Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa
File: 32332e3133392e3232342e302f32342d3332203d3e2030.roa (raw, json)
Hash identifier: u8xlzuzua4CN2Me550uGshzvJJVsIpxzXB5yA4k+kM0=
Subject key identifier: 57:9B:FD:72:99:4A:FC:61:27:F8:9F:4C:55:FC:9D:36:A5:ED:36:E7
Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial: 287FE34C7AD69C24B2E3305CE7C86F0DF2614AFF
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa
Signing time: Thu 02 Jan 2025 15:44:54 +0000
ROA not before: Thu 02 Jan 2025 15:39:54 +0000
ROA not after: Thu 01 Jan 2026 15:44:54 +0000
asID: 0
IP address blocks: 23.139.224.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7f:e3:4c:7a:d6:9c:24:b2:e3:30:5c:e7:c8:6f:0d:f2:61:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Validity
Not Before: Jan 2 15:39:54 2025 GMT
Not After : Jan 1 15:44:54 2026 GMT
Subject: CN=579BFD72994AFC6127F89F4C55FC9D36A5ED36E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:17:f5:60:dd:ca:f8:29:96:bc:5c:b8:2b:
3a:f0:5d:45:e3:71:29:26:fb:69:b9:91:97:d3:9d:
12:0a:14:6c:93:3d:5b:3f:58:c9:fe:04:f9:49:5a:
c0:fc:0b:e5:3b:18:24:ed:e0:f9:41:60:d5:ab:da:
b5:d0:0b:e6:e6:64:12:cc:34:87:e3:36:cf:f1:ec:
6f:db:12:c4:07:f3:ce:bf:b5:a9:61:d1:cc:5f:6a:
b8:f8:52:f7:dd:f9:f0:81:cf:ff:30:a6:81:f1:d0:
03:76:a3:b6:85:7f:74:80:83:21:89:0c:e0:fa:36:
c2:fe:63:4e:b6:10:45:46:d5:2b:67:3a:3c:e2:dc:
1c:99:fd:63:24:65:8d:87:fe:ac:56:6a:19:d6:14:
e4:84:50:21:23:06:87:fe:87:01:d0:81:27:84:84:
44:53:8e:8a:75:3f:65:98:8d:1a:12:02:02:d6:32:
7a:b0:c3:a5:c2:35:a3:34:18:c0:78:91:09:44:3e:
20:05:99:fd:6d:be:8f:f9:63:6e:ff:fd:93:58:8e:
1a:21:cd:bc:a6:c5:ab:17:dd:b7:54:96:a7:48:0f:
c0:79:6e:58:89:e8:0c:22:1c:ab:26:b7:ab:c7:44:
f3:6c:4d:9a:47:50:9a:97:2d:cc:f7:3d:b2:11:84:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:FD:72:99:4A:FC:61:27:F8:9F:4C:55:FC:9D:36:A5:ED:36:E7
X509v3 Authority Key Identifier:
keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
22:42:d1:0a:07:5c:19:a8:c7:21:2e:40:12:26:f5:4e:89:2b:
cd:db:7b:db:d6:2e:d2:6f:69:51:87:0c:ee:b8:53:c1:42:98:
09:79:15:94:76:74:d2:98:50:1c:9d:ad:19:bd:9d:88:53:3e:
95:01:12:bb:76:0a:2c:de:6a:7b:1e:08:f1:a8:89:e2:82:a3:
cd:24:db:8f:d6:64:57:71:14:74:14:ec:20:35:a4:5f:7e:f3:
37:fc:e1:82:f9:0f:ea:c4:3d:97:a1:1c:b1:e4:2e:3b:f8:b3:
5a:2d:0a:0f:9d:f7:b4:20:4c:6e:7e:9e:b5:89:e8:3f:36:03:
78:a7:af:1b:80:f8:08:a5:da:53:0e:ef:5d:eb:11:96:59:20:
a8:d5:69:57:99:00:f7:29:c2:e5:8b:ae:fd:92:cf:ce:b0:49:
e6:1c:e7:e1:31:f5:d8:ca:4d:73:e8:44:78:af:5f:47:18:a0:
42:a5:fe:ec:f3:c5:f7:1e:96:00:a5:ab:77:9d:0e:2a:95:d2:
eb:76:e0:63:bf:63:bb:eb:57:65:91:35:94:a5:2b:55:21:8b:
93:22:e1:c7:3b:75:bc:87:88:2a:c6:e7:c9:dd:cb:94:1c:ec:
08:ba:47:e8:4b:70:e3:56:37:65:23:ae:10:f7:8d:4e:b0:9a:
04:50:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:37 2025 by rpki-client