Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20393435.roa
File: 32332e3134392e3135322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: TDZApvb3WTOOaC+BT8cnEXkrI98F9ceJgBJxWWSTfvw=
Subject key identifier: D1:54:99:C1:C0:5B:72:8A:49:B7:DE:F8:BD:42:1F:E6:8E:F2:92:2C
Certificate issuer: /CN=BC4F1527A35AD66A653E112A8738D6435D525513
Certificate serial: 1096985C56C4E3C3BDCE121992BF912BA9617300
Authority key identifier: BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13
Authority info access: rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20393435.roa
Signing time: Sun 29 Sep 2024 23:47:25 +0000
ROA not before: Sun 29 Sep 2024 23:42:25 +0000
ROA not after: Sun 28 Sep 2025 23:47:25 +0000
asID: 945
IP address blocks: 23.149.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:96:98:5c:56:c4:e3:c3:bd:ce:12:19:92:bf:91:2b:a9:61:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC4F1527A35AD66A653E112A8738D6435D525513
Validity
Not Before: Sep 29 23:42:25 2024 GMT
Not After : Sep 28 23:47:25 2025 GMT
Subject: CN=D15499C1C05B728A49B7DEF8BD421FE68EF2922C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:17:12:9c:d2:b0:2b:00:5c:b2:ef:31:37:
00:bb:d9:a3:19:97:48:08:dc:28:46:30:38:c5:37:
8a:b3:45:f6:bf:12:0c:e8:5c:b0:96:63:9b:16:e5:
39:4d:ba:0f:e6:5c:da:57:7e:f7:d3:90:2e:e2:49:
b5:e0:c5:18:e0:5e:78:04:f2:a4:e3:3c:e6:87:48:
bf:1d:2e:0b:1c:96:68:49:46:ed:e9:00:cb:e8:9a:
b3:c4:1c:9e:b7:87:41:89:fe:02:a2:ca:a4:1b:f3:
b9:ab:54:bf:e0:b6:29:eb:58:94:c4:db:9c:fb:2a:
23:36:9d:b1:b3:41:f9:30:c6:ff:f8:53:52:7d:62:
bd:c9:89:3e:d2:20:3d:f9:e6:7d:60:5e:09:da:67:
a0:3d:ed:f1:71:2c:99:26:7a:d0:d1:5d:50:cb:7b:
30:98:9d:64:45:68:cb:f6:c5:7e:0a:ce:78:38:16:
1e:9d:46:44:dd:ae:ce:6e:f2:2f:cc:40:b9:99:6d:
64:ed:a0:16:2f:45:16:fa:bd:c6:4e:ae:d7:d3:a3:
35:07:5b:dd:1a:2d:18:93:36:2e:67:a8:8b:28:69:
0a:af:5d:60:81:99:0f:c7:ae:fd:6a:b9:fb:76:87:
f0:4c:f7:b3:10:6f:cd:c3:05:78:00:ac:d0:06:95:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:54:99:C1:C0:5B:72:8A:49:B7:DE:F8:BD:42:1F:E6:8E:F2:92:2C
X509v3 Authority Key Identifier:
keyid:BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/BC4F1527A35AD66A653E112A8738D6435D525513.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3e:3a:be:e2:01:24:49:7d:8e:52:63:3c:8a:10:c9:3b:81:
6c:69:85:7d:da:d7:ab:6f:c4:96:f4:07:ff:8c:53:7e:70:9b:
71:0a:99:d8:ab:e0:b6:5d:23:41:cc:d1:b3:6f:65:77:5b:9f:
4b:dc:17:1e:c2:bf:bb:91:2a:7a:42:bd:e9:85:80:40:90:2b:
0a:a8:f3:16:c6:8a:37:dc:9b:4f:20:dd:50:0a:ae:17:05:e1:
9c:bf:e9:63:74:4d:7b:63:ee:01:fd:8b:47:28:af:87:ff:07:
a0:13:89:69:e8:64:85:53:4a:b9:89:05:58:28:c6:a3:04:b9:
34:f8:56:41:79:da:fa:5e:b4:05:57:89:9f:ab:2f:ef:e1:aa:
b8:f1:22:7a:80:c4:35:37:06:a7:27:7e:5e:98:f3:a6:7c:f0:
dc:58:81:46:d7:77:8b:af:49:11:ff:9b:bb:70:e2:f3:3a:b4:
1a:ed:42:85:e8:d5:a4:f7:a0:4c:74:95:0e:cf:6b:ca:15:81:
63:36:30:5b:e4:8c:f9:b0:f4:79:6f:c0:be:47:47:20:2c:42:
45:1d:52:af:d1:00:70:33:09:d2:2a:33:42:e1:3e:eb:0a:68:
e7:a7:d2:bb:85:51:c8:19:2f:77:f3:88:15:69:e9:d0:d8:78:
4c:ed:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:20 2024 by rpki-client on console-ams.rpki-client.org