Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/B633FD4605F311EBB7FFE64DC4F9AE02.roa
File: B633FD4605F311EBB7FFE64DC4F9AE02.roa (raw, json)
Hash identifier: Zeqx+VYSzMuUjGSoI/rQ0rItR0FOPDeIsan/UcWQ3h8=
Subject key identifier: 80:70:E4:E5:AF:A1:3D:C9:8B:E4:F4:27:7B:D0:9A:BC:FB:DA:3B:5E
Certificate issuer: /CN=A9124B5E/serialNumber=8B5FD7295B96C57EC978316FB128AF8A7B8DF3E5
Certificate serial: 0A4E
Authority key identifier: 8B:5F:D7:29:5B:96:C5:7E:C9:78:31:6F:B1:28:AF:8A:7B:8D:F3:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1_XKVuWxX7JeDFvsSivinuN8-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/B633FD4605F311EBB7FFE64DC4F9AE02.roa
Signing time: Wed 16 Jun 2021 06:45:48 +0000
ROA not before: Wed 16 Jun 2021 06:45:48 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 24242
IP address blocks: 2404:9540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B5E/serialNumber=8B5FD7295B96C57EC978316FB128AF8A7B8DF3E5
Validity
Not Before: Jun 16 06:45:48 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60c99e1c-a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:38:b0:a1:af:f6:4b:f3:29:8d:29:6a:72:
65:92:dc:86:63:92:b6:0b:ce:03:57:03:f6:59:2d:
e6:23:3e:34:39:7e:ec:a9:f9:98:bf:2f:d9:6c:7f:
b4:87:33:88:3a:90:07:cf:e3:a3:48:80:be:05:1f:
17:d9:06:40:ec:7e:b1:64:dc:db:8d:2f:30:ac:14:
e1:44:5d:76:68:94:36:58:b0:53:02:8f:f4:af:e3:
09:3d:2c:e6:ce:cb:ad:8e:40:59:db:b4:ba:b3:c3:
04:93:70:ac:8c:a2:c3:69:e8:0c:aa:36:a9:89:5c:
91:cf:6a:bf:ce:ce:19:4f:8d:1b:e0:8c:82:c1:c5:
e8:d7:d8:be:84:57:96:7a:a4:93:76:66:5b:ec:12:
b4:62:25:8e:d8:fe:bc:55:83:38:47:c4:9f:cf:1c:
ac:30:08:6d:85:59:2e:9a:ca:b1:ba:55:49:4a:7a:
63:5f:b4:2f:82:c0:a2:a8:b3:e7:75:a3:f7:8b:84:
2a:24:6a:e7:2f:70:8e:0a:cf:fc:5a:aa:0d:98:a4:
3c:37:90:5c:44:7e:cb:9a:98:a6:2e:9d:ed:cb:4b:
f6:35:1c:18:6b:c7:bf:b3:67:d4:d6:20:a8:84:05:
49:ce:29:02:93:29:73:30:75:a4:7f:2c:7a:52:46:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:70:E4:E5:AF:A1:3D:C9:8B:E4:F4:27:7B:D0:9A:BC:FB:DA:3B:5E
X509v3 Authority Key Identifier:
keyid:8B:5F:D7:29:5B:96:C5:7E:C9:78:31:6F:B1:28:AF:8A:7B:8D:F3:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/i1_XKVuWxX7JeDFvsSivinuN8-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1_XKVuWxX7JeDFvsSivinuN8-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/B633FD4605F311EBB7FFE64DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:9540::/48
Signature Algorithm: sha256WithRSAEncryption
bb:28:16:93:27:42:e0:fb:8e:c5:bd:eb:03:ee:f8:2c:3a:ac:
07:1c:6f:c8:49:35:52:cc:e0:0f:fe:da:6f:7d:45:46:57:00:
e2:a3:44:6b:db:52:37:43:0f:7f:30:44:15:5f:21:61:94:5b:
50:3c:07:4f:e9:d2:dd:a4:ec:da:97:1a:7e:d0:6c:72:b2:50:
b7:5c:8c:79:3e:3b:8a:93:79:f3:de:70:f0:b3:5d:ba:3c:34:
67:bf:5d:e3:68:ab:90:d1:57:f9:1e:0e:06:7b:92:91:a2:59:
99:4c:21:93:60:f5:6f:bc:66:12:fd:a3:7e:9d:f4:6c:89:10:
a1:12:a8:96:e1:a4:b1:c8:df:4b:24:2f:40:23:dc:15:02:e4:
85:14:ef:4a:70:7a:6b:2f:d3:0d:65:08:82:93:54:40:4d:e8:
54:3f:6d:8b:c5:df:02:85:57:dd:85:3c:fd:62:37:31:87:30:
b2:f4:e7:4b:d9:b4:c8:63:0a:92:ad:d3:5b:dc:54:fd:32:e4:
9b:9b:f3:1a:1b:89:5b:cb:ff:43:bc:d6:6e:64:71:bd:0e:d6:
d1:78:f8:1c:6e:61:7b:40:f0:b5:dc:86:e2:de:22:7d:21:87:
29:86:ec:84:82:ac:78:30:73:0f:fe:00:8a:a1:35:9d:6a:bf:
bb:30:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org