Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233322e302f32342d3234203d3e2034373835.roa
File: 3139322e3130392e3233322e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier: iBFtue1b0xfczjIyjLrqBwciKimFTnl1tO6jnCg++LI=
Subject key identifier: 1D:0F:43:FA:AD:B0:E4:FF:6B:1D:B9:5C:54:74:76:FE:2E:61:FA:07
Certificate issuer: /CN=c9786d63c87d85d441146724ecfac93527ef6fd5
Certificate serial: 7BFE4C782E461C50CF02532BBA67286249D4B5EC
Authority key identifier: C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233322e302f32342d3234203d3e2034373835.roa
Signing time: Tue 11 Jan 2022 12:51:16 +0000
ROA not before: Tue 11 Jan 2022 12:46:16 +0000
ROA not after: Tue 10 Jan 2023 12:51:16 +0000
asID: 4785
IP address blocks: 192.109.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fe:4c:78:2e:46:1c:50:cf:02:53:2b:ba:67:28:62:49:d4:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9786d63c87d85d441146724ecfac93527ef6fd5
Validity
Not Before: Jan 11 12:46:16 2022 GMT
Not After : Jan 10 12:51:16 2023 GMT
Subject: CN=1D0F43FAADB0E4FF6B1DB95C547476FE2E61FA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:a3:05:fd:55:8c:e5:bb:89:02:f7:56:f3:
94:40:32:bd:c7:b4:b0:57:ba:36:c1:e1:cc:7b:d0:
68:fd:1f:bc:03:5e:6b:44:f4:31:d0:36:0c:63:2b:
ec:71:3d:53:53:56:a0:32:93:f3:4a:be:c6:91:60:
11:9b:be:cc:dd:86:14:10:ed:96:6b:6f:22:01:1e:
5d:60:46:f3:a0:a7:7f:81:61:94:4e:d7:4c:df:90:
1b:28:73:89:ef:96:8f:1c:81:ff:42:db:9c:f7:ad:
9d:92:84:2f:fd:ec:ca:78:a3:70:7b:9a:df:c1:0c:
d9:20:09:af:10:68:f5:d3:df:b7:1f:1c:24:89:d3:
2e:71:48:85:46:7e:2a:19:0f:41:5a:1a:60:04:35:
77:bf:06:10:1a:c9:c3:98:e0:93:2b:38:7b:c8:62:
44:d2:a1:ac:b7:26:db:d1:b1:1c:43:a0:fd:d5:cd:
b9:bd:7d:f6:fe:b7:55:c3:32:89:78:e3:9c:d8:bc:
5f:ae:e5:35:6d:cc:09:be:6b:04:23:55:7a:e6:a3:
c4:d9:95:39:43:c5:e7:c2:97:4b:84:b4:7e:bb:f5:
80:0c:d6:63:7b:9a:43:67:7b:37:d6:96:ff:8a:e8:
00:fb:1d:02:38:51:c4:30:75:09:88:ac:6b:d3:d0:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:43:FA:AD:B0:E4:FF:6B:1D:B9:5C:54:74:76:FE:2E:61:FA:07
X509v3 Authority Key Identifier:
keyid:C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233322e302f32342d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.232.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6f:0b:25:d9:b4:7f:55:cf:16:cb:3b:62:95:d3:d2:30:ad:
2e:52:5d:c1:58:fe:f7:d8:f7:d7:12:2c:1e:1b:e7:96:6e:9e:
08:47:22:71:77:db:d6:25:ce:03:ce:95:34:59:12:f6:88:53:
a7:8f:ce:d7:1e:e8:31:d9:09:a2:32:07:73:c8:0a:0f:72:62:
0e:91:75:ab:76:72:fe:15:2d:1c:73:ed:81:8d:fb:9d:3d:b6:
a9:a6:5c:f5:10:40:52:73:5d:cb:74:89:3e:fb:5f:44:0e:72:
45:7f:27:fb:a7:e9:60:62:11:ff:11:99:ae:c4:de:68:8f:44:
28:45:aa:f8:da:08:5d:95:d4:82:08:ea:47:b8:95:d4:30:71:
f5:4a:13:36:ec:94:8b:80:cd:e1:9a:5b:ed:4c:bf:d2:e7:7f:
2b:1f:5e:f3:1f:28:11:d6:60:eb:5c:46:02:20:79:00:d0:8f:
f7:94:e5:aa:50:2f:08:69:c1:52:12:7f:85:50:7f:12:9e:55:
0b:40:38:ac:a8:ff:8a:63:b8:48:50:c7:88:b5:72:24:60:66:
d5:c2:9e:9e:a7:cf:44:97:f4:3c:e1:10:67:e0:81:9e:f7:06:
d3:5d:71:4a:30:5c:00:f0:ce:29:9b:d0:e7:c9:1f:0d:a7:2f:
c8:81:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-fra.rpki-client.org