Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa
File: 3137302e31302e3134322e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier: +eC39Hr7nY+joUMsasNVVkjitCSFFvY6apa4cYz5Tbk=
Subject key identifier: DF:4B:DA:94:06:38:48:3D:25:1B:2C:22:06:19:52:BE:8A:72:BD:64
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 75ABCCD3C7B2C99151039A4ED3797C8CE233F7B9
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa
Signing time: Fri 02 Aug 2024 11:24:26 +0000
ROA not before: Fri 02 Aug 2024 11:19:26 +0000
ROA not after: Fri 01 Aug 2025 11:24:26 +0000
asID: 30031
IP address blocks: 170.10.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ab:cc:d3:c7:b2:c9:91:51:03:9a:4e:d3:79:7c:8c:e2:33:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:26 2024 GMT
Not After : Aug 1 11:24:26 2025 GMT
Subject: CN=DF4BDA940638483D251B2C22061952BE8A72BD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:48:7b:69:69:11:26:ef:4a:f4:4a:c8:07:
ce:fc:d3:8d:00:e0:db:be:9d:e6:32:9e:25:9e:7d:
e8:15:f2:07:8a:dd:fb:09:67:66:52:ba:f4:7b:69:
a7:fb:88:2b:79:6c:1f:ce:df:ad:6a:f8:d0:66:96:
d8:e9:a9:d4:d7:20:78:42:33:2a:6b:b3:61:99:a3:
ce:f5:ca:79:21:c2:5b:47:19:c4:b1:b7:05:d7:34:
bb:dc:7e:60:e7:c0:d4:27:d0:94:fe:d1:5e:61:fb:
90:cd:3e:0a:0f:54:d0:98:f0:c3:13:97:e2:fa:a7:
19:11:46:c2:02:88:05:be:26:58:00:29:4e:34:5d:
06:c3:33:7f:e0:cc:df:90:8d:96:d0:20:61:85:96:
35:3c:31:a4:0b:f5:5b:15:df:7d:f3:ce:c0:c7:6a:
4b:4b:72:bb:38:e0:da:31:c3:26:7f:f1:5a:21:36:
77:88:33:f6:1f:a1:e8:74:1c:0b:33:41:f7:57:80:
c0:b9:0b:ea:c5:34:dd:97:70:34:04:1a:b9:1d:50:
a4:22:95:79:82:6c:af:b8:b4:5f:e8:bc:74:c0:b8:
d0:c1:18:84:d6:74:77:6a:c0:68:3b:09:d1:05:61:
9d:db:1d:98:d8:02:66:35:07:dd:78:f8:36:7e:06:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:DA:94:06:38:48:3D:25:1B:2C:22:06:19:52:BE:8A:72:BD:64
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.10.142.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f4:d5:f7:ab:e3:cc:80:ce:69:49:cd:c3:85:4c:91:d5:73:
9a:7f:00:87:8d:de:e7:a4:2a:e3:d8:e5:09:c4:60:97:57:0c:
1d:c8:d2:80:ec:ba:02:02:07:94:aa:f8:9d:6d:9f:90:be:84:
87:bc:8b:bb:78:49:fa:31:e4:e8:8e:d0:05:4d:84:0b:02:82:
aa:f1:8e:6d:09:08:bf:bd:ff:4c:6d:dc:83:31:80:5d:45:8b:
67:17:35:8e:a1:a5:4a:b2:71:2f:a3:d0:97:54:b9:a4:f0:4e:
ee:6c:40:45:0b:1b:49:7d:e1:27:0b:bc:5d:2a:24:a5:1d:ac:
c6:06:fc:e1:d6:50:28:0d:e3:e0:7d:67:aa:26:f4:34:04:e0:
39:e3:85:53:6b:95:b8:eb:e0:f6:eb:46:ed:7e:07:a9:b3:0d:
28:26:43:88:5f:06:f6:57:93:17:31:cd:00:7d:50:c7:04:dc:
9d:cc:a0:44:fc:f5:63:65:cc:1d:d6:9c:f1:47:ea:1e:2b:82:
df:72:db:3f:d1:aa:96:de:c9:61:26:40:f3:1e:04:1f:6a:aa:
81:50:81:bf:8a:48:8a:86:50:e4:b9:07:33:d7:f9:fe:51:2c:
84:ed:20:80:66:21:e0:1d:bd:ff:a6:14:d2:78:94:d7:39:31:
9d:b7:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:03 2025 by rpki-client