Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7BB3148AB48011ECB2D05431C4F9AE02.roa
File: 7BB3148AB48011ECB2D05431C4F9AE02.roa (raw, json)
Hash identifier: T72FE86ZhujcJho5unPacU8rwtfm/teOj1tvJOwkDEE=
Subject key identifier: 14:6D:20:1D:3E:74:5C:0C:16:A8:6E:F3:60:7C:2B:FB:07:87:01:CF
Certificate issuer: /CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
Certificate serial: 02
Authority key identifier: 7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7BB3148AB48011ECB2D05431C4F9AE02.roa
Signing time: Tue 05 Apr 2022 01:34:07 +0000
ROA not before: Tue 05 Apr 2022 01:34:07 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 131211
IP address blocks: 203.176.189.136/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
Validity
Not Before: Apr 5 01:34:07 2022 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=624b9c8e-7d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:95:7f:28:36:8b:6a:ee:b6:8c:b9:a7:f4:
4c:42:86:cd:5b:a3:71:57:3c:5d:f4:16:e4:f4:68:
af:2f:94:46:40:e8:b3:a2:f3:36:4f:28:c8:5e:6a:
64:d8:25:8a:8b:87:3b:15:7a:51:23:2a:91:ee:7a:
be:d6:ab:15:c4:d2:b4:5d:ac:c3:98:98:d7:62:35:
52:c4:34:0f:f7:48:12:53:8f:57:6a:81:df:6d:6d:
85:c1:be:79:99:67:24:45:03:55:7d:6b:0b:02:3b:
d2:6a:08:c3:af:ac:e6:5b:46:e9:aa:5c:bd:a1:90:
a8:c9:ec:b1:0e:a2:0f:00:e8:ac:9d:cd:6c:cf:59:
8d:de:d2:30:00:32:d3:94:39:7a:ab:a9:d4:ef:e0:
06:46:2d:75:c3:87:8c:51:ed:9d:20:b2:c2:69:6c:
fa:6b:7b:d7:fd:43:ba:26:b7:8a:a3:ae:10:8f:38:
23:ed:04:5a:98:bd:e6:37:02:e4:33:ca:1a:ea:f5:
09:12:49:67:c8:64:4e:be:38:e2:90:0d:aa:c2:01:
e7:18:93:3b:2f:b7:7e:22:22:7d:b7:48:95:2e:69:
18:ed:5f:09:35:d9:e6:97:e3:bb:6c:a2:21:c6:a3:
23:e7:a8:54:20:60:b7:7c:02:e6:cd:c3:34:8c:15:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:20:1D:3E:74:5C:0C:16:A8:6E:F3:60:7C:2B:FB:07:87:01:CF
X509v3 Authority Key Identifier:
keyid:7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7BB3148AB48011ECB2D05431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.136/29
Signature Algorithm: sha256WithRSAEncryption
73:a7:3c:4a:70:43:54:b2:07:bc:e5:c0:bc:f0:ca:32:cc:70:
a3:0e:7e:4c:ab:e8:84:a4:cf:2e:62:1d:a9:4b:e8:62:64:c2:
ab:a0:9a:bf:0b:cd:e6:a6:62:c8:81:cb:42:62:d1:be:85:42:
7e:7c:97:0b:e2:66:04:17:e1:ee:67:7f:81:31:be:1b:ce:50:
8b:33:e0:cc:75:0f:a4:e5:5d:ac:1d:da:27:53:8f:d5:ed:95:
74:df:7c:aa:8b:62:6e:60:b2:b5:77:80:ac:ea:84:b5:8e:b0:
7d:76:79:bc:7d:09:c7:e5:01:d2:2a:95:b2:f9:3e:55:f6:f3:
d5:8d:40:33:c5:c4:c3:f9:1d:40:45:b0:f2:9e:3c:85:13:ce:
3f:2a:05:f1:b1:85:f9:a2:8b:ee:1e:c0:75:2e:42:9c:b3:0f:
a0:ff:6e:39:b8:f2:97:f0:e5:bf:b5:53:47:30:93:5c:f2:53:
02:64:2c:d2:51:a1:4f:64:94:14:77:b3:65:86:63:d9:f0:90:
57:4a:1f:bf:5c:ea:31:60:f8:55:80:b1:46:f9:bf:00:ce:03:
76:76:f5:65:ab:22:97:73:67:70:37:c7:74:fb:07:e4:97:34:
3c:dc:f5:ba:19:9c:e2:7b:61:21:db:a9:2a:1c:e9:f1:dc:47:
ad:d1:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org