Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e2038383838.roa
File: 34352e3133332e3131382e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: iDjiBBf5k5GoUFZMjiYxgLE0HNTN9zyQKFv/LHbzhPE=
Subject key identifier: 45:BD:D6:7E:40:63:70:B5:76:7F:49:78:92:BE:43:0B:98:62:14:33
Certificate issuer: /CN=507b9d22a50176c420523574618691e525560fd6
Certificate serial: 42959C6616AE464EB0F19476462EAD7D6C1E5CD7
Authority key identifier: 50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e2038383838.roa
Signing time: Tue 12 Apr 2022 12:51:25 +0000
ROA not before: Tue 12 Apr 2022 12:46:25 +0000
ROA not after: Tue 11 Apr 2023 12:51:25 +0000
asID: 8888
IP address blocks: 45.133.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:95:9c:66:16:ae:46:4e:b0:f1:94:76:46:2e:ad:7d:6c:1e:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507b9d22a50176c420523574618691e525560fd6
Validity
Not Before: Apr 12 12:46:25 2022 GMT
Not After : Apr 11 12:51:25 2023 GMT
Subject: CN=45BDD67E406370B5767F497892BE430B98621433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:76:63:b8:72:0a:fa:31:fc:7c:f5:9c:4d:
8b:bc:1f:e3:d8:26:4e:6c:53:8c:f4:f7:d8:d4:1c:
85:5f:1f:32:6b:31:0b:32:10:7b:33:57:3a:ac:ba:
d4:fe:34:c8:78:4c:1e:f5:be:ee:6c:03:65:d8:32:
63:e1:23:d9:db:58:f1:39:56:79:be:df:c6:86:04:
08:3c:45:12:5e:cf:04:36:d0:66:3f:54:00:9a:8d:
95:cd:90:cc:c9:27:f0:9b:8c:26:b4:cc:ce:d6:c0:
81:e9:fd:de:1d:8b:eb:20:29:5b:20:78:ae:d0:1e:
6a:df:5b:3e:f3:2e:7b:5a:72:f7:c8:f8:e3:7c:7c:
fd:29:ae:41:ce:92:83:13:ef:58:8a:54:17:e0:58:
0f:7a:1c:20:11:23:a0:48:74:e9:b6:4d:d0:fe:3a:
e8:29:0c:16:eb:41:b8:87:38:8f:a8:d3:7d:93:d8:
4e:e3:dc:cb:b9:5d:72:38:87:f5:31:80:9d:f1:1f:
00:23:1a:92:d5:a4:2f:1d:c5:4b:ad:61:06:72:af:
90:05:58:d1:b1:95:f5:59:67:7c:4b:b1:ad:13:d4:
7f:34:b8:28:cf:ac:65:6d:a8:c9:53:01:b8:96:d2:
11:d3:79:23:3d:80:28:4d:41:05:cd:ad:43:c8:9f:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BD:D6:7E:40:63:70:B5:76:7F:49:78:92:BE:43:0B:98:62:14:33
X509v3 Authority Key Identifier:
keyid:50:7B:9D:22:A5:01:76:C4:20:52:35:74:61:86:91:E5:25:56:0F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/32/507B9D22A50176C420523574618691E525560FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHudIqUBdsQgUjV0YYaR5SVWD9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/32/34352e3133332e3131382e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:49:08:9b:e2:e6:45:30:11:99:41:01:35:2e:6e:8c:8a:1f:
a8:89:6a:5b:0b:af:fa:ae:bf:2e:ea:cd:07:b6:03:9b:23:b7:
bf:57:58:64:57:81:16:cc:68:4e:bc:a9:34:04:ad:cc:79:33:
35:44:65:eb:a1:ce:c7:2a:a7:8d:a7:21:89:3a:69:ad:84:e9:
1d:3a:65:44:0a:9a:33:31:87:89:1c:38:a5:9f:a8:34:24:c4:
35:ae:b5:53:cf:4a:0c:bb:d6:0d:23:b5:44:2d:a0:03:4c:94:
2a:b8:1c:05:18:b3:65:05:d7:8f:01:79:04:e3:04:fa:23:8b:
06:ee:c7:58:ae:cf:fd:18:cc:fa:1a:68:e7:a0:d7:38:e4:65:
3a:33:b3:c5:b6:59:1d:dd:2a:32:f7:d3:2b:09:ac:12:92:9d:
dc:b8:27:bb:36:28:ee:5c:ac:73:e5:21:cf:68:9b:7f:0b:4f:
1c:7d:f5:65:86:f9:d0:a1:09:52:e6:6b:b7:d2:1f:f2:af:df:
78:25:af:75:0d:00:d7:75:4b:0b:f0:d1:ee:d1:4e:d8:6d:01:
61:a0:25:57:65:c1:dd:7b:9d:19:08:d1:54:99:4a:c5:f0:b1:
3d:b6:50:5b:79:64:36:3c:a0:bf:c5:52:44:d8:fd:84:a2:ac:
27:16:2c:4e
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIUQpWcZhauRk6w8ZR2Ri6tfWweXNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA3YjlkMjJhNTAxNzZjNDIwNTIzNTc0NjE4NjkxZTUy
NTU2MGZkNjAeFw0yMjA0MTIxMjQ2MjVaFw0yMzA0MTExMjUxMjVaMDMxMTAvBgNV
BAMTKDQ1QkRENjdFNDA2MzcwQjU3NjdGNDk3ODkyQkU0MzBCOTg2MjE0MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDXZjuHIK+jH8fPWcTYu8H+PY
Jk5sU4z099jUHIVfHzJrMQsyEHszVzqsutT+NMh4TB71vu5sA2XYMmPhI9nbWPE5
Vnm+38aGBAg8RRJezwQ20GY/VACajZXNkMzJJ/CbjCa0zM7WwIHp/d4di+sgKVsg
eK7QHmrfWz7zLntacvfI+ON8fP0prkHOkoMT71iKVBfgWA96HCARI6BIdOm2TdD+
OugpDBbrQbiHOI+o032T2E7j3Mu5XXI4h/UxgJ3xHwAjGpLVpC8dxUutYQZyr5AF
WNGxlfVZZ3xLsa0T1H80uCjPrGVtqMlTAbiW0hHTeSM9gChNQQXNrUPIn4NpAgMB
AAGjggHOMIIByjAdBgNVHQ4EFgQURb3WfkBjcLV2f0l4kr5DC5hiFDMwHwYDVR0j
BBgwFoAUUHudIqUBdsQgUjV0YYaR5SVWD9YwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS8zMi81
MDdCOUQyMkE1MDE3NkM0MjA1MjM1NzQ2MTg2OTFFNTI1NTYwRkQ2LmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvVUh1ZElxVUJkc1FnVWpWMFlZYVI1U1ZXRDlZLmNl
cjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS8zMi8zNDM1MmUzMTMzMzMyZTMxMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV2MA0GCSqGSIb3DQEB
CwUAA4IBAQCaSQib4uZFMBGZQQE1Lm6Mih+oiWpbC6/6rr8u6s0HtgObI7e/V1hk
V4EWzGhOvKk0BK3MeTM1RGXroc7HKqeNpyGJOmmthOkdOmVECpozMYeJHDiln6g0
JMQ1rrVTz0oMu9YNI7VELaADTJQquBwFGLNlBdePAXkE4wT6I4sG7sdYrs/9GMz6
GmjnoNc45GU6M7PFtlkd3Soy99MrCawSkp3cuCe7NijuXKxz5SHPaJt/C08cffVl
hvnQoQlS5mu30h/yr994Ja91DQDXdUsL8NHu0U7YbQFhoCVXZcHde50ZCNFUmUrF
8LE9tlBbeWQ2PKC/xVJE2P2EoqwnFixO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:49 2024 by rpki-client on console-ams.rpki-client.org