Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/DF74E188561B11E79A807120C4F9AE02.roa
File: DF74E188561B11E79A807120C4F9AE02.roa (raw, json)
Hash identifier: fjXz2CEIv3z1yRAa2GZeCG5vc5+Ipvw2khxPtj/2h/g=
Subject key identifier: E8:29:6F:17:0C:3E:3A:3A:3E:6F:85:CC:22:9E:5C:2F:2C:FC:18:5A
Certificate issuer: /CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
Certificate serial: 1CFB
Authority key identifier: BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/DF74E188561B11E79A807120C4F9AE02.roa
Signing time: Thu 19 May 2022 04:39:26 +0000
ROA not before: Thu 19 May 2022 04:39:26 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8071
IP address blocks: 167.220.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7419 (0x1cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
Validity
Not Before: May 19 04:39:26 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6285c9fd-bd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:61:5b:bd:41:63:91:59:23:f3:41:29:57:
37:b0:e3:8c:11:6f:24:ff:06:2e:e7:8e:66:e2:23:
36:08:0b:7b:46:7b:0d:27:06:16:d5:30:d2:52:a7:
9b:1f:4c:a1:2a:9b:45:5e:1f:f6:6e:e5:e5:dc:4f:
3a:a8:c2:a7:ca:35:81:a8:c2:e4:73:b7:0c:36:d9:
61:9b:49:02:cf:a6:2b:f5:c4:a4:12:f7:66:5b:52:
2c:3d:e1:07:b4:fd:74:8b:9f:df:e0:7a:7c:2b:32:
5f:e0:83:c7:e0:4d:81:5e:33:d1:72:52:41:6c:bd:
fc:0d:f8:38:dd:9c:7c:2c:67:0c:eb:7b:32:ad:87:
b9:2e:d3:e0:8e:df:8f:e1:1d:cf:d1:25:dd:69:77:
59:5c:90:e1:48:34:c4:30:bc:29:ae:e3:50:50:75:
1d:d4:7b:b2:5f:7c:44:13:2c:94:7a:e7:80:b9:5f:
7c:2b:ea:47:a2:ed:86:78:b4:2e:16:60:f3:7a:22:
90:88:e1:fb:f1:87:f5:78:87:f8:78:18:11:4b:11:
7f:04:2c:58:c9:19:82:16:06:4a:34:5d:b0:fc:b1:
37:af:7c:55:6d:8b:3c:17:34:7b:c5:8b:74:b9:bf:
da:25:31:06:cf:a0:f0:24:12:a5:62:47:8b:57:18:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:6F:17:0C:3E:3A:3A:3E:6F:85:CC:22:9E:5C:2F:2C:FC:18:5A
X509v3 Authority Key Identifier:
keyid:BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/DF74E188561B11E79A807120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.220.232.0/22
Signature Algorithm: sha256WithRSAEncryption
95:18:e7:eb:60:7e:92:b6:46:fb:17:b3:be:e6:a8:dd:3a:e1:
78:38:aa:69:d8:90:a6:ad:b7:5f:ac:41:00:b1:cf:52:0c:a9:
0b:18:ba:88:d7:6e:81:d7:db:4b:9e:83:7e:d2:8d:df:13:f9:
bc:3a:d7:81:45:31:fe:92:32:f2:86:4a:84:d8:4e:8e:96:2a:
8b:07:84:55:cd:7e:72:81:ef:b5:cb:a9:80:aa:74:c6:71:2d:
c1:69:6d:d2:18:cb:ec:ba:25:90:03:74:b9:8a:39:fd:f2:e0:
0a:e9:46:5f:fb:27:da:c4:81:45:2d:60:05:36:c3:53:ac:4b:
1d:c7:9b:0b:56:7b:a4:04:a2:c4:af:bf:25:6a:00:49:2e:e7:
d7:b6:24:80:2c:fd:ae:2d:4b:a3:2e:5c:16:60:50:18:fe:ce:
df:a7:d2:0e:f0:7e:5a:ed:0e:c9:81:9c:2c:de:bf:0b:b1:1b:
5c:93:05:fb:8e:bc:99:c2:5f:8e:33:9e:80:0a:65:4b:31:07:
c4:82:05:92:5d:6b:e5:07:2d:d4:9b:7b:fb:02:34:3a:f3:1c:
2a:f5:75:0a:1f:5f:e0:f7:08:a8:4a:0c:c0:1f:f1:b1:a3:7e:
59:7b:cf:d5:97:8b:d1:51:75:93:c1:ba:27:11:eb:47:39:c6:
ed:a4:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-fra.rpki-client.org