:c0:0a:f6:60:59:33:94:c9:7f:
5b:3e:09:a3:31:7d:55:e4:d5:a6:42:29:9d:c2:f7:3a:5e:b2:
36:bf:15:be:1b:06:89:56:a9:d1:3c:90:db:70:5d:a1:ab:a2:
42:9e:bf:40:00:1e:9c:e3:f9:7b:1a:08:98:4f:e8:f7:97:c0:
be:f5:49:5c:7d:37:6b:44:9c:2b:95:de:44:6e:86:72:8b:2e:
b7:4f:11:d0:38:d8:36:22:ee:8c:03:b1:17:c3:c9:7d:c9:8e:
0f:88:00:1c:42:d6:8e:e1:ef:6f:05:33:68:d5:71:38:8f:c0:
16:13:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:19 2025 by rpki-client