Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
File: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (raw, json)
Hash identifier: Zp2dLdflPopZRz2wCBvQ323kQWGGkQirp3/oJFp4gtE=
Subject key identifier: 6F:2F:AF:F4:F9:BC:57:C5:20:5E:A8:3C:C0:C7:7B:B3:4F:A9:AB:F8
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 3D226B9C5484F56B960A2554D27AEA65F02F8387
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
Signing time: Sat 14 Sep 2024 01:22:26 +0000
ROA not before: Sat 14 Sep 2024 01:17:26 +0000
ROA not after: Sat 13 Sep 2025 01:22:26 +0000
asID: 6233
IP address blocks: 142.147.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:22:6b:9c:54:84:f5:6b:96:0a:25:54:d2:7a:ea:65:f0:2f:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Sep 14 01:17:26 2024 GMT
Not After : Sep 13 01:22:26 2025 GMT
Subject: CN=6F2FAFF4F9BC57C5205EA83CC0C77BB34FA9ABF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:20:26:ac:a3:de:2a:6f:5d:df:b9:65:b4:
6e:f0:80:bc:12:69:0c:3a:ec:ea:fe:0e:f9:ba:d6:
32:f1:12:5f:7c:52:74:6b:35:2e:52:6d:97:24:92:
0d:ed:98:e4:c8:1d:28:60:46:9d:4f:5b:30:c9:2c:
c2:74:02:b2:74:f5:8c:d5:c4:f7:f8:bc:af:56:2a:
c5:d6:f8:11:53:0c:3a:90:ea:f7:5f:3e:3e:c1:b3:
d5:72:ff:2c:e9:33:1c:77:c8:cf:76:96:67:23:1a:
3d:7c:d0:81:0f:08:cb:ea:f3:ff:0a:bd:74:39:5e:
18:aa:17:e9:5b:43:06:44:c9:23:b6:a0:c9:59:58:
45:08:af:5a:57:25:90:15:d7:2f:31:7e:1a:d4:8d:
71:b2:83:5a:60:e0:56:87:3a:34:5b:3f:3a:a7:a6:
4e:cb:3a:3e:6d:9b:fb:d0:76:8a:9d:b4:6a:04:50:
70:ea:6a:42:5d:77:2d:3e:c5:5b:61:d5:bf:84:e8:
ec:fe:80:ab:ac:12:76:d0:f9:bb:5a:5a:cc:ab:2a:
d0:2c:23:90:c6:b3:f3:4c:bd:ca:58:63:1f:3e:47:
45:8a:0c:42:c4:83:d8:4f:f7:97:43:fa:f1:a3:18:
63:ee:70:aa:d9:a7:8f:42:fc:14:40:ba:35:9b:9e:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:AF:F4:F9:BC:57:C5:20:5E:A8:3C:C0:C7:7B:B3:4F:A9:AB:F8
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.88.0/21
Signature Algorithm: sha256WithRSAEncryption
04:51:07:8b:ee:06:0d:d9:24:83:21:3c:4e:89:a4:2f:b6:d3:
24:d8:09:cb:07:37:8b:d4:fb:f2:6c:40:4f:2b:02:04:ba:ed:
c0:7d:7e:fe:76:ee:bd:76:d0:21:51:6f:88:eb:22:da:16:1f:
d9:e9:3b:79:56:56:0d:c6:af:2c:89:17:68:92:1c:bb:8c:6d:
71:8d:32:de:69:78:5b:e3:53:d5:5b:a1:53:69:91:24:62:ad:
11:f8:37:e4:ae:04:80:48:d3:39:f6:11:6e:3d:38:95:56:83:
49:43:a6:dc:cb:e7:b0:02:44:5f:a1:73:67:f9:06:d3:85:34:
0a:f8:55:bd:37:6e:66:c5:68:bc:b8:94:ff:a1:40:c2:7b:15:
00:3b:2b:1d:b9:ed:cf:9b:0e:cd:8e:3c:38:09:38:9e:cb:99:
ec:c9:89:d7:93:ae:66:43:5a:0f:2a:8a:8c:c7:ee:36:05:9c:
b7:95:33:e1:bc:82:b0:cd:05:36:e6:d7:2c:df:bd:24:f1:00:
7c:c4:d5:23:0c:21:a9:97:b6:42:e1:d4:f1:40:bb:be:da:10:
b3:2a:8f:f2:30:5c:13:28:3e:b6:51:ab:c2:3b:82:71:2c:2c:
7c:82:45:bf:ec:44:98:00:78:16:85:93:8b:ea:1d:fa:07:8a:
47:27:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:17 2025 by rpki-client