Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
File: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (raw, json)
Hash identifier: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=
Subject key identifier: FF:63:41:DB:6A:5F:92:38:BA:4B:79:BE:23:75:54:D8:7C:2C:D6:EE
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 4DE928AAE71EA6C897D421BCA685AF8EEB634BD5
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
Signing time: Thu 12 Dec 2024 06:25:11 +0000
ROA not before: Thu 12 Dec 2024 06:20:11 +0000
ROA not after: Thu 11 Dec 2025 06:25:11 +0000
asID: 9312
IP address blocks: 45.124.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e9:28:aa:e7:1e:a6:c8:97:d4:21:bc:a6:85:af:8e:eb:63:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000
Validity
Not Before: Dec 12 06:20:11 2024 GMT
Not After : Dec 11 06:25:11 2025 GMT
Subject: CN=FF6341DB6A5F9238BA4B79BE237554D87C2CD6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:7e:dc:80:7e:74:01:87:c3:6f:be:d0:3c:
61:88:d7:d0:c1:fb:11:67:65:19:34:1c:09:36:91:
cd:15:94:63:6b:9e:10:cf:af:82:07:f3:a9:4c:36:
0d:d0:1e:94:4e:7e:cb:80:e0:86:2c:ae:6e:51:1b:
44:b8:08:94:38:a4:76:cf:2c:1d:ef:59:71:59:69:
cc:c7:22:a9:32:1e:c1:f0:45:4e:d2:6f:34:4b:b3:
e8:0d:50:63:3b:84:d0:1f:bb:8f:78:16:cb:30:b3:
4a:b0:8c:d1:70:14:cf:32:4f:45:41:67:26:a3:03:
79:4b:61:e6:70:a7:f2:3c:9d:b5:22:82:fb:bf:1f:
3d:0d:64:50:3e:df:60:7f:57:4b:a1:47:00:f0:0b:
49:dc:50:9e:7e:43:06:a3:32:60:a0:77:cb:0f:ef:
f4:8b:41:f8:92:e0:be:ac:73:0a:5d:7b:8d:be:b0:
fd:3c:a3:ac:ae:5b:79:7f:7e:6e:31:10:a2:b9:ce:
7b:cb:7b:cb:82:23:6d:1a:82:f1:bb:4f:cc:e0:3d:
66:be:7b:b4:b4:a2:b8:6f:65:d5:81:d6:84:90:b1:
03:f0:a1:55:b3:30:f8:e6:06:0b:62:ed:98:ff:17:
62:bd:cb:c9:6e:ca:60:de:28:1e:9d:41:4e:51:2e:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:41:DB:6A:5F:92:38:BA:4B:79:BE:23:75:54:D8:7C:2C:D6:EE
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.112.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6a:70:69:68:82:21:dc:4d:6f:99:01:bc:4a:99:f2:bd:72:
75:83:f7:32:ef:97:16:57:34:f8:9b:e1:7a:77:de:b1:45:72:
80:06:dc:3b:c5:da:3d:21:38:70:5d:24:75:49:7e:4f:4e:72:
e2:f6:b8:11:6f:e5:dd:da:a1:56:8c:bd:4e:ed:57:58:77:4d:
99:53:20:98:f8:de:a4:27:db:86:d7:08:00:ec:2d:bc:4e:d3:
36:de:56:82:d6:c4:0b:be:40:c5:a6:47:13:23:a4:d1:2b:8e:
91:1e:d7:3c:44:dc:de:06:6d:da:91:bd:af:6b:f0:54:bc:36:
6b:a1:79:17:92:f7:ef:b9:c4:1e:46:95:cd:dc:ea:af:24:ba:
b8:fb:ef:07:d6:5f:ab:aa:e1:41:dd:ad:17:60:86:03:cc:e2:
7f:26:49:e2:ec:d9:f3:e8:f6:10:a3:36:44:e6:5e:38:a7:72:
a5:1d:1a:b7:c0:dd:15:7f:fb:4c:a5:47:96:9d:2c:b4:6e:b5:
9f:68:0d:80:d6:91:82:c5:0d:a9:0f:93:7a:e4:1b:83:7c:96:
ef:f6:e3:23:b3:cf:d4:f1:22:dc:ae:6a:a3:5e:3c:8f:ba:45:
cf:cb:e8:49:32:83:e5:c3:37:f8:27:8d:bc:03:78:9a:2d:d7:
b8:25:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:45 2025 by rpki-client