Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/50/3138352e3232322e34332e302f32342d3234203d3e20313937373330.roa
File: 3138352e3232322e34332e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier: 4iSXjgSzYExG3V4EfgFq5O2XwEqgiNxb/a/sqXfpa70=
Subject key identifier: 6D:5F:B5:8E:A1:EA:B7:6B:EC:E5:DF:EA:36:3F:E9:47:6C:69:44:30
Certificate issuer: /CN=b313ae6f32255d0c6ca43a34ec6e149c0ef58c60
Certificate serial: 0BEC173221CE10285E7348E26F4726A796DDC144
Authority key identifier: B3:13:AE:6F:32:25:5D:0C:6C:A4:3A:34:EC:6E:14:9C:0E:F5:8C:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxOubzIlXQxspDo07G4UnA71jGA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/50/3138352e3232322e34332e302f32342d3234203d3e20313937373330.roa
Signing time: Mon 18 Sep 2023 10:41:38 +0000
ROA not before: Mon 18 Sep 2023 10:36:38 +0000
ROA not after: Mon 16 Sep 2024 10:41:38 +0000
asID: 197730
IP address blocks: 185.222.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:17:32:21:ce:10:28:5e:73:48:e2:6f:47:26:a7:96:dd:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b313ae6f32255d0c6ca43a34ec6e149c0ef58c60
Validity
Not Before: Sep 18 10:36:38 2023 GMT
Not After : Sep 16 10:41:38 2024 GMT
Subject: CN=6D5FB58EA1EAB76BECE5DFEA363FE9476C694430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:1f:6e:a5:b6:24:e4:34:65:7a:77:6b:9e:
91:11:fb:dd:17:3e:56:9c:8e:89:af:c7:e4:37:f4:
76:8a:97:1c:ce:27:ac:a4:b7:ba:59:ec:4d:0e:59:
a4:42:3a:18:a0:e9:38:9a:34:3f:35:06:c6:31:24:
80:88:d1:bd:20:82:8c:cb:5e:0b:ec:30:7f:26:c0:
b8:0d:23:c7:e0:fd:58:f3:7e:2c:f5:cc:34:c2:7b:
d8:cd:19:af:8a:1c:60:8c:4d:a6:b1:c6:e7:57:c4:
45:6d:69:de:cc:ec:68:b5:aa:17:97:72:3d:0f:64:
9d:3a:48:86:83:71:38:46:95:f0:68:26:24:ed:fe:
f4:60:a6:d0:82:85:c9:7a:1e:c4:c7:d4:15:47:5d:
4e:41:5a:8b:20:54:f8:09:85:40:22:17:bd:eb:64:
a0:e1:72:2a:3f:0b:3d:34:db:dd:6e:65:6b:94:d5:
0a:97:6e:2a:90:d9:3d:b6:74:e2:be:32:a7:5c:fd:
52:a1:ba:e6:b1:aa:58:0d:64:83:8f:61:6f:96:bb:
f2:dc:36:a1:ad:91:fb:b2:aa:1d:19:ad:72:31:80:
64:50:fe:0b:31:48:3c:d9:c4:35:de:e7:08:b8:61:
4b:be:ad:3e:e4:7c:6b:a5:48:b5:85:75:0e:1a:f5:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:B5:8E:A1:EA:B7:6B:EC:E5:DF:EA:36:3F:E9:47:6C:69:44:30
X509v3 Authority Key Identifier:
keyid:B3:13:AE:6F:32:25:5D:0C:6C:A4:3A:34:EC:6E:14:9C:0E:F5:8C:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/50/B313AE6F32255D0C6CA43A34EC6E149C0EF58C60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxOubzIlXQxspDo07G4UnA71jGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/50/3138352e3232322e34332e302f32342d3234203d3e20313937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1f:40:30:5f:28:85:8c:2a:58:a6:d7:c5:41:d4:04:8a:c5:
bb:f2:37:a6:fc:56:61:aa:c5:79:c3:62:ab:8d:8e:00:56:36:
88:f3:74:93:e2:a7:6e:03:02:46:f5:72:97:68:3f:c4:23:22:
86:25:60:27:8c:6e:68:92:e8:f5:8e:28:a5:66:8c:8e:1b:67:
3c:bf:49:5c:be:55:4c:7d:92:9d:7a:bb:3d:e3:7a:8e:19:f9:
97:78:df:37:ff:09:f7:67:4a:05:09:bb:73:1e:60:ea:ea:1c:
fa:fa:bf:f9:08:12:c2:22:50:c4:46:1f:c0:5e:85:f8:d2:80:
37:53:ae:b0:6d:d4:1a:a8:45:8a:37:4f:2d:26:70:16:01:88:
86:03:6d:e9:9c:65:e2:24:94:71:75:44:69:5c:d7:8b:81:13:
f9:5f:22:f7:ef:6b:a7:f8:0e:5c:7e:9f:d4:35:fe:b5:c8:49:
77:a2:16:8e:27:92:22:a6:08:60:e8:fc:51:a7:a4:ca:e3:dc:
68:bf:19:30:17:de:bb:7c:d3:bb:53:a7:c7:ca:f3:48:95:29:
79:3f:23:da:53:7b:9d:ee:b9:97:7d:a4:69:43:78:c2:34:b7:
1a:95:bc:2c:de:19:dd:69:54:99:ee:03:9f:8d:f7:8e:de:b0:
84:5a:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org