Route Origin Authorization
$ rpki-client -vvf rpki.akrn.net/repo/AKRN/2/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
File: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier: +s33RBTE//XR0BQCBfKLt7t3uu9FJqBItyctXTXxvSg=
Subject key identifier: D8:3F:C8:C4:22:9D:AD:08:97:0B:4A:B6:16:04:5B:3C:D0:82:A4:E2
Certificate issuer: /CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
Certificate serial: 0837AFB03EFCB6EF8C1566EBBDC2639B9B58173F
Authority key identifier: B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer
Subject info access: rsync://rpki.akrn.net/repo/AKRN/2/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
Signing time: Tue 18 Jun 2024 16:25:11 +0000
ROA not before: Tue 18 Jun 2024 16:20:11 +0000
ROA not after: Tue 17 Jun 2025 16:25:11 +0000
asID: 38136
IP address blocks: 103.248.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:37:af:b0:3e:fc:b6:ef:8c:15:66:eb:bd:c2:63:9b:9b:58:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
Validity
Not Before: Jun 18 16:20:11 2024 GMT
Not After : Jun 17 16:25:11 2025 GMT
Subject: CN=D83FC8C4229DAD08970B4AB616045B3CD082A4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:d6:d2:bc:59:0a:f6:ae:ed:bf:52:be:d5:
a7:12:27:de:d1:e9:4b:c5:87:c1:6a:a4:0d:fe:02:
3e:66:ad:16:72:43:3a:72:2b:08:76:4d:26:cd:e9:
2d:b4:f9:05:f8:1b:25:ff:7c:63:39:42:2b:01:a5:
7b:e7:a0:c1:b4:90:93:1c:d2:eb:cd:a2:4c:00:41:
db:72:65:3f:01:f0:98:ea:ca:65:7b:7e:4d:bc:96:
26:31:3f:ed:f0:a5:2c:b7:9e:55:b1:7d:0d:0e:74:
8b:2a:3a:88:90:e3:f6:73:99:18:fa:6b:98:00:70:
d6:c5:be:7e:a9:39:c4:48:3b:75:ca:29:c3:46:a7:
c5:32:ea:8d:b7:43:a1:91:28:0d:9b:b4:0e:b2:28:
58:76:e0:c0:d5:9e:be:ee:82:dc:e9:74:58:62:78:
0d:a2:fa:cd:47:aa:bf:71:ba:32:f4:40:a0:54:de:
8c:b9:4b:a8:0a:1b:c8:c2:8b:fd:91:cf:f6:32:97:
04:8f:cf:8b:5c:40:a6:5a:b8:9a:d8:3f:c7:ae:fe:
04:ae:f1:d9:2b:66:68:20:26:d7:b4:cc:05:7f:6c:
89:ee:86:29:70:49:02:3c:ad:12:5c:0d:1e:0b:96:
15:e1:4c:5b:91:46:ab:d4:0c:d7:28:4d:6f:d1:92:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:C8:C4:22:9D:AD:08:97:0B:4A:B6:16:04:5B:3C:D0:82:A4:E2
X509v3 Authority Key Identifier:
keyid:B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.akrn.net/repo/AKRN/2/B70B10266A28A9F2E9DF2F7EFD4399B69E488B34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/2/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b0:51:75:b5:ac:df:eb:83:52:ed:0c:cc:30:ff:f5:8f:47:
ac:41:20:0d:79:44:f9:8b:e6:4e:0d:2a:7d:05:14:ba:64:04:
ec:91:08:67:e9:54:12:ea:b7:ab:91:60:4c:7f:3e:c7:43:9f:
9e:bf:ab:bd:48:82:60:ba:5e:60:bc:7e:18:a9:8c:81:dd:50:
a6:22:85:ab:58:ea:63:ce:db:57:11:19:a5:d9:c0:44:3b:27:
bd:28:92:a1:c5:0b:ea:54:51:7d:00:f5:9c:a9:52:50:20:31:
15:8d:e2:c2:f2:81:39:e1:41:89:e6:2e:3d:3e:20:24:e6:db:
8f:cd:69:98:d2:3d:c3:e6:13:0e:45:eb:fd:1d:b1:97:04:80:
20:70:e3:29:aa:f8:1c:0c:d4:f4:26:ce:66:4f:6a:3c:75:14:
32:f9:bb:4a:97:fc:be:42:b1:93:cb:b1:2f:78:f1:48:f9:04:
d2:cc:7c:0c:c9:a5:ef:59:38:d0:93:83:fd:4c:d6:6e:90:1e:
a1:89:8a:1f:2d:8c:2b:e0:08:da:c7:36:41:b1:bb:eb:3a:a2:
f9:29:ff:cc:8a:23:fb:42:59:f1:d9:d2:c3:f3:53:6f:6d:d2:
9f:2d:79:1f:99:07:43:6e:dd:e9:e3:1d:c9:3b:b8:26:b1:97:
b9:94:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org