Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa
File: 3137302e31302e3135332e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier: 3KgOKF0wxgED9oDWkQrFbTYHN6qo9PACUIXnsGYNcyM=
Subject key identifier: 69:0C:C1:5B:92:C8:EC:9F:6F:C1:B5:FD:75:2B:A0:E6:E2:B2:D2:05
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 641292A411E090CBCA2F77ED6F91CBDBE949021B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa
Signing time: Fri 02 Aug 2024 11:24:28 +0000
ROA not before: Fri 02 Aug 2024 11:19:28 +0000
ROA not after: Fri 01 Aug 2025 11:24:28 +0000
asID: 30031
IP address blocks: 170.10.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:12:92:a4:11:e0:90:cb:ca:2f:77:ed:6f:91:cb:db:e9:49:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:28 2024 GMT
Not After : Aug 1 11:24:28 2025 GMT
Subject: CN=690CC15B92C8EC9F6FC1B5FD752BA0E6E2B2D205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:a2:c6:75:a5:d1:f4:34:e0:72:4f:e8:f9:
57:14:45:7f:8d:d5:c1:a4:9b:dd:b3:80:c3:44:63:
e2:ca:f4:07:0f:42:1b:7a:4e:08:11:e7:c9:92:07:
b7:8f:e1:f7:ec:6d:59:f7:4a:13:ba:d2:9a:30:ce:
53:3a:ef:aa:77:fc:29:1b:32:e6:b6:df:3d:e4:a6:
cf:51:fa:2d:7f:47:45:33:18:e9:b9:97:8a:3a:36:
54:40:12:a1:b8:2b:fa:25:8f:68:06:fd:12:63:31:
33:a8:b3:76:65:ba:df:7a:86:bb:8b:8b:8d:13:85:
49:ed:50:f9:ff:31:8a:d2:88:49:7f:f6:aa:53:f3:
d1:ab:b1:0f:aa:1f:6a:26:17:cc:3b:13:f6:84:f9:
5e:2a:1e:41:f3:9b:0b:ad:3c:4c:23:e7:96:d2:cf:
8e:3c:64:1b:e0:26:e5:92:58:36:cc:23:df:9c:b4:
2a:fb:16:c7:0b:f5:67:66:0a:cb:13:35:19:19:9b:
15:49:e5:1f:b4:bc:a6:60:aa:96:df:aa:78:e7:0d:
61:f2:41:e5:55:94:65:3f:1c:83:f8:72:48:8c:5e:
0a:c0:55:1f:9c:2f:2a:ca:02:bd:1f:32:02:01:ea:
c3:46:64:79:19:32:7c:4a:d8:51:f1:fe:94:a6:9b:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0C:C1:5B:92:C8:EC:9F:6F:C1:B5:FD:75:2B:A0:E6:E2:B2:D2:05
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.10.153.0/24
Signature Algorithm: sha256WithRSAEncryption
73:79:48:68:b1:91:98:cd:79:e5:2a:5f:36:42:05:0a:ed:4c:
2a:d5:49:09:20:79:63:e5:fd:68:b9:ae:6d:80:56:bd:61:1f:
91:9e:d0:2f:88:a9:d1:b1:2b:de:a4:20:56:de:45:fd:30:ad:
88:37:51:c1:7d:25:c0:8a:3f:99:85:ba:db:0e:58:f9:69:40:
92:c3:8c:b3:9c:b6:42:2a:2e:de:dc:b6:84:ed:bd:c0:c6:b9:
19:23:6f:ef:71:6d:d1:6c:1a:2f:fd:2f:5c:38:d0:14:1e:43:
0d:66:6b:d1:01:f6:c4:fd:b1:26:5d:07:e4:1f:22:a0:30:6b:
01:37:91:d5:58:bc:92:7f:9a:50:67:b9:08:e7:50:09:b0:ff:
2e:f1:e1:8f:c0:f6:12:a8:1b:59:83:56:f7:62:0e:f5:4f:a4:
3b:63:88:4a:ed:c3:52:65:65:ba:61:1a:25:19:37:0a:64:75:
ea:bc:3c:c5:a4:9c:7e:4c:1d:de:c5:70:d7:5f:9c:5a:2a:aa:
2f:fa:e7:39:5c:81:d2:5a:b2:ce:c6:10:22:58:e6:c9:24:11:
68:db:74:78:f5:a9:92:2c:82:0d:6a:42:3f:13:ff:10:a5:36:
d9:55:62:76:52:72:75:e2:6e:97:52:d4:21:38:59:21:13:52:
5a:58:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:35 2025 by rpki-client