Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
File: 3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 0+AQSdaxnRyFsS5ntAN0lzU/U1MrwzznmSsUkfkKfrA=
Subject key identifier: C4:25:9B:75:44:A8:CB:B8:8B:95:B6:A8:D7:1C:E9:FF:F7:A6:1C:EA
Certificate issuer: /CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
Certificate serial: 3F159CCB50CBCB9E11A12B4C6EC9B501BE5AE867
Authority key identifier: 49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
Signing time: Mon 04 Sep 2023 07:48:00 +0000
ROA not before: Mon 04 Sep 2023 07:43:00 +0000
ROA not after: Mon 02 Sep 2024 07:48:00 +0000
asID: 61317
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:15:9c:cb:50:cb:cb:9e:11:a1:2b:4c:6e:c9:b5:01:be:5a:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
Validity
Not Before: Sep 4 07:43:00 2023 GMT
Not After : Sep 2 07:48:00 2024 GMT
Subject: CN=C4259B7544A8CBB88B95B6A8D71CE9FFF7A61CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:e7:99:c6:c2:79:c1:4c:ba:a8:1b:14:5c:
48:4a:6c:9f:f1:8b:0d:a5:22:ad:27:af:5d:b9:ec:
cb:8c:6b:7e:a5:12:78:49:37:3f:11:ff:25:2c:3c:
89:87:ee:e9:44:91:68:b8:93:ee:03:e6:b6:fd:a0:
5f:e6:97:fd:cd:e6:7a:20:a1:45:41:9f:cc:2b:83:
08:f0:b9:7f:9a:76:ba:fb:61:db:6a:bd:3e:4c:4d:
98:d0:b1:e2:5e:55:ab:03:a4:6e:be:37:79:68:5a:
23:49:cd:41:fe:2b:94:25:ee:19:ad:9d:3c:f2:be:
e2:46:7f:a7:df:bc:a2:41:19:30:31:a8:c4:c5:f7:
39:1c:56:2d:4e:ab:00:47:1f:f8:26:f2:6f:84:bf:
92:5e:33:0d:39:04:31:24:92:a3:4d:1b:d2:f9:f7:
8a:eb:00:97:bf:4c:53:00:47:1d:d9:09:58:30:08:
26:e8:4f:4d:50:b4:ab:25:3a:6f:1f:ef:02:9f:de:
9a:e2:09:9e:2c:b1:19:d8:5e:0e:17:4e:4a:f0:e7:
5c:ad:b6:be:14:96:12:0c:62:01:75:09:5f:a3:76:
ab:10:b2:27:45:a5:ea:d2:d7:f1:83:06:e9:3e:9c:
88:86:1e:8c:b0:80:0b:b5:9d:22:ea:18:70:29:77:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:9B:75:44:A8:CB:B8:8B:95:B6:A8:D7:1C:E9:FF:F7:A6:1C:EA
X509v3 Authority Key Identifier:
keyid:49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3e:2e:12:ad:f6:8f:bb:9a:79:49:28:29:cd:68:42:b2:ca:
92:8d:ba:ec:25:63:f0:ea:d3:08:ef:8d:63:ef:4d:c7:13:63:
cf:9c:fb:8a:66:c3:37:25:52:0c:64:c1:49:0b:ff:7a:b8:40:
09:9f:06:e7:6d:01:d6:f2:c5:bc:70:e2:82:11:ec:89:56:01:
75:31:fb:02:19:12:0a:d8:32:2d:a0:47:3c:47:9c:a1:9f:37:
d2:18:3c:33:00:a3:1f:59:f8:f0:1e:4a:4d:3b:c9:ea:a8:e6:
7f:d1:9e:5f:55:28:bf:1b:0b:7a:28:e6:1e:f3:ff:79:90:6c:
60:7b:38:76:db:5a:22:a9:ae:36:79:b5:51:d0:91:76:7a:b8:
f5:80:34:24:15:65:9f:8d:bf:9c:10:b8:a6:4e:1d:ef:46:df:
d3:9f:1e:66:59:8f:45:0e:3a:3d:6f:90:0e:f4:2d:b9:5f:41:
a8:15:f6:29:a5:69:49:39:39:23:4b:bb:25:f3:c1:19:80:ad:
74:6b:9f:34:37:56:c8:b6:b2:c8:8e:b7:35:e0:0a:17:78:80:
cb:8d:58:c8:f5:d8:cc:7f:6e:51:82:89:04:74:63:4e:ae:9b:
16:76:f9:bd:73:ba:1d:fb:a0:88:6d:33:0f:bb:af:e3:c8:a7:
d2:a5:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org