Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa
File: 32332e3133392e34302e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier: nBEsej3k9Kg611lHVs9vJb3vIlXi6CoK5GI5GDWw9tQ=
Subject key identifier: 65:AE:E3:4C:5A:9C:74:AD:CA:27:BE:E9:8E:03:96:68:8F:B4:94:0E
Certificate issuer: /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial: 3A49AE2A846DEC104AB6F7DCCDB496A42B41F190
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access: rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa
Signing time: Thu 20 Jun 2024 05:23:08 +0000
ROA not before: Thu 20 Jun 2024 05:18:08 +0000
ROA not after: Thu 19 Jun 2025 05:23:08 +0000
asID: 202736
IP address blocks: 23.139.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:49:ae:2a:84:6d:ec:10:4a:b6:f7:dc:cd:b4:96:a4:2b:41:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Validity
Not Before: Jun 20 05:18:08 2024 GMT
Not After : Jun 19 05:23:08 2025 GMT
Subject: CN=65AEE34C5A9C74ADCA27BEE98E0396688FB4940E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:bd:e9:70:90:8a:5c:a7:2b:09:52:91:cc:
27:78:94:48:0b:c0:f6:c1:37:da:7a:c1:c2:a6:ed:
5d:df:50:1c:47:13:c1:fd:62:9c:ef:98:30:a2:95:
3e:a3:5f:a9:22:f5:6f:e6:ca:b7:82:60:dc:38:2c:
11:b4:09:ca:08:81:23:81:35:22:46:6c:27:96:85:
82:78:e4:91:98:66:55:2a:d1:87:f6:aa:b2:32:62:
30:9e:05:bd:a8:a6:a7:05:18:74:fa:e5:64:4e:47:
36:da:19:c4:85:59:f1:df:59:7a:6f:91:fc:ed:1b:
a2:e2:65:31:53:73:9f:26:aa:e3:11:fe:bb:a0:99:
44:ae:61:d9:cf:dc:59:a6:26:19:9f:90:ad:55:c6:
1a:dc:61:9c:b6:8c:5a:14:13:f9:00:0c:56:ed:8b:
c6:37:a4:f4:fc:52:f4:bd:32:4f:fa:2f:6b:3c:07:
14:6d:c2:19:5a:78:a5:b9:85:12:51:d0:4f:e2:86:
59:66:a0:a6:6f:97:41:f3:62:97:97:6e:03:c0:b4:
15:73:a7:90:f7:12:e5:40:0d:1e:d6:e6:14:46:c0:
32:bb:6d:d4:a7:67:02:d7:de:b0:0a:fc:a1:a1:19:
82:58:53:70:e1:2f:5c:b2:3f:9d:c6:92:34:cb:6b:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:E3:4C:5A:9C:74:AD:CA:27:BE:E9:8E:03:96:68:8F:B4:94:0E
X509v3 Authority Key Identifier:
keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.139.40.0/24
Signature Algorithm: sha256WithRSAEncryption
26:dc:3f:f3:5f:fe:f0:fb:b8:a3:12:ed:75:28:c7:17:29:47:
9e:03:f6:fe:b0:51:c3:56:c6:f1:22:2b:35:8e:b1:77:0d:82:
dd:64:74:d0:84:72:ee:9e:58:ea:59:da:7f:ea:52:85:9c:33:
5d:d7:b5:27:27:4e:d6:bc:1a:91:09:cf:25:4d:54:ef:b5:39:
2c:ef:71:15:65:d0:fb:74:b4:cf:a8:88:0d:27:6c:d4:e2:fa:
25:c1:39:cb:7c:d6:17:5e:9b:bb:8b:4d:2b:3e:d6:00:f5:b9:
59:30:68:34:89:c5:d6:42:c7:fc:a7:3f:b7:f6:f4:ea:c0:04:
98:27:06:10:81:0f:f8:e7:cb:45:4c:6a:62:a8:ef:e0:3b:12:
21:e7:d9:9b:30:a0:b8:68:32:84:94:8d:5d:9b:6c:09:66:89:
6b:56:37:68:ec:7c:96:e3:6c:6a:2f:e1:48:f0:60:5f:cb:77:
10:20:d5:60:79:9f:fd:ad:b4:99:71:9b:d6:b1:70:3e:1d:c2:
5e:f2:ac:21:fe:a5:15:ef:48:46:06:cc:d3:ea:c1:ca:58:86:
88:a9:35:e2:e1:8e:f3:d7:ab:56:5a:8b:a0:f4:82:d7:b8:25:
85:79:b8:7c:c6:e4:69:eb:da:77:43:9a:f3:7f:6a:69:46:d7:
82:16:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org