Route Origin Authorization
$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
File: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier: SJTu1mXSz70g4MIdW5PrOQG5Hx04fQN0Z5SFTd7CdOo=
Subject key identifier: 16:20:F9:D0:0D:9C:1E:8E:B1:07:F9:C7:BE:26:F1:15:47:99:8D:CA
Certificate issuer: /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial: 49178F2641D5949EC5F53380F70F5527308738AA
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access: rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
Signing time: Tue 07 May 2024 11:00:00 +0000
ROA not before: Tue 07 May 2024 10:55:00 +0000
ROA not after: Tue 06 May 2025 11:00:00 +0000
asID: 983
IP address blocks: 103.172.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:17:8f:26:41:d5:94:9e:c5:f5:33:80:f7:0f:55:27:30:87:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Validity
Not Before: May 7 10:55:00 2024 GMT
Not After : May 6 11:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:8b:a8:87:79:79:47:4a:bf:1c:be:6e:2b:
24:c3:99:7e:66:fa:7a:ed:ed:2f:61:f6:36:06:0a:
b5:17:62:0e:2a:54:fe:19:87:09:7f:50:b5:57:3e:
8f:6c:5d:62:22:17:44:4d:15:7e:8b:6d:e6:23:33:
e8:b6:7b:f5:6f:a4:c2:75:a8:78:96:61:90:21:e8:
d1:88:72:66:a7:79:2f:51:d5:b8:99:f0:af:f9:96:
ff:aa:9b:f8:1b:fc:93:1e:a9:53:24:9b:08:0a:a1:
6b:ad:09:22:92:ab:17:78:80:22:4a:dc:23:01:90:
bd:b6:c7:f5:71:fc:42:c0:62:df:b8:11:09:7c:45:
64:99:7f:5f:6a:46:e6:06:34:56:94:97:76:2f:0e:
88:37:75:4f:1a:b7:76:f7:50:56:66:df:67:94:63:
97:02:1f:bb:7f:0d:f1:2a:75:c1:44:c3:55:52:9a:
6e:e8:80:a7:bd:69:ed:3c:4b:fe:a7:94:75:6b:3d:
44:ef:44:ab:10:58:a2:20:8b:1e:d9:be:ec:35:17:
fd:c7:d9:9f:f0:7e:7c:27:a2:5d:7d:e6:5e:8f:d5:
d9:8a:ca:b3:0a:f9:f5:b1:07:d5:97:91:25:97:06:
58:8d:34:72:12:59:c9:af:9f:88:f0:36:a9:29:c4:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:F9:D0:0D:9C:1E:8E:B1:07:F9:C7:BE:26:F1:15:47:99:8D:CA
X509v3 Authority Key Identifier:
keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.40.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:99:0f:ef:2f:76:e9:16:fa:a0:04:74:04:fd:bc:0c:0d:f1:
b8:5f:3a:cb:6c:f1:0f:89:0c:08:f2:9b:02:e7:ad:9f:c1:4c:
ae:bf:1b:f0:56:3d:cd:ae:d3:3c:08:fc:30:58:f8:44:40:78:
4c:b4:f6:f5:c6:f2:74:f3:d9:f8:b3:d9:9f:c3:d3:ea:c3:d5:
c2:9b:e1:09:c1:22:56:6f:74:70:e9:2f:a3:16:6f:45:d8:bc:
20:2c:b1:79:f2:a7:09:b6:09:34:7d:0a:10:df:03:70:6b:79:
d3:88:aa:9b:75:e1:03:11:41:c1:d4:ed:93:23:49:d1:30:7c:
8a:9f:0f:8c:26:a0:c4:80:dc:9a:92:db:16:40:0d:f2:bd:05:
b7:d8:d3:58:99:b5:ec:f7:0d:8d:08:2b:fb:18:a0:c0:97:1d:
43:1e:35:44:4d:89:bd:76:6e:9c:b2:8f:66:ad:ba:3f:cd:36:
52:a8:f4:9f:5e:3d:57:06:28:b1:50:f6:9a:d5:78:32:48:fb:
fa:bf:c6:55:9f:2c:34:b6:f4:bd:72:95:e7:74:bf:78:50:d3:
94:bc:76:3f:24:dc:bf:a5:38:13:68:5f:93:c0:39:a8:e6:44:
64:d7:d5:2e:d8:03:4b:5d:70:fd:96:7a:f0:2b:be:bf:f8:dd:
6c:e1:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:25:26 2024 by rpki-client on console-fra.rpki-client.org