Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9140C620000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
File: 3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: LG6lVcPdqaJ6X1P0nhAsnz+mx0xiMAtxH3TRFrRxkTM=
Subject key identifier: B8:F5:51:03:C7:68:36:25:18:07:97:DD:2B:8B:66:64:34:F0:77:08
Certificate issuer: /CN=873a06ec7a9774562f6ddb4a24d3eed1c1a2eb8b
Certificate serial: 3ECA9891C587B787BF491708D05A611EDF57EA33
Authority key identifier: 87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzoG7HqXdFYvbdtKJNPu0cGi64s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9140C620000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
Signing time: Thu 02 Mar 2023 07:18:35 +0000
ROA not before: Thu 02 Mar 2023 07:13:35 +0000
ROA not after: Thu 29 Feb 2024 07:18:35 +0000
asID: 61317
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ca:98:91:c5:87:b7:87:bf:49:17:08:d0:5a:61:1e:df:57:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873a06ec7a9774562f6ddb4a24d3eed1c1a2eb8b
Validity
Not Before: Mar 2 07:13:35 2023 GMT
Not After : Feb 29 07:18:35 2024 GMT
Subject: CN=B8F55103C7683625180797DD2B8B666434F07708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:f1:99:da:49:34:e2:a3:f7:6a:ac:6a:a9:
eb:6b:38:04:44:00:4b:b7:8f:6d:0c:86:9e:11:d5:
6e:8a:87:9d:00:bd:c2:f4:79:b6:4c:87:a3:b0:35:
3e:20:3b:5a:5a:30:2f:00:01:97:3c:4b:89:ea:94:
5b:6f:60:ad:86:b5:df:f4:09:a5:75:6e:e1:6e:20:
62:fb:49:54:81:d5:ef:23:1c:5e:a9:99:85:6c:12:
ea:3c:60:cc:8f:23:41:1c:58:11:28:32:07:5a:b7:
b4:12:63:e2:06:c2:21:03:61:cc:8a:05:f2:fc:87:
9d:6a:3b:d3:cd:5a:9e:c6:95:c0:3d:61:c5:5b:00:
58:e9:58:ad:72:af:22:bc:85:55:67:26:b5:d4:aa:
95:3e:47:60:fa:43:73:36:1f:d6:fe:21:67:eb:ab:
ab:16:b8:88:e8:9a:7c:ce:ff:10:aa:ae:e1:5e:e9:
3d:3f:a4:c1:48:31:91:02:d6:f3:f0:4b:f8:ed:ab:
d1:52:90:93:80:6c:1d:99:b0:41:cf:9d:d3:a2:eb:
c6:ca:4d:51:ef:2e:37:20:20:08:ab:d3:77:89:dc:
53:fa:4e:21:d9:3b:e4:71:48:7a:19:e4:e2:0c:47:
5f:80:7c:2f:3d:c8:ad:ba:14:e9:34:77:a4:12:d2:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:51:03:C7:68:36:25:18:07:97:DD:2B:8B:66:64:34:F0:77:08
X509v3 Authority Key Identifier:
keyid:87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzoG7HqXdFYvbdtKJNPu0cGi64s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
05:12:c4:8c:f9:be:1b:b0:5f:75:a2:dc:a8:15:02:30:aa:68:
c9:b1:65:f0:22:77:57:25:2b:38:8c:f2:d8:6c:f1:d9:09:a2:
d6:5c:8c:65:4c:eb:9e:91:d6:b5:00:3e:df:4d:57:28:97:8b:
9d:2d:b7:d3:22:7a:53:fe:c7:91:cd:2d:6c:e5:46:52:a5:be:
2d:9f:d7:9f:e3:ce:d8:c1:59:83:0c:d0:e8:a2:1a:b1:4b:14:
bf:e6:95:72:44:bc:c1:e7:45:30:83:17:19:dd:8c:8a:83:95:
25:b4:ed:a9:fc:9f:1d:10:d2:08:83:e5:08:d2:e5:87:9f:25:
bd:1b:bb:67:3b:06:97:f6:12:ab:e8:28:00:b4:89:6f:d2:86:
a3:2f:53:69:b2:6f:b5:e5:eb:80:88:43:fa:81:44:d9:c1:78:
76:c4:0f:73:8d:03:3b:35:08:46:59:e6:2f:8a:3d:0d:0b:30:
3a:3f:68:3b:06:7e:c4:d6:3c:53:d4:3b:10:91:f7:88:68:b2:
37:34:94:7e:fc:5c:9f:dc:32:18:3b:2c:ce:b6:9e:12:a6:76:
83:45:03:d3:f8:a7:7e:19:35:da:39:88:72:38:98:13:61:2c:
1b:06:a7:60:7a:f4:a4:4a:9e:8a:dc:5c:60:25:5e:c5:0a:c8:
4d:46:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org