Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/B287525CE81011EA926BE66FC4F9AE02.roa
File: B287525CE81011EA926BE66FC4F9AE02.roa (raw, json)
Hash identifier: kQOgS4peBBp70aUmxSiUFHTW5T23lIg32+P5LpE+4Fo=
Subject key identifier: B7:2C:B3:72:93:9A:87:03:14:04:36:6C:BA:58:88:56:27:17:AD:5C
Certificate issuer: /CN=A913E5D6/serialNumber=81ECFF47F25B2142F10DF6D49AE0E219FED747F8
Certificate serial: 07B2
Authority key identifier: 81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/B287525CE81011EA926BE66FC4F9AE02.roa
Signing time: Mon 30 Dec 2024 21:10:14 +0000
ROA not before: Mon 30 Dec 2024 21:10:14 +0000
ROA not after: Wed 30 Apr 2025 00:00:00 +0000
asID: 56132
IP address blocks: 130.194.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5D6
Validity
Not Before: Dec 30 21:10:14 2024 GMT
Not After : Apr 30 00:00:00 2025 GMT
Subject: CN=67730c35-93c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:62:01:9f:c0:46:86:8c:2e:0a:58:67:20:
4c:bc:d8:cf:d7:0c:db:fc:39:29:ea:2f:0f:1b:f1:
17:82:2a:40:c1:1f:50:45:da:d3:3f:fe:9d:22:46:
8a:25:85:5b:f8:41:42:2c:ed:8b:27:3d:d1:a5:ac:
75:e2:41:b7:1a:e7:d8:17:46:05:61:75:b7:d1:8f:
8f:7c:dc:e2:43:fa:ef:75:4b:82:5f:08:90:0a:29:
1c:7e:66:a0:34:85:87:12:15:23:ec:32:fa:16:47:
f5:2f:b9:0f:c6:c4:38:83:7e:df:c8:bc:9e:8c:7d:
cc:ad:5b:98:10:67:28:84:b1:6a:ba:18:fa:50:44:
fb:d2:ff:33:3b:6d:c3:b8:15:c0:2b:29:a7:56:74:
e3:4c:25:7f:93:98:eb:40:e5:2a:a4:b8:9e:9f:69:
07:38:58:57:30:e4:4b:ba:b1:5a:a6:18:60:8f:5c:
5f:de:ff:94:02:aa:15:d0:3b:1b:86:e0:5c:88:41:
d5:e0:e3:12:d3:54:22:76:46:c2:9a:50:39:cc:af:
63:86:b9:97:3e:65:57:7a:a1:ca:8a:60:b9:29:a3:
30:4d:4c:b6:91:d2:89:8d:82:ec:16:43:a6:a5:cc:
73:1a:0c:25:9b:ac:28:5f:86:2d:6c:63:7a:b9:24:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:B3:72:93:9A:87:03:14:04:36:6C:BA:58:88:56:27:17:AD:5C
X509v3 Authority Key Identifier:
keyid:81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/B287525CE81011EA926BE66FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:d1:d8:43:80:d1:2c:70:24:e8:e7:d5:09:aa:9b:60:05:88:
b2:0f:49:ca:a2:d4:0a:7b:74:0b:dc:68:86:ae:b3:5d:e2:7f:
82:48:c2:26:9c:5d:d0:bf:b9:9a:80:91:26:63:e2:3d:a9:57:
c8:ca:aa:57:c7:38:25:12:da:14:0b:9f:f2:6b:30:1d:fe:07:
ef:36:64:8d:7b:73:c7:0f:75:34:9a:a1:01:34:20:3b:bf:06:
54:93:b2:6e:d3:b9:2b:3c:8a:61:38:ce:e0:59:a3:c1:d5:0a:
32:d1:35:42:d4:83:ea:15:b4:48:ed:9e:69:36:90:8a:ff:a2:
64:92:55:0d:23:dd:cb:66:0b:b6:d4:52:df:17:b5:a8:3e:47:
45:29:45:63:99:91:42:40:4f:c9:db:b6:e9:9d:11:40:2a:be:
1c:48:52:6c:bd:2d:75:70:41:e8:d8:ae:0c:fa:40:81:09:cd:
17:73:53:81:d3:ff:1b:44:22:32:44:fb:39:52:db:1b:3a:db:
f0:e6:62:eb:58:05:19:2f:59:25:6e:a3:66:dd:1b:2e:56:44:
97:8b:0a:bf:1c:f8:e0:62:b1:27:5e:c6:63:58:03:a1:d3:1b:
3f:6a:32:b3:db:34:9f:29:2d:d8:7f:00:70:df:40:a7:81:8c:
0c:05:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:00 2025 by rpki-client