Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
File: 3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: JkbjgwJL889SOJD1CXQUWM9/cHs9nZEmklHR29yU0AM=
Subject key identifier: CA:03:6F:20:59:1F:8C:9A:DC:7F:4A:88:C0:D8:DB:85:E5:44:5A:C8
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 7E5F93B948B4BDFA1197392384150D7B7CD86C1E
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
Signing time: Tue 03 Dec 2024 23:20:35 +0000
ROA not before: Tue 03 Dec 2024 23:15:35 +0000
ROA not after: Tue 02 Dec 2025 23:20:35 +0000
asID: 136792
IP address blocks: 216.145.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5f:93:b9:48:b4:bd:fa:11:97:39:23:84:15:0d:7b:7c:d8:6c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Dec 3 23:15:35 2024 GMT
Not After : Dec 2 23:20:35 2025 GMT
Subject: CN=CA036F20591F8C9ADC7F4A88C0D8DB85E5445AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:b3:41:d6:bd:e5:7d:e0:5e:f3:c0:a9:60:
a4:c1:f1:24:49:2c:9c:a0:3b:26:36:65:5b:e9:27:
aa:e4:9f:05:87:52:51:e3:0f:75:f0:71:cc:6f:86:
c6:dd:0e:6f:7c:84:c0:c4:53:43:d3:32:00:be:3a:
6f:a1:80:89:cf:0f:06:31:39:01:cd:bd:30:c1:e9:
43:27:4e:9d:85:65:08:03:0e:9e:db:28:70:40:a3:
12:06:b5:d0:c3:f9:b6:69:90:77:be:4b:0e:2a:25:
83:8f:b0:f9:3f:55:9e:db:d8:ee:29:37:1f:ad:5f:
0e:d9:75:59:99:31:1c:28:92:b0:e3:f5:6a:33:1d:
38:0e:5b:21:64:e0:cc:46:b2:d2:60:4c:20:d0:3e:
2a:42:e6:1e:28:39:32:f3:77:fe:f1:85:21:e1:91:
d0:e0:15:4c:52:7a:6f:3d:4a:3f:52:8c:a4:6c:83:
b5:e6:4c:0f:7b:8d:f4:fd:21:aa:04:0f:a1:79:43:
18:80:c7:18:1c:e9:a2:4d:ed:c9:cd:cd:36:95:fe:
28:97:c5:28:59:55:f1:88:7a:ed:6b:eb:00:02:7e:
2c:5f:89:2d:fc:ed:41:8a:24:42:cb:e1:8d:86:c9:
f4:da:65:dd:fd:6d:0e:a1:d9:67:41:fd:2d:94:79:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:6F:20:59:1F:8C:9A:DC:7F:4A:88:C0:D8:DB:85:E5:44:5A:C8
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.217.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4e:a4:2a:ae:fa:e7:8d:33:2b:2d:04:6b:5c:7f:4c:fc:04:
dc:64:4f:92:11:16:e7:25:36:c3:22:a7:2d:ed:46:57:fe:63:
82:f9:f5:8a:99:9b:42:c3:7c:6e:42:87:77:e9:7f:71:5b:fa:
02:ae:6b:36:7c:78:12:1d:38:8c:d7:65:b5:34:c4:ab:b8:54:
36:4b:1e:46:3d:e5:fa:96:23:5f:95:0d:a5:6b:02:b9:f0:8b:
46:1e:41:3e:41:22:37:02:f6:f6:46:34:f2:7e:bd:43:4a:22:
9f:a1:9b:12:a4:77:be:3d:23:d2:80:16:35:45:4a:f8:f6:c3:
34:a8:d4:96:4e:80:0c:84:63:b5:c4:a7:02:d8:ea:ed:66:f3:
81:6c:71:b2:d4:e5:9b:db:5f:e1:73:ec:3a:12:45:2d:95:d9:
22:66:81:30:41:7b:15:84:36:b2:7a:f5:a2:76:52:e6:d4:0d:
b5:59:c5:8d:ac:b8:0e:24:4b:38:18:f1:08:f1:ea:b2:39:0c:
23:ca:d4:0f:47:b4:a0:5e:7a:46:01:92:43:5b:e0:b7:7a:4d:
ad:6b:35:38:77:65:7f:8a:02:b9:17:64:47:b3:f8:b3:2f:e4:
59:1f:65:01:4c:e9:44:91:8c:d6:35:21:05:89:82:85:23:96:
5d:e6:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:31 2025 by rpki-client