Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
File: 323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier: RoASqj+5OGItAI+I7t/MefDyWKak3S9D6OlzRqMmnQc=
Subject key identifier: 0D:2F:21:4E:96:03:20:C0:9F:E1:A6:EE:89:13:59:45:FB:E5:02:C7
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 0EBC6C708E3A4C150AD4D0C97EA001CB6EA5DA1F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
Signing time: Thu 18 Jul 2024 09:18:19 +0000
ROA not before: Thu 18 Jul 2024 09:13:19 +0000
ROA not after: Thu 17 Jul 2025 09:18:19 +0000
asID: 30031
IP address blocks: 2620:134:600b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bc:6c:70:8e:3a:4c:15:0a:d4:d0:c9:7e:a0:01:cb:6e:a5:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jul 18 09:13:19 2024 GMT
Not After : Jul 17 09:18:19 2025 GMT
Subject: CN=0D2F214E960320C09FE1A6EE89135945FBE502C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:3f:6d:61:70:0a:03:26:a0:f4:58:65:eb:
85:da:b5:7e:19:a5:98:91:9a:7d:60:06:db:f8:65:
3b:35:42:b4:7d:40:f5:d8:fc:51:cc:f3:fd:63:6a:
7a:1d:4d:db:5f:68:50:81:32:25:28:0d:2f:e0:99:
bc:bd:d3:74:f3:5d:74:55:6f:c8:43:17:4d:7b:fb:
fc:2f:d1:98:67:1f:d8:1a:dc:83:7d:90:b4:5d:d6:
15:75:fb:25:77:0e:69:b7:36:15:d8:29:3f:61:1a:
92:24:4e:07:d2:fe:28:3f:7c:de:73:08:74:2d:72:
95:02:ff:4d:9b:7e:02:8f:6c:18:66:eb:1e:58:5c:
ba:af:40:aa:11:93:b4:e7:d5:c9:2c:54:be:d5:9e:
e0:f6:73:be:b6:5b:18:91:8a:96:fd:26:17:27:97:
29:6a:73:32:4e:f0:0c:db:16:28:60:2d:32:b0:05:
f3:38:0c:48:20:bf:49:3b:83:90:7e:63:20:ff:a9:
54:08:63:4b:d0:63:1a:a8:7e:a7:23:bb:41:68:a4:
18:77:c6:ac:29:c5:55:53:d6:14:d7:90:7a:ed:79:
a0:ba:07:66:ef:70:04:e3:57:4e:98:10:3c:4c:4f:
83:d4:fb:40:1a:6c:d5:a7:4e:4c:dd:71:5c:ee:b0:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:21:4E:96:03:20:C0:9F:E1:A6:EE:89:13:59:45:FB:E5:02:C7
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:134:600b::/48
Signature Algorithm: sha256WithRSAEncryption
15:1d:a0:09:e3:c7:16:85:f2:07:a4:6e:f4:8f:35:2a:4e:8b:
a1:ae:e4:70:eb:ba:10:ed:72:04:59:b1:db:33:b5:99:18:9b:
76:f0:63:fe:5e:7e:87:d7:31:37:4d:89:bc:6f:64:ec:3d:74:
9f:09:6b:b9:77:55:52:03:db:2a:38:a9:28:b9:78:21:29:2b:
c1:48:94:13:91:dc:b4:be:cf:8a:17:70:53:f6:f0:f3:87:83:
d3:31:36:b8:48:88:d4:ac:ad:04:87:58:c0:3f:80:3a:18:9e:
9e:9a:3d:33:df:ad:c1:5d:de:5e:cc:31:70:f5:43:b6:4d:07:
42:fd:27:0f:46:19:aa:de:01:b8:0a:91:05:4c:04:fd:22:c5:
f4:7e:ce:e2:bf:04:19:14:6e:9c:b8:30:ce:0d:cb:c3:a5:48:
94:dc:b1:00:cf:47:55:54:96:8f:4f:15:1d:ee:08:0c:be:32:
b7:65:2b:78:cb:70:b5:49:b2:f7:16:f8:3f:24:5c:c1:b3:26:
c5:a9:cd:53:11:09:89:c2:40:26:b5:95:38:25:fd:21:c7:c7:
d2:84:e4:91:7e:fe:9e:6e:21:3b:41:09:3a:26:f6:48:24:7a:
2a:c5:b2:b8:51:e5:77:c2:c1:dc:37:7d:12:59:e7:f8:d4:a6:
8f:bd:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:20 2025 by rpki-client