Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa
File: 3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier: qINvSlbdsen3MKdvvSYtenp0xCVe8BxK96oR/Wavxmo=
Subject key identifier: A4:CB:B0:6D:B9:B1:4F:8F:0F:D1:CA:7A:5B:C3:33:A8:73:BA:EC:A1
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 287502B3786324A29C1C8A61E6DDE8FDAA4B651A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa
Signing time: Tue 03 Dec 2024 22:20:33 +0000
ROA not before: Tue 03 Dec 2024 22:15:33 +0000
ROA not after: Tue 02 Dec 2025 22:20:33 +0000
asID: 33538
IP address blocks: 216.145.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:75:02:b3:78:63:24:a2:9c:1c:8a:61:e6:dd:e8:fd:aa:4b:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Dec 3 22:15:33 2024 GMT
Not After : Dec 2 22:20:33 2025 GMT
Subject: CN=A4CBB06DB9B14F8F0FD1CA7A5BC333A873BAECA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:0e:88:19:17:32:4d:2f:61:be:d2:87:b2:
c7:03:16:a7:34:d3:e9:27:56:7b:64:91:12:5f:fc:
0b:6f:83:84:b4:13:a3:3b:57:62:3d:46:7e:b1:fb:
0c:14:56:e6:fb:5a:62:a8:0a:fe:a1:29:97:4f:13:
88:a9:97:2c:15:a2:58:40:63:e1:1b:b7:08:46:a5:
58:64:fa:d5:8e:c6:44:8b:88:59:05:a0:69:94:e3:
84:00:16:b5:94:e4:e5:8d:0a:f6:e2:38:d3:f4:f4:
7e:6e:a9:85:b5:93:6e:6a:ca:e2:7d:9a:78:dd:40:
57:1e:82:52:0f:67:2b:11:a1:e5:7a:d7:58:af:09:
07:b7:43:da:09:f6:4e:cf:e1:f4:d5:e3:b8:85:c0:
a2:7c:89:25:c5:8b:bd:f5:b3:5d:f5:a0:4a:01:27:
31:cb:ee:24:38:10:e9:03:06:cf:be:02:29:e7:3f:
8f:2e:d5:f0:d1:77:e1:93:e3:58:39:03:c6:91:ff:
7c:be:98:db:7e:dc:09:5e:34:32:e3:32:9c:25:a0:
76:de:6f:d8:85:a3:b0:9c:1a:1d:1d:26:37:97:39:
33:f1:4e:1f:80:bf:5b:1a:e3:93:82:77:4b:aa:9a:
f4:69:57:c9:87:43:c3:93:90:3e:23:09:6d:87:7e:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:B0:6D:B9:B1:4F:8F:0F:D1:CA:7A:5B:C3:33:A8:73:BA:EC:A1
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:81:1e:5e:08:bf:81:75:14:d2:90:8c:9b:03:d4:74:83:fb:
46:2b:f1:fe:44:91:48:a2:ba:99:70:d7:c4:d4:65:cb:34:82:
ca:3c:6f:60:8b:e4:8e:c0:dc:77:58:64:1f:8a:e8:49:0f:96:
0f:e9:c5:66:44:20:09:9e:8e:4e:c0:31:c6:30:7a:df:be:a3:
e2:cb:d0:de:76:cf:0b:d5:40:c0:5d:87:b9:30:83:b5:ac:77:
a4:86:59:9b:3f:3e:e0:7f:dd:7b:0d:9c:51:65:27:ba:a4:0c:
c0:69:43:02:34:0e:f4:18:aa:a7:9f:c8:2e:c7:78:e0:5a:e0:
d5:26:60:bc:00:77:d3:13:b1:cd:bf:7b:ae:34:8f:b9:5e:77:
99:ee:32:52:32:92:df:01:e3:f8:7d:4d:ca:23:d6:32:8b:9f:
56:bb:3f:dd:60:0a:53:82:76:e8:32:5d:fd:76:4f:68:d5:86:
00:20:a9:c9:5e:72:8d:4f:56:25:d7:59:6d:61:d5:38:85:8f:
fb:7f:f5:aa:2e:0d:d0:fa:fa:de:9a:86:5e:c7:12:8b:58:1c:
34:8d:49:77:98:ca:fd:99:5d:f1:1c:a8:b7:8a:f0:68:e3:18:
56:f9:55:8b:d5:9a:6e:33:4e:77:21:5f:53:3d:f9:47:fb:5d:
65:b0:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:06 2025 by rpki-client on console.sobornost.net