Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e20313336373932.roa
File: 3231362e3134352e3232322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: d6ZxCy10HetJmSH00UO7dX9EFj//aYP9LqfUdom/6Uk=
Subject key identifier: C2:A0:5B:C2:5F:B1:27:50:D2:8D:32:76:A8:D6:26:75:74:D9:EB:D8
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 50383BDAE648000652F2F2F0E337BDF91984B2A0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e20313336373932.roa
Signing time: Fri 02 Aug 2024 11:24:29 +0000
ROA not before: Fri 02 Aug 2024 11:19:29 +0000
ROA not after: Fri 01 Aug 2025 11:24:29 +0000
asID: 136792
IP address blocks: 216.145.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:38:3b:da:e6:48:00:06:52:f2:f2:f0:e3:37:bd:f9:19:84:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:29 2024 GMT
Not After : Aug 1 11:24:29 2025 GMT
Subject: CN=C2A05BC25FB12750D28D3276A8D6267574D9EBD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:c1:17:ab:b1:41:85:32:50:4d:56:59:5f:
f9:16:9e:22:ae:6a:ce:ae:55:aa:f7:a8:9c:98:70:
a4:91:74:16:d6:0a:2b:ce:4f:de:6f:ec:05:df:de:
06:8f:4d:25:5a:86:88:02:5a:4d:3a:70:8a:40:fd:
a4:76:64:fe:be:6c:62:28:7c:d4:24:89:ed:a6:f3:
e4:80:7f:19:91:73:bb:01:f9:3b:f9:9d:fe:3c:b6:
0e:a9:72:28:cc:a4:8f:18:e1:4d:73:b6:8d:12:65:
21:f0:bc:c3:5d:71:aa:2c:30:ea:7c:66:89:fe:d7:
5c:87:34:62:f3:53:e1:64:16:ce:a6:c7:ff:f5:d1:
63:05:7e:25:b7:05:91:03:a0:14:a8:42:d2:e5:5b:
99:5f:a9:3d:3e:91:91:df:91:cd:ad:c8:d4:99:cb:
e0:14:97:78:3d:f7:bf:fd:79:3e:8f:8f:af:61:32:
8d:f4:cd:f2:ff:74:73:84:3b:e1:a3:e7:dc:f4:a7:
e0:83:b6:32:c7:02:07:1b:fc:5c:74:cd:28:48:fd:
e6:f7:8b:c9:bf:82:d4:d0:45:23:e0:c1:bd:5d:62:
4f:7f:bb:9b:52:3d:2f:92:be:48:dc:04:9c:f8:68:
8e:f2:7f:72:62:c6:53:c5:c4:d9:11:dd:82:8a:b3:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:5B:C2:5F:B1:27:50:D2:8D:32:76:A8:D6:26:75:74:D9:EB:D8
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.222.0/24
Signature Algorithm: sha256WithRSAEncryption
86:89:5e:57:b0:1b:96:90:f9:c7:3d:54:07:e0:e5:9c:00:84:
e5:9f:bd:04:32:b8:eb:c0:5a:db:48:64:8a:91:53:26:c5:b0:
7d:e8:2d:12:bd:37:65:0d:a4:f7:03:b5:18:90:3f:7c:ba:62:
e0:00:3a:5e:9f:b9:bc:e1:e5:3d:1f:b0:ee:46:5c:d3:a9:67:
9b:a5:dd:ee:fb:a0:cf:cc:86:c5:fb:ab:49:38:ac:4c:f0:ff:
6e:b5:1f:b8:8f:72:51:c7:0e:7f:85:5a:0c:d4:2e:cd:ad:1f:
fa:1d:fc:64:d4:36:4d:35:db:c0:c5:3b:24:a5:e6:02:a0:26:
9b:be:52:b9:3d:58:95:78:db:9b:99:8a:c4:1c:7f:a9:8e:06:
5b:b8:95:bc:7c:5c:8f:1d:55:ef:89:9d:75:8b:da:a8:14:7e:
93:5e:29:07:5b:1c:44:87:58:fe:e8:f0:29:70:1e:f0:3e:1b:
13:d6:7d:df:a4:f7:a2:ad:92:b8:a0:67:f8:2a:c4:8b:c9:e0:
b2:20:cc:df:22:5a:52:7f:f2:f8:ac:ad:d0:5d:f6:84:00:28:
7f:63:d4:ad:52:54:14:37:dd:2a:c4:b7:59:c9:5d:7b:32:68:
ee:63:23:5a:a0:8d:31:2e:c0:61:3b:3d:48:4c:74:00:cf:e9:
65:e7:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:42:44 2025 by rpki-client