Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
File: 129BCA9CF65611E78F225A3AC4F9AE02.roa (raw, json)
Hash identifier: sRWsYpbZsrSpUDJ88Ip20v6D5m9uNldrVA43o5l+MFQ=
Subject key identifier: EA:51:F4:E2:A6:1F:CE:FC:81:FF:CD:46:82:C3:2E:59:31:71:BE:2E
Certificate issuer: /CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Certificate serial: 19D1
Authority key identifier: 18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
Signing time: Fri 02 Dec 2022 17:23:24 +0000
ROA not before: Fri 02 Dec 2022 17:23:24 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 45920
IP address blocks: 2403:780:fec0::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6609 (0x19d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Validity
Not Before: Dec 2 17:23:24 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638a348c-6a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:76:95:06:8a:03:a9:24:00:c9:8f:4e:f4:
f1:9e:e7:ab:0c:0a:e3:25:2b:38:70:e7:55:c7:68:
62:e9:36:51:3f:e4:c8:2b:42:1e:89:63:0f:3a:0e:
4d:bb:15:a7:48:7e:61:68:2c:de:20:16:3a:54:de:
cb:d4:e1:76:6c:31:28:6b:26:d4:f5:64:04:0e:24:
34:c7:1a:8d:ce:11:4d:0d:64:d8:07:56:87:42:ad:
68:54:0c:d0:cf:7b:39:4b:70:f9:35:b7:7a:ef:32:
7c:d7:de:c3:75:d4:55:31:71:90:1f:23:fb:47:63:
14:19:31:48:ef:3e:bf:59:ae:47:83:62:65:a8:5c:
b1:05:b0:75:e3:1f:9b:4f:d1:24:73:f9:5f:cd:30:
68:e9:ff:98:10:5c:27:5d:69:c5:3d:03:6c:9f:e9:
57:60:d5:e3:15:7f:8e:e3:2f:38:90:be:d5:c7:b0:
3d:b8:78:3e:ba:39:68:d6:1e:f4:05:1d:fe:42:a8:
c2:bb:c9:dd:ef:3a:37:56:de:9c:d1:9f:cc:56:1e:
d0:ce:a9:1d:0e:15:ac:74:81:72:c9:89:22:f6:1a:
de:66:af:8e:99:5f:5e:50:f2:51:08:e7:b0:80:6b:
61:6e:e6:b9:86:fc:25:22:1a:dc:5e:25:2d:76:2e:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:F4:E2:A6:1F:CE:FC:81:FF:CD:46:82:C3:2E:59:31:71:BE:2E
X509v3 Authority Key Identifier:
keyid:18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:780:fec0::/42
Signature Algorithm: sha256WithRSAEncryption
72:76:eb:e1:9b:f9:67:45:29:85:7c:10:5f:19:35:4f:9c:ef:
ef:cb:b5:e1:91:bf:29:dc:d1:97:b0:fa:d6:cf:1f:91:43:3b:
f3:be:56:70:7d:3a:cb:1f:c8:9b:74:12:3b:25:9c:e2:9e:0f:
9d:83:e5:cc:85:36:63:32:bc:9e:5e:be:0b:63:4a:72:80:29:
35:46:97:0e:8a:2a:aa:ce:ff:51:6f:31:88:1c:c0:99:5b:4b:
c6:62:ba:e4:48:30:08:2a:15:4e:13:e6:73:cf:53:c0:0e:64:
de:cd:a4:08:79:c2:6a:74:6d:73:19:0b:ca:94:db:3f:0b:81:
9b:f3:af:c5:5a:6a:c7:81:a0:15:fa:16:0b:67:ab:9f:e8:83:
15:d7:16:dd:64:ff:a0:15:52:3a:1d:66:62:26:57:f4:28:06:
da:1d:89:8d:85:4c:cd:7a:7c:01:18:bb:7c:a7:67:22:62:c6:
c7:62:a3:a2:ad:b2:f0:6c:c6:cf:2e:c7:2a:b7:5f:e4:0f:aa:
c7:65:a7:8e:45:b5:ae:81:51:81:e4:0e:07:75:98:0b:52:d9:
d6:5b:d9:98:19:d5:6b:fa:7f:10:c9:12:83:ca:94:85:ef:27:
bf:cf:ca:4f:62:89:f4:c4:b2:8a:a3:51:fb:bd:f9:c6:01:b5:
5a:55:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org