Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233332e302f32342d3234203d3e203433393539.roa
File: 3139322e3130392e3233332e302f32342d3234203d3e203433393539.roa (raw, json)
Hash identifier: 0WLUfQ+WQdOmrvmL7LOuvHNyDt9ZKZ+yW7pPNNnNbwM=
Subject key identifier: B3:AD:A2:83:74:37:46:07:63:5A:D7:EC:B5:1C:EE:D1:20:1F:34:6F
Certificate issuer: /CN=c9786d63c87d85d441146724ecfac93527ef6fd5
Certificate serial: 64B9998EB53B3E1FA077598C32A73CC4DA1AB78B
Authority key identifier: C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233332e302f32342d3234203d3e203433393539.roa
Signing time: Tue 11 Jan 2022 12:51:16 +0000
ROA not before: Tue 11 Jan 2022 12:46:16 +0000
ROA not after: Tue 10 Jan 2023 12:51:16 +0000
asID: 43959
IP address blocks: 192.109.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b9:99:8e:b5:3b:3e:1f:a0:77:59:8c:32:a7:3c:c4:da:1a:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9786d63c87d85d441146724ecfac93527ef6fd5
Validity
Not Before: Jan 11 12:46:16 2022 GMT
Not After : Jan 10 12:51:16 2023 GMT
Subject: CN=B3ADA28374374607635AD7ECB51CEED1201F346F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:07:b5:2d:02:7f:c2:a3:7d:90:f9:0d:d9:
46:13:ef:53:29:4c:88:ca:ef:db:84:a0:1f:92:fa:
34:73:8b:5d:22:d1:5c:18:87:f1:b3:5a:0b:83:66:
36:fb:27:dc:33:3a:6c:01:6b:98:26:77:59:a4:65:
46:c8:99:db:52:42:f5:d9:2b:fc:81:92:bd:fa:6f:
82:06:9d:77:c5:54:36:d3:6b:df:49:9f:78:25:c6:
67:bb:43:c1:18:58:24:9a:f6:2c:ed:4d:45:ed:84:
df:9e:b5:7a:71:c2:63:c4:95:9d:20:3b:05:ea:4a:
cf:00:c7:35:8a:37:86:cc:90:0d:e1:c4:6c:c6:0d:
a2:20:ad:ba:69:72:14:7a:f0:b7:ec:b7:fb:21:0a:
a7:5d:1f:67:a9:4e:9e:f3:e1:d2:d1:e9:ef:64:1d:
87:10:a3:c5:4c:1b:8f:39:c6:53:34:ff:6a:d1:ef:
66:e8:e2:0c:b6:2e:71:e5:3c:66:9a:0e:21:76:b9:
8c:9e:8a:fd:9f:e1:09:17:40:51:5f:b4:2c:ea:20:
cf:90:b1:c9:5d:77:0f:df:6a:76:9c:84:ff:e4:f7:
bd:a7:7d:f9:28:7b:b1:ed:48:f6:c4:32:d8:04:7c:
21:53:4e:73:6f:0a:90:67:e1:39:74:91:87:ec:01:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:A2:83:74:37:46:07:63:5A:D7:EC:B5:1C:EE:D1:20:1F:34:6F
X509v3 Authority Key Identifier:
keyid:C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/33/3139322e3130392e3233332e302f32342d3234203d3e203433393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.233.0/24
Signature Algorithm: sha256WithRSAEncryption
71:97:a0:de:83:7c:ad:a6:c1:d5:6c:fa:31:2b:85:2c:6c:f2:
0f:1f:a1:44:51:f1:e2:67:53:49:da:67:8e:d4:bc:59:f3:83:
6b:49:9f:55:46:cc:65:17:6b:f9:de:64:28:2a:1c:d7:21:15:
21:07:1b:e3:71:41:7d:d8:d5:de:76:84:ca:bf:7e:a6:57:5d:
2e:d2:28:3f:61:9e:0c:cf:ae:6f:01:1d:f9:32:23:aa:bc:2e:
05:81:fe:30:47:f0:3e:48:2d:18:60:8b:26:63:bd:82:5e:71:
ac:c6:f2:29:91:6c:59:a9:ca:e1:ab:9c:b9:63:26:f4:0e:eb:
8b:de:de:16:e1:03:a0:ac:11:10:ff:23:6b:a1:3f:ce:ae:47:
5a:6d:8b:63:c2:29:0f:a1:9a:0d:35:86:79:79:1b:74:05:97:
10:0b:64:f2:e1:4f:2d:69:67:8f:e7:dd:e9:da:8d:84:d6:f4:
f5:85:c9:82:bf:37:e7:1f:cb:f2:ab:aa:ad:79:82:42:f7:93:
f9:a2:be:e6:38:5f:b8:71:f1:e4:22:c3:ac:eb:a4:41:7c:d4:
0b:b0:d4:5a:a2:3d:04:e6:7a:3e:74:e4:e0:37:97:26:66:ad:
e4:d8:0e:0c:a9:cb:13:ba:af:95:e1:b1:d3:5e:9f:fc:75:49:
63:1b:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:49 2024 by rpki-client on console-ams.rpki-client.org