Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/82297EBEB26C11EC94F2571FC4F9AE02.roa
File: 82297EBEB26C11EC94F2571FC4F9AE02.roa (raw, json)
Hash identifier: rwKvQ5IAvKK5H7p64HdOTOnteeOdE2mY+TsZdM+Z7aM=
Subject key identifier: 5F:20:5F:45:09:52:A6:3C:A8:C2:6C:E2:B5:85:A2:2F:CA:12:23:DD
Certificate issuer: /CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Certificate serial: 0A35
Authority key identifier: 81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/82297EBEB26C11EC94F2571FC4F9AE02.roa
Signing time: Sat 02 Apr 2022 10:06:05 +0000
ROA not before: Sat 02 Apr 2022 10:06:05 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 139601
IP address blocks: 2001:df1:3280::/47 maxlen: 47
2001:df1:3280::/48 maxlen: 48
2001:df1:3281::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Validity
Not Before: Apr 2 10:06:05 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6248200d-eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:8f:a4:6d:b0:ad:05:7a:12:73:a1:6b:f9:
18:22:12:1d:49:4d:8f:ca:29:18:0d:98:ff:3b:a2:
cd:06:0b:a6:f1:72:90:b0:56:40:50:fb:42:71:4e:
87:e7:3e:b3:a1:45:cb:7f:41:1d:b2:79:9f:6d:b5:
d8:07:f9:29:c0:9c:ba:9a:f4:92:8f:8d:2c:b2:6b:
50:a9:78:1b:4b:18:3f:73:53:b1:25:36:76:f2:b1:
89:4d:a2:5d:e6:c8:1b:67:71:3b:22:e0:f7:01:5e:
11:81:63:c8:7e:9d:9e:08:e2:60:9d:bb:d0:46:f6:
60:6e:4e:43:16:0c:14:e9:f2:ac:3b:e4:9d:16:8b:
63:29:13:7d:90:24:a8:48:07:1b:42:8c:01:8a:82:
26:a4:31:75:df:1e:20:b1:c7:5e:bc:1b:69:87:07:
75:a8:f0:f0:71:ac:e1:24:83:9d:8c:10:49:94:04:
ad:d2:b9:71:22:3a:6d:c5:56:29:51:d1:b4:ab:ee:
f1:3f:c3:9d:b1:8b:3e:56:61:ee:0e:9e:32:81:2b:
de:6b:2c:3f:76:34:4c:37:a6:67:ce:73:09:2e:5e:
15:5b:10:04:2a:06:61:d1:c7:30:84:c5:dc:ca:3d:
29:92:52:0d:cf:63:7f:5e:46:f1:e0:67:b9:f4:49:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:5F:45:09:52:A6:3C:A8:C2:6C:E2:B5:85:A2:2F:CA:12:23:DD
X509v3 Authority Key Identifier:
keyid:81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/gVY-KNSFppZM210ZVTQj0k3y2U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/82297EBEB26C11EC94F2571FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:3280::/47
Signature Algorithm: sha256WithRSAEncryption
05:3e:08:b4:a3:4c:bf:b3:e1:07:e5:ca:7c:22:7b:5f:e3:7d:
d7:a5:2e:ae:1a:ba:4f:82:a2:2c:d4:0b:f3:9e:83:cb:56:aa:
30:3d:a4:2d:b3:03:61:6b:7e:6d:1c:c1:56:ec:ae:25:ab:b2:
03:cd:f7:e4:10:13:98:51:83:f8:ee:3d:6b:90:21:ff:79:87:
64:26:b3:1d:2e:7f:44:f8:17:94:c8:d1:86:68:fa:6d:a4:93:
49:33:d0:3e:d4:6b:ce:1a:d5:f7:88:ec:8d:85:95:ff:d8:3b:
36:35:6d:b4:05:ed:95:2d:f2:9a:f0:c8:f1:6c:57:97:80:b8:
87:aa:f5:63:18:7d:ca:4d:90:b2:ce:0a:0a:4a:87:52:8f:37:
94:dd:0b:7a:a5:5b:95:fe:99:fd:56:64:81:b2:84:5c:6e:60:
af:0f:4a:6e:1f:fb:34:e6:61:04:01:a5:c4:07:45:57:68:ec:
bc:91:e1:10:5a:25:cc:15:2f:71:e8:55:37:84:f2:89:f8:67:
ad:03:78:ef:19:8f:2f:c8:03:88:6e:6d:e6:00:e9:5e:7f:73:
09:e5:67:2e:ea:fe:04:93:e6:c4:7f:8c:2a:60:7f:f0:52:35:
32:8b:d1:8e:01:30:6e:f4:1a:fc:cd:31:3e:c4:95:a2:7d:b4:
bc:c0:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org