Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/8B626C80B17611ECA770DF50C4F9AE02.roa
File: 8B626C80B17611ECA770DF50C4F9AE02.roa (raw, json)
Hash identifier: lx4tLWNunhOma4ao4PMuPGANSxfNkSize645TrWfcW4=
Subject key identifier: 55:58:8E:4C:F9:8A:85:71:47:5E:23:BC:AE:7F:99:A2:F7:06:72:05
Certificate issuer: /CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
Certificate serial: 1D65
Authority key identifier: 2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/8B626C80B17611ECA770DF50C4F9AE02.roa
Signing time: Fri 01 Apr 2022 16:43:01 +0000
ROA not before: Fri 01 Apr 2022 16:43:01 +0000
ROA not after: Mon 01 Aug 2022 00:00:00 +0000
asID: 142600
IP address blocks: 2001:df0:b600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7525 (0x1d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
Validity
Not Before: Apr 1 16:43:01 2022 GMT
Not After : Aug 1 00:00:00 2022 GMT
Subject: CN=62472b95-dfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:2e:15:b0:d4:30:21:fe:03:36:04:af:fc:
a8:df:2c:ed:2f:00:ca:62:8c:c3:8c:13:c4:47:11:
f6:4a:56:3a:63:af:29:df:2c:b2:39:a9:b4:f0:3a:
1d:24:78:1b:a0:77:69:96:7e:65:95:ae:df:8d:0e:
0b:63:0c:93:a2:c0:fa:c2:f7:35:f6:bc:29:a1:3e:
0a:c2:7a:4f:cb:f7:07:07:57:5b:1a:5b:d2:5a:b5:
b7:19:c6:c7:e4:98:b6:c7:f7:e6:7c:34:e2:fa:06:
95:f0:15:c5:aa:b8:da:ff:65:59:cb:93:f2:2d:e4:
c9:72:1a:5c:96:48:48:a4:1f:5f:2d:7b:d2:1e:c0:
36:15:76:02:fc:52:8a:5b:4a:21:99:0f:95:0d:32:
38:a9:98:f8:b9:1a:6b:3c:c0:be:69:a8:1a:fe:13:
d5:42:a0:05:c6:e7:2b:05:b1:0f:de:88:5c:c0:89:
fd:99:d9:36:20:0d:54:4d:58:3c:16:1a:28:7c:2e:
6a:7b:7c:07:1a:1b:0c:d9:81:78:b0:b5:fe:17:a7:
f3:ed:66:ec:45:a8:58:08:8c:9c:90:eb:86:fe:f3:
16:4c:ca:5a:3c:90:19:4e:70:20:71:d7:70:49:e8:
d4:eb:bb:cf:12:13:80:39:8f:25:d9:dc:07:a1:97:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:8E:4C:F9:8A:85:71:47:5E:23:BC:AE:7F:99:A2:F7:06:72:05
X509v3 Authority Key Identifier:
keyid:2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/8B626C80B17611ECA770DF50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:b600::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f0:86:eb:a9:40:cf:d0:0d:9b:8c:77:11:ff:4b:a3:aa:d0:
36:19:3c:e9:e5:c0:0b:88:ab:a7:ab:52:d7:b1:f3:03:d6:b1:
2a:dd:0b:8d:7f:3c:5e:e3:30:f6:d7:6c:38:59:f2:5b:b1:69:
d2:00:dd:b7:b4:d1:96:34:c8:6d:00:03:66:e9:d2:06:19:19:
c9:73:aa:91:19:c6:59:ae:14:d7:2b:23:20:98:05:eb:78:23:
97:f5:73:d0:8c:c1:60:3b:41:64:48:c4:de:f5:ae:12:bf:e6:
45:e5:c6:3b:dd:86:9a:d2:17:48:bd:74:66:41:08:ed:a4:52:
6e:a1:ac:4c:f7:d6:b4:66:ae:ab:ea:fa:0e:f9:c5:c1:27:d7:
76:5b:0f:f6:17:2a:5b:11:08:eb:dd:0c:66:e9:06:eb:97:45:
5d:6c:fa:c8:65:18:c5:4e:9f:06:e4:d3:32:a4:16:f3:00:bb:
a3:c0:30:54:17:1e:39:42:84:a2:44:34:5b:65:18:27:3e:c2:
c0:47:37:60:fe:4d:8d:88:4f:68:86:05:56:50:bf:76:b4:16:
ee:90:58:7a:cf:43:dc:da:35:83:79:ec:d3:20:7b:d4:8f:5d:
ce:8e:cd:a0:5c:23:05:79:27:a6:fb:c4:21:8a:8c:aa:60:7b:
a1:ff:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org