Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/ECABEB6A168A11EC805BB20BC4F9AE02.roa
File: ECABEB6A168A11EC805BB20BC4F9AE02.roa (raw, json)
Hash identifier: qnxjUNJRu3pFVdvLyXuxgW5IIMqsGwHhpNHLj3Gsszk=
Subject key identifier: 2F:6E:AA:A0:36:07:5F:97:77:18:1E:1D:B8:1C:BE:81:C4:DA:3F:EB
Certificate issuer: /CN=A912B256/serialNumber=AD3AE6302486E26D7385DC154573A0E76B9D7292
Certificate serial: 058C
Authority key identifier: AD:3A:E6:30:24:86:E2:6D:73:85:DC:15:45:73:A0:E7:6B:9D:72:92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTrmMCSG4m1zhdwVRXOg52udcpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/ECABEB6A168A11EC805BB20BC4F9AE02.roa
Signing time: Thu 13 Oct 2022 00:29:48 +0000
ROA not before: Thu 13 Oct 2022 00:29:48 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 17559
IP address blocks: 192.160.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B256/serialNumber=AD3AE6302486E26D7385DC154573A0E76B9D7292
Validity
Not Before: Oct 13 00:29:48 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63475bfc-c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:97:0f:d3:0e:54:28:3c:38:87:0a:10:cb:
f1:f4:3d:39:2e:ed:c7:a5:13:98:15:b8:33:6b:d3:
df:69:fd:1b:10:cb:cc:63:80:29:db:fb:f0:4d:3c:
c0:69:6b:e0:ae:95:cd:31:05:58:16:ca:32:1e:b9:
02:7b:88:2d:fd:44:65:0d:a2:ee:d3:2d:13:f9:b0:
c8:ca:f1:74:ee:32:89:a1:da:ea:d9:29:da:c4:a0:
f6:f7:8d:67:cb:95:60:41:91:b9:07:f4:ee:76:71:
b8:86:2c:26:f5:0e:51:5e:ec:54:07:cd:d3:2b:27:
9e:4b:7a:d6:5f:a4:85:13:98:10:d8:7b:3b:af:45:
54:34:ee:4b:03:10:9e:c7:b0:15:b4:f2:37:3c:0b:
28:c3:5d:2e:b4:50:10:93:85:a0:04:d5:ac:d3:11:
13:4b:6a:ac:a6:f1:7f:1b:f3:54:22:70:70:b3:71:
b6:f9:b7:19:34:77:ab:c2:87:32:58:13:ac:75:b0:
a2:b2:b4:23:e5:2a:2d:e0:31:e7:7a:75:eb:86:1b:
24:a0:49:bc:08:39:5a:0f:1d:0d:65:f5:fe:d0:79:
30:fd:b9:18:04:73:3b:95:d2:44:d1:ed:ce:e8:87:
0f:8a:1c:9e:e3:a6:e4:ef:8b:07:83:16:ce:79:ff:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:AA:A0:36:07:5F:97:77:18:1E:1D:B8:1C:BE:81:C4:DA:3F:EB
X509v3 Authority Key Identifier:
keyid:AD:3A:E6:30:24:86:E2:6D:73:85:DC:15:45:73:A0:E7:6B:9D:72:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/rTrmMCSG4m1zhdwVRXOg52udcpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTrmMCSG4m1zhdwVRXOg52udcpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/ECABEB6A168A11EC805BB20BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.160.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2e:7e:73:13:3c:7e:d1:7d:d1:96:6d:18:cb:2e:eb:14:68:
08:19:fc:9d:29:e3:91:e9:05:6d:f3:75:b4:31:c6:44:7f:bc:
e9:92:15:1c:48:cf:fc:03:41:1f:ff:65:ba:7c:60:c7:03:b2:
46:6d:7e:74:6d:00:41:a7:82:6e:f2:5b:8c:c9:35:2c:bf:0b:
5c:9a:99:e2:31:42:05:17:aa:97:87:3a:cc:3f:8f:c1:9a:01:
11:0f:93:1c:96:5f:fe:7c:19:97:12:c2:75:e7:e4:81:9a:c7:
1e:74:64:7c:c9:4e:5b:31:45:80:35:d5:fb:f4:29:2c:c9:3f:
51:38:8c:ec:67:54:6e:15:0e:4a:6f:5c:4a:e7:0b:a1:71:a6:
83:72:a0:60:48:64:69:9a:36:f4:6e:a8:35:a4:ae:53:08:8a:
d9:27:2c:f1:3d:0c:32:d7:ea:a6:ca:00:97:2a:6d:08:b6:8b:
81:16:86:0e:b4:3e:1c:95:37:f5:ab:89:e5:9a:8f:b0:09:c2:
2f:58:c1:b6:57:6e:f9:f7:1f:66:82:52:a6:4e:84:2d:8d:35:
2c:07:d2:f5:4e:84:97:61:1a:a4:5a:5f:fa:81:63:e2:1a:07:
20:13:5a:2f:b1:35:84:79:11:9f:97:c5:b8:eb:41:ce:fa:f0:
7a:1b:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 13:40:11 2023 by rpki-client on console-ams.rpki-client.org