Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
File: C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa (raw, json)
Hash identifier: a91WeEaEZldwu+MF2ib/21HeN0qd00q8rTAZ7nLtBNg=
Subject key identifier: F1:05:15:7C:48:5F:09:6F:B0:C3:F8:67:F7:F4:69:3D:38:A4:B4:4A
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0ECF
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:35 +0000
ROA not before: Sat 01 Oct 2022 18:55:35 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 9312
IP address blocks: 2403:5180:66::/48 maxlen: 48
2403:5180:6666::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:35 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d27-4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:6b:3f:c5:36:6a:12:bb:ad:7b:c8:65:06:
2d:3d:3e:2b:49:a6:00:04:81:6f:1e:0a:c3:51:e0:
c9:df:a8:c1:e6:3a:49:19:42:b8:55:66:6e:df:80:
d4:c0:d4:e7:47:7e:93:ab:0b:d0:83:bd:c4:4d:b3:
60:7c:75:4c:b5:7c:4b:f8:a6:ea:80:23:4a:f2:0d:
83:42:2b:d9:3f:fb:7b:98:66:40:27:d8:dc:04:77:
db:fd:b0:ea:e5:7d:ad:20:c5:96:c4:4f:b5:b5:3b:
e1:7e:80:83:18:5b:00:6c:37:eb:7b:6e:a1:91:41:
fd:82:f4:99:f6:af:20:88:82:68:09:95:c0:94:d8:
4e:c1:f8:65:b2:a0:f5:60:ce:c7:f4:b0:d8:f4:59:
3b:ed:80:c9:3f:53:74:92:b6:3f:64:0b:26:fd:40:
ca:6f:c9:cd:81:d1:30:0b:45:87:65:b5:31:ac:ec:
8c:6e:95:1c:a0:ad:91:3b:1d:36:68:f3:5a:53:16:
a9:af:05:87:50:7d:7d:57:57:0c:31:d4:66:4d:e2:
dd:1f:1a:95:ba:54:9c:8f:d9:bc:a4:dd:9f:fa:ba:
89:58:42:39:75:f8:7c:68:30:90:fd:9f:49:ab:53:
88:2e:92:81:eb:38:1e:8c:9d:37:7a:ad:c0:f7:46:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:15:7C:48:5F:09:6F:B0:C3:F8:67:F7:F4:69:3D:38:A4:B4:4A
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:66::/48
2403:5180:6666::/48
Signature Algorithm: sha256WithRSAEncryption
03:eb:91:8e:c5:3d:de:aa:8c:e6:bf:0d:49:fa:75:23:8c:cb:
0a:71:b8:36:b2:d9:ed:66:53:bf:26:c7:a6:ee:3e:cf:11:e9:
11:8c:bf:db:0a:d7:5c:6a:5f:05:97:de:38:ef:2d:92:3f:97:
23:de:f4:94:de:42:dd:1b:25:20:3e:ac:3f:b7:86:90:44:e3:
8c:29:f1:df:2b:57:6a:9d:8c:57:3c:79:58:bc:8a:52:70:82:
60:ab:10:08:7e:e7:d5:b7:24:f4:07:39:aa:c3:ce:c8:69:f7:
a2:3a:4e:06:3a:40:50:df:e0:a5:0d:2e:9e:9c:7c:29:44:54:
db:e0:f2:34:af:e5:20:bb:55:a0:8b:6c:42:43:cd:06:2e:a3:
42:80:27:dc:2a:fe:91:2c:43:f5:7e:db:cb:00:b6:7c:1c:f0:
ff:bf:ff:59:95:c7:fd:b8:dc:03:4b:fb:34:35:98:e9:f1:4f:
9b:58:76:83:82:f9:6f:2e:f2:f4:f8:4c:9f:7b:70:16:63:56:
f1:22:bf:37:00:22:03:b7:5c:96:5b:b2:04:ba:b7:73:19:e2:
ce:c2:2e:6d:c7:f7:70:dc:6e:a3:a3:8f:de:85:bb:a4:f2:d4:
e6:90:ce:d7:44:81:e0:03:8d:c3:ce:f7:65:e8:c2:73:77:b0:
5d:7b:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org