Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: fU8DC7GOw3DMUjCGvHFMOO/EGIMApR96UzZfn4jQxf8=
Subject key identifier: EF:1A:57:52:2F:FB:8A:D1:4A:CB:E7:41:19:C4:AE:81:4D:16:67:8C
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 46076BC2649E46FD36ACE35C7594696696EB6F87
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 02 Aug 2024 11:24:31 +0000
ROA not before: Fri 02 Aug 2024 11:19:31 +0000
ROA not after: Fri 01 Aug 2025 11:24:31 +0000
asID: 397726
IP address blocks: 216.145.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:07:6b:c2:64:9e:46:fd:36:ac:e3:5c:75:94:69:66:96:eb:6f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:31 2024 GMT
Not After : Aug 1 11:24:31 2025 GMT
Subject: CN=EF1A57522FFB8AD14ACBE74119C4AE814D16678C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:fa:9b:06:08:0e:34:71:84:ee:0c:59:f6:
4a:ce:21:70:2a:0f:87:b1:2f:b9:99:8d:a4:70:97:
e2:9c:0c:d8:4e:ab:bf:10:0d:a2:bd:63:07:a6:25:
d2:b3:4a:a3:2b:af:37:9b:94:d2:d0:55:b3:4b:75:
3f:39:c1:71:75:1a:af:73:79:c0:01:99:a0:13:fb:
b7:bc:eb:d5:f1:35:7a:2c:ca:7a:df:39:7d:af:50:
03:8d:f3:71:27:d9:84:28:00:87:72:3d:10:3c:a6:
e8:4b:03:8a:57:8a:82:37:74:4c:d6:60:36:12:20:
97:90:bd:9c:dc:69:7f:ee:89:96:fa:0a:d7:ec:07:
37:ad:64:05:05:ec:a0:4c:cc:ce:d4:4e:17:31:ec:
b4:b6:df:b0:23:7c:2e:f7:70:3a:db:46:f8:d0:49:
55:10:e3:3a:61:af:20:07:eb:55:bd:0f:9f:58:b2:
27:d4:e4:c9:36:54:e1:0f:b0:43:0c:5f:f6:ff:f1:
a6:35:ef:34:0c:c7:b6:1a:62:d3:0f:90:90:a6:85:
83:a8:86:9d:a8:7f:6f:72:39:eb:9f:b6:27:26:b5:
f8:f9:e0:31:cd:fc:33:a4:49:39:41:e7:7a:b0:bc:
ec:c0:42:55:e8:9a:cd:3d:91:ff:51:e3:bf:01:43:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:57:52:2F:FB:8A:D1:4A:CB:E7:41:19:C4:AE:81:4D:16:67:8C
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.210.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f6:32:a2:cd:37:97:ef:dc:2b:42:e5:e9:f7:a6:1a:5f:c7:
e6:e9:40:b0:90:01:69:ff:a1:2a:c9:19:07:1e:6a:7d:0f:b2:
be:be:dc:02:25:35:c6:9a:c0:f4:86:77:94:45:4b:da:75:68:
f4:64:d9:26:ca:26:72:fd:0b:18:a8:a0:fd:bc:a6:73:91:0e:
fc:dd:4b:f1:f3:3f:d3:be:1e:d7:10:19:a9:b4:b3:51:95:99:
9f:f7:51:e0:40:2c:e4:fb:2d:4b:15:3f:52:42:36:79:4b:52:
5a:5e:da:ed:b3:95:47:dc:3e:3f:ee:7b:c6:4c:c2:0c:fc:7f:
fb:1f:4d:0f:97:4b:cf:d6:38:15:e9:e1:a1:98:f1:b1:f7:5e:
07:78:74:8e:08:af:95:37:04:35:23:ad:2c:ea:80:34:62:60:
26:5f:2b:1a:44:1c:a4:c0:e4:89:cd:2e:c3:59:71:47:bf:c0:
40:26:88:23:c0:a7:fb:80:ad:4c:06:53:e9:17:fc:14:0b:7c:
13:52:39:27:0c:c5:28:25:d0:62:5f:c6:21:1a:b8:ce:5e:99:
3d:a0:c2:0e:f5:23:3f:3c:6f:b6:de:b1:c8:1f:65:8d:b9:25:
1c:9f:40:f1:da:89:ca:8d:10:6a:21:23:2c:13:91:fc:a7:98:
ca:88:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:28:00 2025 by rpki-client