Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e2031303132.roa
File: 32332e3134392e3135322e302f32342d3234203d3e2031303132.roa (raw, json)
Hash identifier: Z08zfivJR6QqiRdUjmYJJ/Y8M/yUdpQ82MtMdzhEui8=
Subject key identifier: 4E:ED:5A:D5:45:14:82:95:1E:1A:53:85:17:D9:8D:92:3A:73:06:F6
Certificate issuer: /CN=BC4F1527A35AD66A653E112A8738D6435D525513
Certificate serial: 2BE8658CB4C67FD0BD01188E39C1D31F5B5570C2
Authority key identifier: BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13
Authority info access: rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e2031303132.roa
Signing time: Sun 06 Oct 2024 01:03:40 +0000
ROA not before: Sun 06 Oct 2024 00:58:40 +0000
ROA not after: Sun 05 Oct 2025 01:03:40 +0000
asID: 1012
IP address blocks: 23.149.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e8:65:8c:b4:c6:7f:d0:bd:01:18:8e:39:c1:d3:1f:5b:55:70:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC4F1527A35AD66A653E112A8738D6435D525513
Validity
Not Before: Oct 6 00:58:40 2024 GMT
Not After : Oct 5 01:03:40 2025 GMT
Subject: CN=4EED5AD5451482951E1A538517D98D923A7306F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:10:cd:c1:fd:93:10:00:c3:5d:00:42:8c:
2c:0c:d8:6a:72:d8:9b:3f:2b:57:c1:23:46:5f:ad:
e9:eb:48:87:c0:c8:74:60:a2:24:ff:d1:ce:b5:6c:
3b:e7:8e:84:32:d0:07:7e:74:f7:bf:7f:3b:08:dd:
5e:fc:e7:d8:6b:c7:94:2b:b5:af:3b:b4:f1:f9:2a:
a2:85:42:3c:33:9c:22:8e:84:5a:c5:a7:ce:09:cb:
39:04:df:fd:1a:c9:d1:be:0b:31:37:ad:75:e7:ae:
38:74:a0:a7:60:5e:d5:e9:11:5d:1c:72:69:90:81:
c3:bb:d3:53:03:c1:5b:43:bf:b7:87:60:8c:0f:2b:
7c:93:06:ce:e3:38:53:21:47:e6:68:53:fe:8e:cc:
4b:fe:a0:3a:4b:11:00:fd:42:e4:59:a7:86:23:ab:
47:8b:39:a6:64:f0:c0:27:ba:a8:87:d5:50:97:29:
fa:ab:25:7c:06:e4:94:10:2c:aa:dd:d3:5a:60:4d:
54:f6:1e:50:50:98:f5:8a:65:c4:c0:cc:55:a1:3a:
ff:63:9d:27:2a:3a:1e:1d:32:d6:2e:8e:9f:5d:e3:
8c:22:d7:af:23:8b:cb:48:f7:75:bf:f9:b0:ae:da:
65:a2:d3:c4:c4:e6:8d:21:13:a6:45:dd:ca:7d:71:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:5A:D5:45:14:82:95:1E:1A:53:85:17:D9:8D:92:3A:73:06:F6
X509v3 Authority Key Identifier:
keyid:BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/BC4F1527A35AD66A653E112A8738D6435D525513.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e2031303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.152.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a7:c0:e8:2a:06:fa:a8:25:11:49:0e:d7:d2:eb:58:c2:96:
f2:7e:8f:65:96:b7:04:f6:a8:64:38:a3:e9:79:f1:28:6b:a0:
dc:a3:1a:71:b7:77:17:99:6b:92:5c:2b:10:20:5b:d2:fd:bd:
3c:c6:a2:d5:c9:31:ac:86:d3:17:bc:2d:0b:7a:35:e4:2e:d6:
66:30:d1:16:33:eb:3f:1d:dd:5b:15:d4:63:f4:ee:6a:0a:f2:
de:7b:ea:e2:48:b7:06:bc:e9:b3:c9:54:ba:4a:04:b0:d1:88:
03:5e:d6:ce:5c:8e:f2:1e:c4:b7:60:d0:ca:c2:68:3e:7c:bf:
d7:dd:ac:68:6a:f3:45:9a:dc:27:44:66:0e:ec:c7:dd:9c:bc:
4d:17:55:8e:33:d2:b0:a9:dd:ad:60:07:63:c6:51:2b:00:50:
f3:01:96:ac:bf:88:b1:3b:3a:1f:27:41:02:5f:30:20:7e:45:
cf:3b:7b:91:49:c3:94:4a:fb:27:56:8b:ce:ab:e1:08:17:70:
12:b6:3e:fc:3e:91:64:b6:27:43:5e:f1:18:94:e8:fd:39:27:
54:d1:89:93:e5:29:86:d7:dd:b1:d9:34:70:49:0c:54:5e:6b:
41:71:d4:76:e3:ec:55:3a:e5:92:94:09:9c:f0:cc:1b:47:05:
3f:f0:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:20 2024 by rpki-client on console-ams.rpki-client.org