Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/31/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136362e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: m4CXX3nCNuMgEGbrBu9aZnWdqicu8tBa02HOaXsQChc=
Subject key identifier: 79:2C:EB:69:99:81:53:93:1C:99:A5:3E:00:5F:FD:0C:59:BA:9C:6A
Certificate issuer: /CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Certificate serial: 15A872EF28A92CE5399CACDC329743F8CC05E825
Authority key identifier: EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/31/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
Signing time: Tue 11 Jan 2022 12:51:21 +0000
ROA not before: Tue 11 Jan 2022 12:46:21 +0000
ROA not after: Tue 10 Jan 2023 12:51:21 +0000
asID: 23959
IP address blocks: 45.142.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a8:72:ef:28:a9:2c:e5:39:9c:ac:dc:32:97:43:f8:cc:05:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Validity
Not Before: Jan 11 12:46:21 2022 GMT
Not After : Jan 10 12:51:21 2023 GMT
Subject: CN=792CEB69998153931C99A53E005FFD0C59BA9C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:97:21:28:ea:99:5f:6d:81:d7:2a:d6:b0:
fb:1b:9e:bd:fb:e4:a2:db:ad:06:72:23:c9:ea:7b:
5f:87:28:d1:b8:48:3c:62:15:cd:1d:00:f0:e4:b0:
84:33:e2:1e:78:3b:56:8a:48:8d:53:93:4c:c8:84:
74:d6:d5:ac:ea:74:cf:f8:1d:d2:eb:a6:dc:76:a5:
d7:d0:95:09:80:23:ac:5b:ca:d6:b7:44:9d:df:1d:
99:98:19:4b:d7:13:43:bd:00:bf:3a:d9:1a:18:73:
73:67:a0:02:76:57:fe:72:ca:e3:aa:08:4b:d1:2f:
be:b4:f4:2c:73:a7:5d:4e:6a:09:52:a7:17:9d:21:
c7:a2:dd:72:5c:ef:7d:3b:52:71:c6:da:b2:5e:f7:
0f:31:1c:f6:33:ab:34:f6:3b:c7:36:f5:6e:06:dc:
68:c0:d2:5d:71:c0:30:b6:c1:10:96:7e:d8:70:b5:
3a:d8:98:c3:2d:24:e6:7c:93:55:86:f7:8d:cc:88:
00:f6:5f:4c:e3:85:b4:b2:0a:27:ec:aa:5a:dd:5a:
27:86:44:b9:30:31:1c:6d:c8:6c:3b:ca:bb:c2:9b:
0c:c3:74:c5:74:bf:96:02:22:ce:14:3c:35:14:d2:
31:9f:b9:85:f4:a8:2e:34:2c:52:bb:c7:e2:e5:bb:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:EB:69:99:81:53:93:1C:99:A5:3E:00:5F:FD:0C:59:BA:9C:6A
X509v3 Authority Key Identifier:
keyid:EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/31/34352e3134322e3136362e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.166.0/24
Signature Algorithm: sha256WithRSAEncryption
31:dd:8d:6f:f9:27:a5:c2:8b:85:77:14:fc:54:12:08:ad:12:
a2:91:b6:e2:fc:81:52:ca:48:71:17:5c:ae:0d:2e:46:0e:ba:
b3:15:9a:a0:c0:29:bd:59:d5:b6:ff:c7:6f:4b:6a:5b:6a:ef:
ea:82:66:2a:5d:13:81:80:bb:5c:a6:d8:e8:bc:5f:ef:bd:74:
1d:30:e4:82:6f:31:6c:0c:c6:e9:d5:9b:fd:da:8a:1f:80:68:
bd:d2:1f:06:bb:6f:24:df:b4:02:37:d6:3e:73:6c:b3:7a:24:
9e:c2:b3:be:ea:57:bf:3e:29:e6:32:8f:00:57:23:47:a9:43:
84:9e:3d:e2:6f:b6:60:92:1e:ed:e6:e2:66:7e:36:e1:4e:21:
29:99:f3:15:4a:fc:a5:ee:6b:f0:64:2a:f4:62:d3:f0:c6:ce:
de:7f:79:95:59:5c:a0:ac:d9:9e:e3:42:e6:43:cd:66:78:c2:
25:a5:c4:67:10:80:59:4e:31:b8:1e:29:ab:fb:1d:25:02:58:
eb:f6:ff:7f:30:a4:d4:f7:1b:ea:09:ec:6b:3d:68:3e:db:4c:
74:44:d9:d4:da:55:e5:a8:b4:f3:23:38:ef:fc:e6:fe:c4:79:
cf:25:05:b5:84:25:25:fd:ea:9b:02:70:2e:2f:de:d7:c6:b8:
12:d7:15:21
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUFahy7yipLOU5nKzcMpdD+MwF6CUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIzNDhhNGJkNjI0MDlkYzhhOWNkZWYzM2Q1ZjM0YzMz
NGMwYjE1NjAeFw0yMjAxMTExMjQ2MjFaFw0yMzAxMTAxMjUxMjFaMDMxMTAvBgNV
BAMTKDc5MkNFQjY5OTk4MTUzOTMxQzk5QTUzRTAwNUZGRDBDNTlCQTlDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgN5chKOqZX22B1yrWsPsbnr37
5KLbrQZyI8nqe1+HKNG4SDxiFc0dAPDksIQz4h54O1aKSI1Tk0zIhHTW1azqdM/4
HdLrptx2pdfQlQmAI6xbyta3RJ3fHZmYGUvXE0O9AL862RoYc3NnoAJ2V/5yyuOq
CEvRL7609Cxzp11OaglSpxedIcei3XJc7307UnHG2rJe9w8xHPYzqzT2O8c29W4G
3GjA0l1xwDC2wRCWfthwtTrYmMMtJOZ8k1WG943MiAD2X0zjhbSyCifsqlrdWieG
RLkwMRxtyGw7yrvCmwzDdMV0v5YCIs4UPDUU0jGfuYX0qC40LFK7x+Llu5ZrAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUeSzraZmBU5McmaU+AF/9DFm6nGowHwYDVR0j
BBgwFoAU6zSKS9YkCdyKnN7zPV80wzTAsVYwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS8zMS9F
QjM0OEE0QkQ2MjQwOURDOEE5Q0RFRjMzRDVGMzRDMzM0QzBCMTU2LmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvNnpTS1M5WWtDZHlLbk43elBWODB3elRBc1ZZLmNl
cjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS8zMS8zNDM1MmUzMTM0MzIyZTMxMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzMzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtjqYwDQYJKoZIhvcN
AQELBQADggEBADHdjW/5J6XCi4V3FPxUEgitEqKRtuL8gVLKSHEXXK4NLkYOurMV
mqDAKb1Z1bb/x29Laltq7+qCZipdE4GAu1ym2Oi8X++9dB0w5IJvMWwMxunVm/3a
ih+AaL3SHwa7byTftAI31j5zbLN6JJ7Cs77qV78+KeYyjwBXI0epQ4SePeJvtmCS
Hu3m4mZ+NuFOISmZ8xVK/KXua/BkKvRi0/DGzt5/eZVZXKCs2Z7jQuZDzWZ4wiWl
xGcQgFlOMbgeKav7HSUCWOv2/38wpNT3G+oJ7Gs9aD7bTHRE2dTaVeWotPMjOO/8
5v7Eec8lBbWEJSX96psCcC4v3tfGuBLXFSE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:29 2023 by rpki-client on console-ams.rpki-client.org