Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
File: 3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: eaTtDGcb+wb27Hj39fItyvqxEjLCG351NBRtKKwsIcY=
Subject key identifier: AC:8A:E3:2C:21:59:82:F6:F3:CE:05:16:D9:D7:5B:D6:EA:B2:9E:33
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 6FF9D57F2A6699E63C7265E6B8A34DD559BBC634
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
Signing time: Fri 02 Aug 2024 11:24:27 +0000
ROA not before: Fri 02 Aug 2024 11:19:27 +0000
ROA not after: Fri 01 Aug 2025 11:24:27 +0000
asID: 16509
IP address blocks: 216.145.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f9:d5:7f:2a:66:99:e6:3c:72:65:e6:b8:a3:4d:d5:59:bb:c6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:27 2024 GMT
Not After : Aug 1 11:24:27 2025 GMT
Subject: CN=AC8AE32C215982F6F3CE0516D9D75BD6EAB29E33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:a5:27:71:72:ce:d5:0c:4b:4e:6c:a3:53:
e9:82:fa:2f:ea:a7:ad:b4:da:ad:0f:42:02:2b:c9:
e6:ce:63:76:8a:d9:b0:10:f1:9e:9f:97:e5:35:c5:
04:08:f4:45:10:1a:ed:5f:69:87:8c:a3:a9:2e:62:
30:02:ac:1b:fd:6b:5d:18:95:f8:05:53:a6:4d:7d:
cd:96:6a:44:3e:cd:4e:70:27:38:ad:a2:bf:10:44:
dc:e6:35:78:66:16:65:fa:c9:88:f3:9a:c7:65:c3:
49:3b:d0:8d:b3:b5:bb:5e:c0:f1:76:70:c1:9c:dc:
d1:fc:56:ac:e5:61:0f:1e:de:73:42:46:01:d5:74:
cf:79:72:e5:be:d9:94:c4:02:fc:8e:ec:9b:3e:41:
a2:73:b0:a1:95:aa:18:07:03:77:bd:a1:77:b4:9a:
4c:1e:7c:d3:f8:38:7a:e2:2c:dc:a0:6b:2e:19:c8:
fe:99:71:d4:57:3e:91:8c:22:7d:41:77:0c:47:31:
9c:87:5c:8a:28:3a:d9:78:75:00:88:28:5d:86:5f:
a2:46:8b:68:d0:04:ad:d7:96:56:e9:b5:44:b2:bc:
13:fd:43:ee:00:e0:1b:49:93:89:e2:47:02:63:30:
08:c7:d8:39:36:04:7d:fd:7d:60:fb:f0:ab:d8:f2:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:E3:2C:21:59:82:F6:F3:CE:05:16:D9:D7:5B:D6:EA:B2:9E:33
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:d7:b5:b1:88:61:b0:99:9a:df:a9:0d:a8:8c:01:61:ba:
d2:9b:c7:39:b0:20:3e:99:7b:50:c6:52:df:2d:04:b9:dd:d0:
2b:7f:c1:36:a6:54:c2:1e:37:7a:51:a0:26:fb:3a:43:5f:9a:
80:88:cc:97:89:4f:c4:fa:1f:a9:51:c4:1a:9d:71:46:21:94:
90:54:34:6e:ec:5c:75:2f:c1:ae:64:e1:9a:39:22:2b:cc:48:
06:53:e6:f9:de:a7:f6:10:00:74:44:22:1c:50:91:34:57:b4:
47:ce:d3:94:7c:f5:10:eb:b8:25:20:90:9c:c0:0f:5c:41:4a:
53:ff:60:63:ee:87:6f:ad:b0:01:e1:60:ce:da:ed:ca:d9:21:
03:02:4f:4a:20:53:b6:3b:8a:55:48:1a:a1:61:c6:6d:ea:0c:
24:73:ae:64:65:30:3c:7b:3d:db:51:20:dc:57:9e:8d:e2:13:
24:c1:c4:71:ba:19:5d:41:7e:c6:d2:1b:67:70:df:6f:80:ef:
97:04:8f:0a:f2:68:e8:04:08:8a:e5:1b:93:26:a8:30:cc:8c:
eb:58:35:8d:46:da:40:7b:77:c9:92:58:49:98:f0:d4:07:8a:
56:03:a5:27:85:f0:ec:cc:f6:26:47:ef:e7:d8:47:07:b5:56:
cd:7a:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:00 2025 by rpki-client