Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
File: 3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: P5VZAY4/E/pdCZw/PxdExluyjrPQl3ZW9m54Jl17PV8=
Subject key identifier: 74:78:F5:72:48:51:B6:8D:E7:84:55:D4:E7:48:BC:EF:AD:1D:88:EA
Certificate issuer: /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial: 4FFBA8318D6497F5F5B486BC502E12BFCD0F2652
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access: rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
Signing time: Mon 07 Oct 2024 10:03:12 +0000
ROA not before: Mon 07 Oct 2024 09:58:12 +0000
ROA not after: Mon 06 Oct 2025 10:03:12 +0000
asID: 945
IP address blocks: 165.140.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fb:a8:31:8d:64:97:f5:f5:b4:86:bc:50:2e:12:bf:cd:0f:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Validity
Not Before: Oct 7 09:58:12 2024 GMT
Not After : Oct 6 10:03:12 2025 GMT
Subject: CN=7478F5724851B68DE78455D4E748BCEFAD1D88EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:e4:ba:a4:f1:96:e1:39:b0:aa:88:f5:d9:
b3:23:c1:fb:b5:71:82:13:02:4b:25:4a:9d:15:f9:
b0:33:5c:c6:ab:ff:7a:a9:89:9c:b1:81:02:c6:cc:
24:a9:4f:f7:9b:b3:a5:6a:02:fe:92:18:ad:e1:ed:
90:82:37:76:f4:79:3f:03:9d:a5:a4:61:14:e0:5a:
c7:26:0f:00:52:c8:90:53:95:64:41:7b:ff:1f:37:
26:f3:ef:6a:f4:14:a4:e9:ac:6d:a7:ef:98:5c:0a:
33:a4:74:4e:9a:b1:9b:e8:b5:41:c9:79:a6:c2:23:
8b:d8:9a:05:3c:a7:af:e5:99:cd:32:42:ce:cd:7a:
46:b3:d7:18:87:a1:d0:c7:5a:c1:52:c6:74:2b:b0:
5c:38:2e:d1:96:f6:6d:93:43:c4:3e:8a:c6:0a:c7:
a3:bd:1e:19:21:df:97:1f:27:0e:3b:e8:3e:53:49:
9c:a7:47:ea:bf:44:13:12:8a:92:d7:f8:2f:e6:f6:
41:5b:08:79:38:64:db:3f:8a:26:63:74:46:b7:2f:
b0:ed:28:ed:6e:0f:29:c3:9a:2b:21:11:eb:1c:3b:
d5:02:a2:73:2b:3d:34:8f:e0:d9:7d:d8:74:d2:54:
f2:f9:e0:04:6d:50:8d:54:23:d7:b5:1f:2f:ea:8c:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:F5:72:48:51:B6:8D:E7:84:55:D4:E7:48:BC:EF:AD:1D:88:EA
X509v3 Authority Key Identifier:
keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.142.0/24
Signature Algorithm: sha256WithRSAEncryption
95:53:3f:60:d4:35:71:7b:35:ac:70:b6:a4:26:f9:3f:ad:06:
b7:32:67:d5:6a:04:89:01:22:7d:85:b9:ea:5b:cd:e4:b0:b7:
f9:5b:e1:d7:7b:e8:41:37:04:49:4f:b4:52:c6:bc:3b:7f:2c:
94:56:39:77:a8:0a:68:9d:ff:b6:63:32:e8:fa:64:70:74:ce:
a6:4d:d9:54:a2:f9:f6:bb:d5:88:cd:23:dd:f2:9d:7e:00:e2:
e0:7e:81:60:27:46:df:10:cd:6a:85:dc:b0:12:64:68:19:46:
72:b6:c5:b1:06:84:ca:88:91:35:87:ea:6e:c1:a4:50:ac:0c:
db:36:dc:8d:75:a1:29:71:98:70:c8:0b:67:2d:04:ca:12:7a:
d8:f9:33:bf:21:55:70:b4:6e:da:a9:e8:78:9c:ea:de:60:6c:
7f:3a:d2:7b:c9:90:40:a1:9d:31:76:82:ef:2a:6d:9b:20:49:
54:a4:c0:7c:cc:62:e9:9f:1b:59:28:9a:fb:19:77:cf:13:e3:
df:68:0c:bf:e7:3b:38:ed:ea:27:ae:5e:d7:ab:f4:4d:b3:ef:
c4:ea:4f:60:1a:b3:21:d1:42:6d:72:a9:7b:3f:23:cb:64:70:
94:bc:5f:9a:8e:89:e3:72:8b:29:6b:09:71:a7:d3:b2:1b:b3:
51:2f:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:55:30 2024 by rpki-client on console-fra.rpki-client.org