Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/107499B6405611EDB63AFE56C4F9AE02.roa
File: 107499B6405611EDB63AFE56C4F9AE02.roa (raw, json)
Hash identifier: 6DNyawJwOXazefP2//8ya/JDWG+TSeoanusqd+5KgmY=
Subject key identifier: 80:49:A0:6B:91:6F:0A:D9:06:21:45:FB:B8:5A:3D:F3:CF:09:AB:8C
Certificate issuer: /CN=A9115558/serialNumber=1208A2DC34F85BC56E138C14069B9EB7782639D9
Certificate serial: 02A5
Authority key identifier: 12:08:A2:DC:34:F8:5B:C5:6E:13:8C:14:06:9B:9E:B7:78:26:39:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Egii3DT4W8VuE4wUBpuet3gmOdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/107499B6405611EDB63AFE56C4F9AE02.roa
Signing time: Fri 30 Sep 2022 00:23:11 +0000
ROA not before: Fri 30 Sep 2022 00:23:11 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 55923
IP address blocks: 175.45.144.0/22 maxlen: 22
175.45.144.0/24 maxlen: 24
175.45.145.0/24 maxlen: 24
175.45.146.0/24 maxlen: 24
175.45.147.0/24 maxlen: 24
175.45.152.0/22 maxlen: 22
175.45.152.0/24 maxlen: 24
175.45.154.0/24 maxlen: 24
175.45.155.0/24 maxlen: 24
175.45.156.0/22 maxlen: 24
180.178.64.0/22 maxlen: 22
180.178.64.0/24 maxlen: 24
180.178.65.0/24 maxlen: 24
180.178.66.0/24 maxlen: 24
180.178.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115558/serialNumber=1208A2DC34F85BC56E138C14069B9EB7782639D9
Validity
Not Before: Sep 30 00:23:11 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=633636ee-f809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:07:e8:97:1e:51:e6:61:c9:99:c0:54:d9:
1b:8e:8b:29:55:e4:80:e0:d0:fd:61:24:52:af:96:
aa:a5:a1:7b:69:59:5c:26:df:a2:b7:20:61:f6:66:
c8:36:5c:d3:85:5e:60:2d:f6:e9:5b:5d:63:7a:75:
10:88:43:26:a9:4d:d8:7a:d3:ad:39:1a:e0:e8:cf:
fd:f5:5b:e9:b3:d6:0a:dd:1f:5b:55:bc:9c:8a:a6:
cc:e4:57:02:c7:e4:3c:6c:bc:3d:da:ba:d6:bd:80:
69:e2:f2:b3:c3:aa:48:4e:4a:2d:ae:ca:a1:a4:5b:
62:e3:bc:75:e4:9b:81:db:ab:47:2b:fc:a5:db:2c:
d4:85:8d:35:ca:a8:56:dc:4e:53:91:20:a5:3b:41:
99:81:98:1e:c0:f8:65:47:d2:2d:71:a6:7d:41:31:
05:de:45:bd:e3:f9:bd:16:5a:8c:99:40:03:5b:95:
45:cd:d6:43:40:73:fd:f2:3b:78:5e:2d:e0:6d:4b:
5b:9d:e5:2c:8e:81:45:23:c0:ab:d9:e1:36:28:33:
11:7e:ba:46:f0:5b:bd:58:b9:ad:ae:ff:e9:78:14:
01:f2:dd:a7:df:c2:45:66:f4:e8:ea:c6:a6:83:73:
82:0e:bf:39:63:15:e8:13:ff:2a:61:2d:ff:02:df:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:A0:6B:91:6F:0A:D9:06:21:45:FB:B8:5A:3D:F3:CF:09:AB:8C
X509v3 Authority Key Identifier:
keyid:12:08:A2:DC:34:F8:5B:C5:6E:13:8C:14:06:9B:9E:B7:78:26:39:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/Egii3DT4W8VuE4wUBpuet3gmOdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Egii3DT4W8VuE4wUBpuet3gmOdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/107499B6405611EDB63AFE56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.45.144.0/22
175.45.152.0/21
180.178.64.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7e:5d:37:ae:07:57:7b:d9:1c:1b:89:b1:c4:a6:d7:6a:cb:
bb:43:9c:db:fe:b7:1a:a9:31:8f:ce:81:61:5c:b1:e6:e6:66:
a3:c9:a5:c2:2f:66:54:b1:df:f5:4b:2a:3c:fe:7b:b6:4d:10:
ad:c3:f1:54:d4:24:a3:63:35:8b:17:ac:ac:c4:35:e4:93:3d:
a6:8a:b8:4b:38:41:61:33:27:79:97:0c:84:2d:6d:15:e2:28:
42:3f:88:6c:da:e6:fe:26:98:51:f5:2b:02:94:a4:1f:5e:4a:
fc:13:bd:10:c5:70:40:38:1a:f1:db:29:28:a4:9a:24:fa:a9:
7c:88:6b:6a:41:02:9f:7a:6f:ea:86:a2:90:86:fb:68:2b:e1:
c5:f5:28:78:28:bb:8d:58:75:a0:ef:3c:dc:14:27:50:67:c1:
b0:ba:b4:a6:bf:66:fe:cc:11:a6:4c:70:1a:d8:6d:24:5e:b5:
65:75:44:c2:66:a8:88:fd:90:b3:f4:aa:4f:ef:8a:0e:00:42:
31:c4:85:1d:a0:ba:6c:a2:73:af:e0:e2:cc:0c:a0:df:15:d4:
b8:38:62:93:a6:87:34:19:76:c8:36:00:67:5b:9f:47:dc:3a:
ee:7b:f6:f2:a0:6e:dc:8c:02:d6:19:7e:7a:9f:77:51:b8:33:
b4:87:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org