Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
File: 631E2864F34311EB9D3ABA3DC4F9AE02.roa (raw, json)
Hash identifier: ezqEmBWrfSCUtW8lIc9EoMrWZOcXJu2jrZdEOdNGuzE=
Subject key identifier: 29:F2:5E:FA:C8:37:4D:FF:56:B7:21:41:0B:D1:03:B6:D1:D4:5E:73
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01F3
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:54 +0000
ROA not before: Mon 20 Dec 2021 02:20:54 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9370
IP address blocks: 133.167.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:54 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe886-ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:57:92:8a:7d:cf:83:21:90:07:39:44:b3:
79:76:90:ea:94:23:eb:25:40:b1:42:64:f9:0b:6a:
a1:d0:f6:33:52:54:2a:28:d5:88:6e:ae:a4:66:07:
23:2f:da:74:7a:dc:5e:a5:d9:b1:0b:bb:7b:5c:a2:
26:11:a3:86:53:89:77:53:ed:e0:bc:fc:f8:aa:4f:
52:62:29:8f:ad:9a:b3:74:7f:7b:44:3e:ee:c8:16:
cc:a4:7c:a0:f4:f8:a6:3d:3c:d9:54:51:26:74:87:
ae:b7:df:b0:12:3d:8c:eb:27:ab:ab:ce:7f:3a:8f:
1c:50:51:6f:97:c1:fa:0f:24:90:b8:8a:31:39:4f:
88:f6:d3:49:eb:ef:5e:1a:22:4b:98:94:b8:82:64:
b1:83:c6:aa:66:e4:26:11:42:d5:05:8c:3e:a7:3e:
6c:dc:ca:98:4b:11:6b:f5:e1:4f:09:59:0b:b2:99:
fc:5f:e4:31:9a:70:d3:25:53:d4:69:bd:7f:74:63:
9c:b9:8b:59:b3:1d:ae:e8:92:19:97:68:db:3b:ad:
2e:ad:cd:a3:09:15:29:1e:f8:87:0c:71:a2:15:ad:
b4:58:c9:75:0f:a1:3d:c8:c4:f9:9d:6f:20:88:22:
2e:f9:e8:01:29:31:b9:f8:3d:67:d0:af:0c:9c:3a:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:5E:FA:C8:37:4D:FF:56:B7:21:41:0B:D1:03:B6:D1:D4:5E:73
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.167.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8f:9b:df:6d:88:11:b8:9b:a8:a2:1a:69:90:26:54:78:f6:
82:b9:83:77:a7:24:00:d0:e8:72:30:0b:88:72:57:54:a7:7d:
c3:8c:98:16:84:96:8f:17:df:d5:26:fe:6b:c5:d0:45:ff:f7:
04:10:9f:9e:90:f2:cf:d1:b3:d3:8e:80:ac:2d:f5:7f:1c:b5:
26:6f:0f:a1:db:9c:67:05:45:56:2a:f6:5e:f4:9c:4f:93:b0:
a7:25:82:96:a9:f0:64:ae:d4:cd:5a:6a:38:db:cf:63:b5:33:
c2:48:51:d1:37:c6:a6:94:05:a1:50:1c:51:00:8c:56:a6:9a:
db:05:54:e7:77:62:ab:d5:f2:73:4e:e4:a6:96:4d:bd:c0:9c:
95:79:f4:63:23:4e:16:c4:db:66:e5:9c:1e:de:fb:0c:46:fd:
bc:ff:eb:81:94:9d:61:0e:51:68:5f:6f:36:1a:3d:5c:9c:fa:
c8:6c:85:69:b1:1a:cd:83:87:19:71:36:2c:a5:61:e9:dd:68:
ad:46:a1:34:6c:29:47:66:eb:38:b2:b1:4e:d8:9f:32:23:5a:
01:c6:3d:eb:37:91:12:7a:99:8b:4e:2e:2a:1e:d6:ef:5c:0b:
54:f5:f8:97:93:9d:ec:61:d3:82:c0:de:ae:ca:a3:d3:1c:15:
74:8a:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org