Route Origin Authorization
$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
File: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier: 0g6lJClBm5zb2AP0yDihG3r4Mx0aWaBqi1ANePyMfxM=
Subject key identifier: 78:5A:76:A9:7A:99:E6:13:10:D7:25:55:D4:A1:A3:58:3E:35:FF:20
Certificate issuer: /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial: 0F9D3BC8EFA2B53436B23F00AF68B1A933720CA6
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access: rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
Signing time: Tue 18 Jun 2024 16:25:11 +0000
ROA not before: Tue 18 Jun 2024 16:20:11 +0000
ROA not after: Tue 17 Jun 2025 16:25:11 +0000
asID: 983
IP address blocks: 103.172.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9d:3b:c8:ef:a2:b5:34:36:b2:3f:00:af:68:b1:a9:33:72:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Validity
Not Before: Jun 18 16:20:11 2024 GMT
Not After : Jun 17 16:25:11 2025 GMT
Subject: CN=785A76A97A99E61310D72555D4A1A3583E35FF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:2c:6f:3e:3b:b0:c2:29:88:a2:35:53:20:
b9:ba:3c:ef:b5:7b:99:f5:d4:1d:57:79:e2:f8:97:
80:9a:9b:03:37:a4:14:60:02:6e:f5:20:8c:91:3a:
37:6d:05:3b:69:6a:3f:55:26:14:d0:78:cd:1c:83:
3c:3b:bb:73:01:fb:bd:8b:22:09:ae:40:b5:2c:9f:
2b:fb:63:43:d1:61:21:8d:9c:ec:52:33:9b:77:7f:
d7:b3:ff:ec:bf:b9:b5:41:c8:e6:75:39:02:59:31:
af:4b:15:0b:e2:d6:2a:04:7d:b7:9d:d2:10:6a:f1:
3e:22:1e:46:3e:64:83:d5:3a:c9:2b:1c:ed:23:65:
c3:cf:ee:fb:25:46:dc:3c:ef:0f:fa:6f:e8:66:9e:
58:23:0c:c5:8c:04:e1:88:59:76:25:d4:a3:a2:fa:
5c:ae:c5:41:ce:89:47:7b:d3:61:13:71:a2:cf:e6:
b5:36:b9:08:46:b6:da:8a:ed:33:ab:28:fb:23:61:
32:a3:ed:75:d0:ae:49:e7:15:e4:36:f2:27:93:c7:
22:9e:31:ed:2f:70:ad:0f:43:2a:64:af:36:a2:9c:
30:c8:34:09:2d:a9:fb:56:15:d9:f1:e8:b2:c9:07:
e4:52:f5:bd:4e:e7:b8:c2:aa:97:4b:f0:02:6c:ee:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:76:A9:7A:99:E6:13:10:D7:25:55:D4:A1:A3:58:3E:35:FF:20
X509v3 Authority Key Identifier:
keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.40.0/23
Signature Algorithm: sha256WithRSAEncryption
35:54:a1:de:7f:25:e2:5c:4a:38:54:e3:17:78:a1:fd:54:a1:
ee:5b:a8:83:f2:70:65:48:dd:d8:3b:a9:83:a5:11:01:a4:d8:
43:92:5f:31:07:a0:7d:4b:06:26:75:ad:95:65:83:80:7c:a3:
0a:ac:b3:b6:4f:20:3b:e5:80:d3:7d:64:f8:fa:9f:55:9a:f4:
5b:4e:59:26:73:c6:13:87:ea:be:54:2a:25:2f:16:3b:3e:6c:
76:18:d0:cf:45:a4:37:88:e1:5f:b2:e7:6c:d9:40:73:44:d0:
38:46:51:05:3a:ca:19:63:ad:09:d7:27:33:3f:e3:e5:ec:25:
e7:95:6a:09:c6:ab:6e:78:41:4b:39:2d:3b:e0:53:e5:cb:9b:
46:58:70:be:d8:77:67:ea:b1:c9:24:fb:36:1c:08:14:99:8b:
c0:f0:bb:b3:83:19:69:41:af:48:3e:a1:12:47:d2:cf:48:e4:
1d:a7:0a:00:1e:69:7a:eb:19:44:37:66:d9:0c:37:5c:53:e7:
f6:22:14:5a:74:90:0f:7b:d4:b0:fb:cc:ee:89:ac:a4:34:80:
b2:55:56:ad:a6:4d:70:13:69:53:89:d7:d0:46:0e:68:10:86:
96:f8:56:82:9c:e3:27:28:6b:f8:2f:77:6e:3f:5b:24:3f:9b:
d1:d6:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org