Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
File: 89CBC0AEE13B11EAACE94567C4F9AE02.roa (raw, json)
Hash identifier: bRDyJEQKEqWHcwfgp40CE+QkJW/ochpXhG7HH2fCCjo=
Subject key identifier: 8D:0B:28:83:1F:71:C6:02:68:CC:91:5E:E3:FD:75:36:49:21:73:9D
Certificate issuer: /CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
Certificate serial: 0704
Authority key identifier: 0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
Signing time: Mon 04 Apr 2022 21:47:44 +0000
ROA not before: Mon 04 Apr 2022 21:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140305
IP address blocks: 2001:df3:2e80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796 (0x704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
Validity
Not Before: Apr 4 21:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624b6780-e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:ce:b4:5b:91:84:6c:97:91:12:53:f8:53:
6b:6b:ab:d0:63:c3:70:8b:e4:1e:3a:f3:08:c0:2f:
41:18:5e:88:4c:52:4b:15:da:b2:79:0b:39:59:1f:
fa:ae:db:9b:3a:0a:57:74:fa:13:77:7a:18:8a:93:
12:33:39:2c:51:59:1c:9e:cc:07:ef:f7:3f:44:16:
5e:01:86:29:81:af:26:fa:53:ae:0b:f2:00:92:ae:
0a:a3:4b:49:51:00:fd:2d:e5:77:57:65:be:f1:e0:
ab:58:03:bb:2e:7d:1a:b8:59:9e:8b:30:1c:c1:c0:
e8:89:9f:fb:30:1d:4c:71:3a:f8:ef:d2:f8:27:6c:
bd:3c:90:ee:27:6e:e6:f6:25:30:d0:ac:15:fe:88:
4c:a5:4f:89:65:c0:e6:5e:54:97:ef:28:be:92:14:
38:c8:71:fe:3e:a9:07:46:e4:61:5e:74:7c:85:99:
98:1f:df:5a:1c:48:72:f3:19:16:8b:c4:b8:05:f4:
81:37:dd:7a:61:c2:83:2c:49:3b:45:20:95:01:df:
5c:8e:e5:66:90:95:83:eb:04:04:7a:99:1f:9e:08:
3b:78:98:c3:1b:9e:c8:b4:58:99:1f:48:89:6e:33:
9a:43:75:8a:ae:d9:e2:62:26:49:9d:c7:e8:c5:8b:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:28:83:1F:71:C6:02:68:CC:91:5E:E3:FD:75:36:49:21:73:9D
X509v3 Authority Key Identifier:
keyid:0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/CkTNg8CQGlZ_xywZEmYXiBpHoSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
07:e8:ee:97:8f:6f:04:52:19:c3:eb:b3:bc:0d:6c:8a:e2:aa:
51:4c:4e:c0:a0:ea:32:58:fd:e8:04:c5:16:80:25:82:5a:eb:
5b:a6:aa:16:2b:8a:0f:8c:45:bb:bc:ad:e1:6d:f7:ca:af:5a:
83:47:2d:6b:96:43:e5:95:2d:4f:d8:bd:7d:6b:5a:72:2f:6c:
e9:df:73:e2:95:b1:71:24:30:f3:5f:81:fb:4e:48:3e:e2:a9:
68:70:06:0e:92:d4:bc:de:91:d2:08:a6:e1:34:f6:6a:5c:34:
42:3a:81:d5:90:28:5e:5e:fe:56:d4:23:2c:1e:42:52:7c:e1:
65:b9:2c:1a:a8:79:7e:7d:bc:9f:6a:45:42:c6:44:b9:26:7b:
ce:ef:ac:d9:c7:d5:df:1a:5b:71:3e:09:8c:bc:e7:3a:ac:5f:
01:32:50:59:ae:99:09:ea:2b:c8:a0:79:e9:4f:83:a6:c7:27:
78:23:27:c6:a8:32:93:61:1a:40:09:04:04:77:a1:ff:28:31:
40:cd:65:4f:48:a9:d1:8f:71:e1:ba:19:e1:9c:bd:35:0d:d3:
95:2b:67:71:3c:9a:58:02:39:48:5f:70:a2:5a:a1:be:3f:73:
8d:47:74:d6:23:31:d9:00:a0:38:88:37:4b:d6:72:73:c8:85:
5c:33:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org