Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A8004108391211E99E31F655C4F9AE02.roa
File: A8004108391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: igpns5ytOJMQN1qmp35k5TjIBrDxjOFPRTZ2+Cm1yjg=
Subject key identifier: F2:61:DB:C1:8C:55:E9:24:A5:08:C8:E5:1A:28:5B:93:6F:05:CA:0E
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0ECD
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A8004108391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:33 +0000
ROA not before: Sat 01 Oct 2022 18:55:33 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 61125
IP address blocks: 2403:5180:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3789 (0xecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:33 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d24-34da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:9c:1a:a3:f3:e0:e7:ee:db:01:e9:e7:00:
80:84:70:d8:eb:e6:85:aa:2c:f5:91:ab:60:07:33:
ad:f8:97:96:8a:16:39:41:22:96:52:9b:b3:65:a3:
9c:9e:ad:99:5f:e6:b0:1d:a8:61:de:68:77:32:6d:
3c:01:61:a3:cd:d5:f1:8e:bd:fa:ff:70:99:1a:dd:
09:e7:57:29:39:34:8a:58:a9:6f:cf:55:6d:bf:a1:
72:48:81:02:cb:fd:92:c8:14:3a:36:85:77:20:dd:
6c:0d:19:2e:47:90:04:ff:91:64:b3:1a:70:d9:8c:
20:35:de:1f:45:f4:13:52:98:f6:ad:57:5c:b9:bf:
99:c5:6d:98:e1:b1:2f:d7:09:0a:6d:31:01:63:b7:
10:67:0f:12:d1:3e:9c:8c:ed:9b:51:0a:d6:8e:37:
15:37:1f:2f:e9:f2:74:41:bc:dc:ae:40:e6:0c:9a:
0e:59:60:7b:60:70:2f:07:9a:fa:ff:62:2f:9e:c6:
e8:0e:d5:91:72:51:29:5e:bd:f2:7c:af:e5:90:e0:
f8:85:34:7e:d4:b5:16:db:5a:fd:b6:72:52:f1:06:
74:d0:d4:59:e1:ab:98:20:8c:8e:3c:14:63:3c:40:
2a:d6:ae:4c:ec:46:9e:fa:77:50:4f:98:46:7a:43:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:DB:C1:8C:55:E9:24:A5:08:C8:E5:1A:28:5B:93:6F:05:CA:0E
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A8004108391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:23::/48
Signature Algorithm: sha256WithRSAEncryption
0d:c1:3e:03:28:2f:03:94:bd:ef:05:0c:f6:8b:9c:a9:51:b7:
1d:cc:e0:c9:42:32:73:e0:49:e5:12:42:cb:cc:63:57:2c:07:
ab:6b:c6:ba:e1:07:d0:73:3f:43:a0:3a:43:9f:d6:60:b3:d8:
23:3e:6d:99:6e:bf:fe:53:c8:a3:3b:5a:a5:d7:08:6d:a9:3f:
b0:8f:83:2e:68:a9:ef:07:18:1e:65:36:3b:92:d7:d2:64:29:
2a:02:3c:ff:e0:38:d7:97:e7:a3:95:a3:43:e7:a2:38:92:69:
c3:13:08:d0:16:da:70:26:37:a8:63:0e:a5:e0:58:33:07:82:
1c:52:06:33:83:9d:6e:a8:36:ec:e6:cc:33:9c:d1:3b:7f:14:
d1:b7:59:43:84:82:ab:a5:23:91:71:4b:79:3f:1f:33:82:55:
f1:2a:6c:a1:8f:8f:ae:09:40:b3:3f:37:26:85:c9:b0:27:ef:
67:b0:9b:3d:b8:1a:0b:6c:de:9b:a9:1f:98:ee:84:1e:35:e2:
ec:a4:49:3c:ba:e2:f9:dd:a8:b2:38:62:9d:74:1b:f5:da:2c:
57:b5:ad:53:f2:e6:96:ed:78:fb:8f:ba:55:a8:58:6c:44:31:
e1:97:be:f0:15:a8:34:56:e5:d0:86:e1:2e:ac:67:5a:1c:16:
29:74:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org