Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
File: 3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier: E7BWS9fcmykb5LAaVExEC7h9Gm7EYPwmyXadzyEuF3w=
Subject key identifier: 28:97:2F:29:18:19:86:C8:FE:4D:6F:7D:93:F4:0A:98:90:61:89:E0
Certificate issuer: /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial: 143B493A652272BB5800213E4BA422240F046C40
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access: rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
Signing time: Thu 20 Jun 2024 05:23:08 +0000
ROA not before: Thu 20 Jun 2024 05:18:08 +0000
ROA not after: Thu 19 Jun 2025 05:23:08 +0000
asID: 7719
IP address blocks: 199.189.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3b:49:3a:65:22:72:bb:58:00:21:3e:4b:a4:22:24:0f:04:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Validity
Not Before: Jun 20 05:18:08 2024 GMT
Not After : Jun 19 05:23:08 2025 GMT
Subject: CN=28972F29181986C8FE4D6F7D93F40A98906189E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:81:d4:3c:bb:56:f9:25:31:b8:8c:7d:8f:
72:c9:81:ea:c2:0c:ca:05:18:73:b4:16:9e:01:73:
7f:f5:b9:7f:8e:00:79:f2:b5:3b:93:f6:7a:d5:38:
24:08:8f:01:c8:b4:85:ca:e2:25:16:5a:12:bc:69:
39:2f:f6:6c:54:dc:c2:33:30:1e:e9:46:b3:e7:22:
e1:22:78:68:a4:ba:a3:46:9a:2d:aa:d4:24:e6:a8:
b4:08:a1:54:b2:7f:66:88:eb:42:2f:55:96:f9:f8:
34:b4:40:72:b8:ef:47:cb:8a:f9:b9:b7:de:06:16:
97:42:59:35:dc:fa:32:ab:0e:17:28:64:87:ef:d0:
c4:32:c8:51:75:90:1f:6a:c7:50:71:09:d6:e5:c7:
58:3c:a8:32:f9:42:bc:31:d5:bb:6d:aa:f7:42:1d:
6c:0f:ef:68:18:e2:05:af:7b:bb:94:1d:e9:33:0e:
57:e0:6c:7d:90:9b:e3:ab:5e:84:0e:8c:c6:b3:2c:
e1:4c:ba:81:a1:69:07:bf:86:8b:a5:04:5b:99:f5:
34:5c:62:81:af:9e:e4:13:63:73:dc:08:96:66:5e:
70:35:7d:4b:c2:95:f3:77:d0:55:de:1d:42:a8:f7:
12:1b:8b:1c:31:ff:9c:de:2f:de:3b:fc:83:0e:0e:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:2F:29:18:19:86:C8:FE:4D:6F:7D:93:F4:0A:98:90:61:89:E0
X509v3 Authority Key Identifier:
keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.189.156.0/22
Signature Algorithm: sha256WithRSAEncryption
67:69:3d:27:97:0b:80:56:b1:91:d9:7f:70:6d:08:26:95:53:
3c:39:0f:d7:aa:7d:41:ed:7f:81:2e:88:24:a2:a2:5f:22:cd:
0e:13:b6:d5:1e:31:0d:fa:df:32:d2:01:1b:0c:7c:ee:bf:99:
3f:fe:16:14:87:72:86:6e:4d:dc:ef:37:0a:d0:29:3c:a9:b4:
21:95:fd:8f:22:8b:00:c9:4d:ed:bf:9e:0b:00:ab:64:e8:56:
47:49:8f:58:ee:a8:b3:fe:b7:df:db:6d:ea:67:f2:e2:bd:f9:
7a:73:a1:19:8f:83:92:42:3e:e8:dc:51:e2:f5:c6:07:5b:c9:
97:91:81:84:ad:b2:cc:a1:af:6b:e0:86:a4:87:05:cd:e6:94:
83:74:c9:5b:58:9c:1c:fe:11:6e:9e:bd:5a:d7:f4:9b:61:8c:
a9:c2:a4:59:03:f2:e5:45:08:62:43:ab:b7:57:22:4b:0f:0e:
5b:81:8c:c1:99:78:62:6e:82:cc:f9:05:eb:cf:ee:6e:16:d1:
99:77:a4:8a:21:57:41:16:b8:5d:4b:49:f8:7f:26:b6:27:4e:
8e:20:35:18:c9:bd:67:ca:c5:d4:60:a2:e8:5c:67:f4:bf:a7:
ed:9b:40:4f:68:3d:c5:70:69:63:7c:03:63:ab:6f:b7:7b:36:
cc:11:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:11 2024 by rpki-client on console-ams.rpki-client.org