Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
File: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=
Subject key identifier: C3:E9:E0:7C:24:80:BE:2E:AC:88:9E:7F:43:90:C3:AF:88:AB:A6:3D
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 58DDCA63BC2CEE61F75CC1A257A3758999F14D27
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
Signing time: Fri 02 Aug 2024 11:24:33 +0000
ROA not before: Fri 02 Aug 2024 11:19:33 +0000
ROA not after: Fri 01 Aug 2025 11:24:33 +0000
asID: 42427
IP address blocks: 193.7.205.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:dd:ca:63:bc:2c:ee:61:f7:5c:c1:a2:57:a3:75:89:99:f1:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Aug 2 11:19:33 2024 GMT
Not After : Aug 1 11:24:33 2025 GMT
Subject: CN=C3E9E07C2480BE2EAC889E7F4390C3AF88ABA63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:e6:f4:bd:ad:89:fe:d1:a6:43:0a:eb:f8:
ce:f1:e5:ea:be:7c:05:7f:1d:33:55:df:62:25:e6:
13:84:c9:ba:d6:a2:e9:0e:23:85:dc:ca:69:90:23:
b4:f6:f4:1d:ff:87:60:6a:a7:30:1a:95:0a:77:80:
7f:85:d5:20:5b:56:67:6a:3e:97:aa:48:03:9c:0f:
ac:91:50:38:85:06:34:92:55:92:a3:a1:fa:03:2e:
0d:b9:23:d6:8b:76:1b:ac:49:9b:ec:05:e7:83:3f:
4e:10:a1:17:a5:0e:49:36:22:79:64:a1:97:b7:ee:
dc:c0:0e:95:3f:1e:7f:b1:6f:02:f9:05:72:b5:71:
bb:f4:df:92:3f:94:d9:48:6f:29:4b:2c:e9:c2:ac:
7b:ae:4b:3c:c4:be:0e:df:1a:1f:e7:f3:bb:d1:10:
0e:e4:4c:07:8a:31:5c:20:e5:ed:20:27:8d:34:2d:
4f:41:7e:6f:2c:c9:7b:9c:c4:1c:d1:2f:6f:4b:dc:
72:04:8b:1c:95:86:4c:e8:ef:df:aa:5e:64:b9:1b:
94:4f:e5:9c:54:ec:32:58:0b:4f:ef:17:d1:96:54:
c1:41:65:10:b2:b5:b0:61:53:91:75:a1:bf:44:2d:
e5:c5:4a:fc:df:dc:90:8f:b3:e7:a9:78:39:45:a4:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:E0:7C:24:80:BE:2E:AC:88:9E:7F:43:90:C3:AF:88:AB:A6:3D
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/3139332e372e3230352e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.205.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d1:99:d2:f5:a5:10:bd:08:42:2e:a0:58:3a:14:e9:6f:e7:
e9:11:29:0e:b9:64:e0:8d:ef:36:2d:af:ef:aa:1e:c0:1c:ba:
65:76:0b:04:db:84:4a:3d:b5:2f:4b:5b:2d:a4:e6:9a:2f:df:
0c:69:8f:5a:5d:1c:c1:59:41:7f:e9:57:66:d8:4e:81:fa:0a:
63:55:e5:67:be:ed:a0:99:3d:78:8f:90:51:b2:67:55:7a:a8:
60:5c:2e:54:03:b8:d1:46:17:b7:87:10:5b:ae:5d:44:3f:44:
3e:58:e3:92:88:12:0b:0e:ce:55:84:e1:11:65:b5:89:6f:3e:
05:84:79:70:d5:50:aa:ea:6a:8b:54:0a:0c:6c:f5:e0:4c:c0:
8c:ca:01:4e:50:8e:b7:87:ba:bf:6e:dc:39:57:08:ce:f0:b8:
c9:b1:19:6f:2f:37:de:af:8d:94:92:03:ed:d2:26:28:15:71:
a3:0e:fb:ff:cb:b5:9c:70:f6:13:36:2b:5d:0e:84:05:80:31:
ce:4b:34:09:86:9e:58:72:d8:36:53:b3:e4:71:9a:50:63:09:
ea:c1:12:2e:67:a7:23:69:b8:54:15:4d:c8:12:39:71:10:ef:
22:95:05:62:91:5d:87:da:ac:01:4e:54:8b:e8:3a:86:86:d4:
0a:93:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:25 2024 by rpki-client on console-fra.rpki-client.org