Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e203537363935.roa
File: 34352e3133332e3131382e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier: 6ZVKQcEADDcMrNUYEdDcLXmC1GH2mrowP7UValdrmQ4=
Subject key identifier: 13:30:CB:7B:25:62:3B:78:D5:C6:D4:AE:DD:0E:C7:59:63:18:CD:7C
Certificate issuer: /CN=507b9d22a50176c420523574618691e525560fd6
Certificate serial: 64C508206D51D0E8D3F3F3C8AA815903AA079C9B
Authority key identifier: 50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e203537363935.roa
Signing time: Tue 11 Jan 2022 12:51:19 +0000
ROA not before: Tue 11 Jan 2022 12:46:19 +0000
ROA not after: Tue 10 Jan 2023 12:51:19 +0000
asID: 57695
IP address blocks: 45.133.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c5:08:20:6d:51:d0:e8:d3:f3:f3:c8:aa:81:59:03:aa:07:9c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507b9d22a50176c420523574618691e525560fd6
Validity
Not Before: Jan 11 12:46:19 2022 GMT
Not After : Jan 10 12:51:19 2023 GMT
Subject: CN=1330CB7B25623B78D5C6D4AEDD0EC7596318CD7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:cf:8d:f3:01:67:0b:04:b0:ca:1d:1a:92:
da:c7:03:f8:59:40:9f:06:2c:da:2e:f6:da:8a:98:
f3:12:49:c9:e5:03:4f:0d:5d:67:68:ee:77:ab:ff:
8e:2c:d4:01:33:ea:14:de:67:8f:f5:64:6e:c7:b8:
19:43:10:37:21:60:d3:94:af:fe:15:a7:25:28:b5:
ca:00:08:52:9d:df:49:0a:87:83:ea:d7:67:b0:12:
ef:c1:d5:a2:96:20:5a:bc:61:24:d5:7d:9d:7c:17:
1d:a1:e9:a4:46:c4:a7:5b:7f:c2:99:6e:46:a8:35:
fd:90:f7:97:71:1a:93:63:90:0d:5d:45:25:b1:80:
37:98:36:c3:af:d4:35:ca:de:f2:7d:37:55:e8:46:
a1:fd:4a:51:23:80:f5:fc:55:81:8a:5a:9c:fe:2f:
e3:2e:f7:d1:6e:39:d1:a6:10:f1:2b:d1:ea:54:1e:
d3:3d:77:71:45:51:99:3a:5b:2f:38:d0:62:15:f6:
5b:89:9b:67:c0:48:ff:45:94:5a:15:60:22:5b:78:
e9:0e:04:54:17:a1:48:4f:aa:cf:51:25:4f:29:51:
4c:f9:3f:be:bb:32:8c:fd:06:38:d9:a6:c9:2a:e7:
ad:3f:c7:5c:83:3d:db:93:de:3f:f4:3b:f6:9c:de:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:30:CB:7B:25:62:3B:78:D5:C6:D4:AE:DD:0E:C7:59:63:18:CD:7C
X509v3 Authority Key Identifier:
keyid:50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/32/507B9D22A50176C420523574618691E525560FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e203537363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:48:54:73:a1:60:21:c7:ff:a7:91:db:c4:eb:ba:f7:e1:ce:
ea:f0:ed:c8:5f:62:6b:da:37:10:46:64:19:a4:0e:ce:03:3a:
f3:b9:03:a2:ae:9f:7e:0d:a2:29:e8:1d:2c:84:95:fe:e0:91:
da:ed:19:ea:33:aa:3f:01:49:36:15:b7:36:d7:26:73:15:c6:
40:a0:b2:5d:76:25:70:9d:5d:3f:88:5c:d1:90:ad:dd:b0:99:
d5:64:a7:db:e6:dd:03:ea:20:bc:8c:8d:59:9e:4e:40:7f:2f:
40:de:6a:8b:7d:f1:ea:91:d2:29:17:6f:1c:da:1f:b9:cd:50:
ff:b1:73:a7:ae:64:15:8e:bf:63:f8:ca:a0:cb:dc:1d:56:75:
36:bf:ef:16:02:73:b1:a6:a5:78:ef:53:22:75:c8:32:7e:22:
46:a1:5f:90:4a:21:c1:af:b0:16:37:8b:5d:70:9b:ac:ed:8f:
92:45:7f:de:35:57:22:02:f2:ac:b2:ab:15:fd:b4:b0:33:e8:
ab:e2:08:87:34:04:56:60:d4:3f:31:28:de:8e:a8:40:33:d8:
38:0a:74:dd:7e:d3:36:28:c4:1b:4c:1d:29:25:02:4d:a6:d6:
25:83:90:29:dc:7f:7c:ae:5b:3c:70:34:1b:31:ea:a3:80:f5:
06:ab:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-fra.rpki-client.org