Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A468BC28391211E99E31F655C4F9AE02.roa
File: A468BC28391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: 2FEfH1lzRhZLdienhri0vT3Ytt6M5R18GYq3QGL56UY=
Subject key identifier: B1:97:4A:06:D9:35:D2:CF:9F:6A:BE:93:75:18:10:FE:DA:DA:40:FC
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0EC9
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A468BC28391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:28 +0000
ROA not before: Sat 01 Oct 2022 18:55:28 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 41767
IP address blocks: 2403:5180:19::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:28 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d20-4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:9b:46:99:7b:50:26:1a:dc:10:f2:cf:45:
8b:99:91:7f:eb:18:f5:17:dd:ef:e1:77:e6:a5:60:
73:11:b4:19:b2:ea:6b:c1:f7:5c:bd:74:0b:b6:e2:
93:64:5e:57:29:4c:5f:a4:af:81:46:e1:94:0e:12:
ac:f9:0c:95:4a:27:48:0c:0f:cd:2b:1c:80:64:9d:
c5:5e:b7:d8:6e:f6:dd:6f:19:c6:6f:4c:44:bb:b1:
09:b1:22:fc:4e:93:d1:59:31:fc:04:7c:5d:49:e3:
df:39:37:17:65:a5:44:e4:11:84:2c:70:21:48:fd:
c1:f3:9d:68:98:14:b8:91:df:6b:b3:70:c7:ec:e7:
c8:a6:21:03:9b:eb:fa:2e:7b:ba:80:ca:b4:8f:02:
56:4b:4b:d1:8b:ad:18:cb:b8:3a:25:54:cf:fa:6b:
b7:2d:6c:a5:de:4d:25:8e:78:c4:80:44:8b:d9:50:
cb:87:7e:67:5d:63:fd:3c:27:b2:93:19:c4:f8:1f:
2d:f5:4d:48:41:85:19:70:32:a4:34:11:0f:59:22:
3d:ed:92:3e:17:99:b5:a5:8c:53:69:32:57:43:c6:
ae:83:a8:b6:6f:91:fa:cf:33:00:c7:5b:23:4b:c1:
69:39:96:3d:0a:a0:79:62:45:31:d7:14:e5:94:49:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:4A:06:D9:35:D2:CF:9F:6A:BE:93:75:18:10:FE:DA:DA:40:FC
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A468BC28391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:19::/48
Signature Algorithm: sha256WithRSAEncryption
75:41:a5:bf:8f:12:a7:f9:55:a1:1d:3b:90:a2:98:37:5c:c8:
e9:9b:9f:93:c8:d6:a2:a6:d9:b8:60:14:f5:f9:0b:3d:66:ea:
a9:da:7b:a9:6d:95:19:e0:3d:44:1f:3b:3d:20:1f:df:5e:1b:
c0:d4:3e:6d:8e:29:9b:75:e6:d6:ad:09:74:23:e0:ba:22:b6:
06:6f:e4:0d:e4:19:22:45:5a:6c:9f:9c:3a:87:a3:6a:5a:8c:
ee:3d:07:c9:e6:06:fa:35:31:ec:90:98:b6:7d:4b:0f:28:d0:
8a:6e:d1:9c:d6:c9:64:dc:3e:ee:c7:a1:01:2e:fa:db:a6:26:
07:8b:de:27:8f:ba:c6:3a:2b:33:ac:af:5c:d7:d5:19:95:8b:
fb:d0:c0:2a:c0:56:c0:30:6b:40:84:b2:97:b4:28:48:cb:15:
27:b3:a6:71:6f:9e:7c:ee:c3:67:90:5c:dc:22:b0:57:42:43:
c6:87:04:ab:e8:68:31:8f:7e:df:b8:d1:2e:ea:b3:7e:9e:17:
91:a6:fc:de:4e:e3:7d:5c:48:af:6f:92:ad:23:10:db:9a:eb:
cf:76:c1:c5:97:74:f4:ad:dd:9a:65:24:0c:44:e5:3e:8d:a6:
a5:6a:37:23:f4:ab:8a:10:0e:a9:92:61:99:cd:fb:ce:64:f4:
6c:77:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org