Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/31/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
File: 34352e3134322e3136372e302f32342d3234203d3e203233393539.roa (raw, json)
Hash identifier: 8I7DzIKwUxOyaQkRiYh8L2W1va1KOpjN1hiQeiaTHyE=
Subject key identifier: 40:DA:CF:44:74:20:06:D7:F9:C2:0E:72:A5:E6:74:3B:DB:6E:95:A6
Certificate issuer: /CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Certificate serial: 788E0C15593FAEC313102EB859032A836444DA46
Authority key identifier: EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/31/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
Signing time: Tue 11 Jan 2022 12:51:21 +0000
ROA not before: Tue 11 Jan 2022 12:46:21 +0000
ROA not after: Tue 10 Jan 2023 12:51:21 +0000
asID: 23959
IP address blocks: 45.142.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8e:0c:15:59:3f:ae:c3:13:10:2e:b8:59:03:2a:83:64:44:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Validity
Not Before: Jan 11 12:46:21 2022 GMT
Not After : Jan 10 12:51:21 2023 GMT
Subject: CN=40DACF44742006D7F9C20E72A5E6743BDB6E95A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:f8:63:2a:de:f5:9f:67:9a:b4:13:da:83:
ec:3d:7c:a5:8b:21:dd:16:1e:66:b6:fa:27:5f:4d:
15:5a:b6:27:f9:35:dc:e6:ba:98:af:b9:59:4b:b4:
9c:03:8b:d0:81:af:9e:40:16:e5:b6:41:7e:1e:ef:
ad:14:53:89:6d:1e:08:b3:d0:8a:ed:6b:59:03:b1:
1b:2f:ac:26:38:c7:25:44:0d:48:98:ae:d2:f4:f7:
47:38:98:d9:59:7d:4e:2e:6a:c7:f0:42:e5:63:a5:
cf:1d:a0:6b:32:0b:54:df:84:e4:4c:b3:d9:10:57:
c3:19:25:86:89:c2:99:2e:26:eb:a3:aa:7a:39:be:
29:08:cf:40:30:12:c2:17:f7:c4:fd:11:6f:34:89:
e2:1e:9a:f3:f9:3b:db:2b:6a:00:77:3b:9e:91:48:
ab:01:a9:d7:56:d7:ba:7a:2a:40:16:21:04:a6:0b:
7f:ed:b5:85:de:44:f3:eb:69:16:0b:50:5f:6e:29:
53:9b:0c:e0:6f:03:8f:30:98:64:ab:e0:c1:9b:d7:
49:2c:f9:d2:c0:83:0b:fb:2f:59:72:98:da:3e:ee:
98:04:d2:de:bc:ef:1e:a8:da:f3:f2:24:5f:74:76:
64:35:d5:98:da:0c:fb:60:48:65:51:b2:76:29:56:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:CF:44:74:20:06:D7:F9:C2:0E:72:A5:E6:74:3B:DB:6E:95:A6
X509v3 Authority Key Identifier:
keyid:EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/31/34352e3134322e3136372e302f32342d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:18:29:6d:78:5b:64:c7:87:27:a7:5f:32:32:67:e7:82:f6:
da:e1:01:e3:b9:75:cc:ca:d1:18:e6:ec:0b:14:7b:ab:36:0e:
5c:66:78:21:19:bd:ab:f4:58:5d:d3:99:f7:e3:b8:a4:23:21:
13:af:e4:fa:d6:53:52:09:d1:34:4f:ce:54:78:81:af:4d:73:
4c:18:ab:d3:61:65:08:33:df:71:fa:4e:b9:2b:35:e0:c2:48:
7e:af:18:0c:fb:7c:05:a4:be:e0:3c:3b:06:ac:ac:09:d0:d4:
63:73:58:a6:72:2d:e1:20:56:2e:a3:05:05:30:b0:aa:e5:9d:
c4:8f:1f:ad:be:7d:4b:6e:08:34:cf:08:c7:10:82:c3:dc:a6:
9e:c6:6f:88:ca:e5:9d:37:93:8a:a4:30:cb:a0:7a:5e:70:f8:
f2:a2:b5:47:42:dd:d8:9b:44:58:fb:54:ea:a6:d0:bf:e8:ff:
b1:a0:db:51:04:09:5f:e7:82:8d:97:2b:4d:11:4b:68:0c:c6:
55:54:da:e6:87:82:b6:71:be:fc:49:f9:65:5c:3e:e5:df:f2:
69:f9:2f:e5:f9:b5:f1:e5:f9:f7:30:ba:e9:ff:2e:25:87:b3:
74:a3:d6:44:ac:72:6f:8e:f9:ff:9c:40:e4:37:93:1f:ae:e6:
d9:ee:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:39 2023 by rpki-client on console-fra.rpki-client.org