Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa
File: 3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier: ZD3VijXCziHZWZXQkHHy0qxRgSvBlzx3fuRd37kt4Kw=
Subject key identifier: 2D:32:D5:2A:20:C5:A7:DD:B3:FE:EB:A1:4D:22:27:D6:EE:C7:D1:7C
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 136D9CDA428D77545DE691A87A5BCC9A97BF14A8
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa
Signing time: Fri 02 Aug 2024 11:24:31 +0000
ROA not before: Fri 02 Aug 2024 11:19:31 +0000
ROA not after: Fri 01 Aug 2025 11:24:31 +0000
asID: 397726
IP address blocks: 170.10.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6d:9c:da:42:8d:77:54:5d:e6:91:a8:7a:5b:cc:9a:97:bf:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:31 2024 GMT
Not After : Aug 1 11:24:31 2025 GMT
Subject: CN=2D32D52A20C5A7DDB3FEEBA14D2227D6EEC7D17C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:ed:2b:75:c4:91:e3:19:49:12:f6:a6:5d:
fd:ec:f4:28:71:02:5b:07:cb:64:44:c5:89:81:2b:
4d:37:65:64:f0:fd:69:9a:19:74:54:ac:89:f1:3a:
1d:1e:00:d9:b0:1b:43:aa:65:8f:73:da:43:0e:b8:
ea:fa:80:44:f5:83:14:f5:08:29:5f:d5:3d:02:1e:
60:4a:0b:66:df:87:6d:83:a4:ad:a9:0d:a6:b1:4c:
62:07:47:7f:5a:93:c5:5d:c0:ff:2e:70:26:2a:a0:
d0:cc:16:61:04:ca:34:e4:96:fa:12:ab:d5:d7:18:
7c:79:e2:1d:db:7b:a7:f7:56:c4:12:53:5f:8f:9f:
3d:34:7d:37:b2:e3:c1:7e:1d:b1:66:d5:37:1d:e7:
57:97:73:b7:dc:17:14:1e:5c:9e:e9:3a:a4:9f:84:
4d:f6:e0:bd:c1:6b:ca:fa:f9:30:80:b3:59:7d:12:
7b:c4:24:50:99:cd:75:d2:c2:94:2d:1c:75:df:0c:
68:bf:59:dc:eb:77:75:b5:2e:b8:15:6a:44:34:f5:
72:57:67:c9:96:99:00:35:cd:ee:fd:d4:c0:60:70:
94:a7:9d:d2:dd:ac:3d:3c:61:ea:b5:a5:d5:de:8b:
d9:06:b1:c6:68:e4:63:86:b7:87:5a:d2:20:bb:66:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:32:D5:2A:20:C5:A7:DD:B3:FE:EB:A1:4D:22:27:D6:EE:C7:D1:7C
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.10.138.0/23
Signature Algorithm: sha256WithRSAEncryption
22:71:ed:1c:74:10:3f:34:8f:c6:9e:69:d8:d1:99:85:19:29:
66:9c:64:23:e0:3a:df:6a:e2:c6:bd:c3:97:d9:ce:9f:a8:91:
18:40:33:67:b2:95:06:3b:69:bb:a0:0e:b6:3a:33:62:66:7c:
21:63:0c:0f:4e:e8:ff:49:f5:8a:d9:40:7d:8b:55:db:b7:2c:
90:9c:6c:d2:85:b1:a3:68:9a:30:bb:d5:2b:85:d5:98:3d:3a:
18:0d:b1:7e:51:49:74:ee:c3:0a:f6:8f:51:6e:f3:4e:1c:53:
0b:6a:ba:ca:47:b7:0f:fe:6e:e9:7c:1e:09:74:e8:a4:b9:20:
b7:1b:f8:a1:70:a7:2b:62:09:6c:1c:a8:78:e8:1a:4c:70:39:
19:b7:34:52:2b:c9:88:09:49:b9:3c:81:73:0b:70:03:fd:ac:
e3:d4:5e:f7:15:e6:94:03:37:54:19:1d:51:62:9a:be:f2:27:
38:9d:2b:95:2e:7b:e5:96:3f:d3:ed:f7:65:48:f1:4e:8b:6d:
79:1e:a8:55:cd:4a:31:4b:7d:61:a4:d6:b0:8f:2e:43:2d:45:
12:d2:1c:40:ca:ff:98:18:cf:fb:5d:e3:69:e5:39:30:1d:06:
d8:b1:8c:5d:7f:d2:31:79:07:5f:f2:76:2d:8e:1b:95:1a:e9:
0e:51:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:46 2025 by rpki-client