Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
File: AB2D2A9832C611ECA639A749C4F9AE02.roa (raw, json)
Hash identifier: UYUf/+10Hs7JsrrsqzseEfz7S6ZhO1q1F35yphqIHo0=
Subject key identifier: 0B:31:67:05:F6:68:CE:60:29:23:1D:A6:59:8E:B9:17:09:9F:C7:20
Certificate issuer: /CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
Certificate serial: 05E2
Authority key identifier: 5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
Signing time: Wed 01 Mar 2023 00:30:31 +0000
ROA not before: Wed 01 Mar 2023 00:30:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23704
IP address blocks: 2404:c80::/32 maxlen: 32
2404:c80:f000::/36 maxlen: 36
2404:c80:f000::/48 maxlen: 48
2404:c80:f000::/54 maxlen: 54
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
Validity
Not Before: Mar 1 00:30:31 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fe9ca6-dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:04:ae:85:b8:66:1e:7c:67:6e:85:b8:dc:
08:7a:ea:45:b3:c0:74:f5:f2:2f:bf:d8:28:3b:76:
87:6a:6e:42:b8:f0:f6:54:ff:ba:db:9c:73:7b:9d:
b1:25:50:55:ed:0a:58:da:fe:49:d5:04:d7:15:93:
e7:27:33:9b:b6:ed:4a:27:27:24:20:00:90:43:b6:
46:7e:fb:48:1c:24:8e:cc:7d:a0:a1:53:43:c1:22:
bb:f9:7b:b0:cc:2d:20:45:1e:79:19:57:06:5b:7e:
5a:58:f4:d2:e1:82:90:dc:8c:83:88:73:db:7a:2a:
9f:45:a4:21:28:8f:ce:18:74:f3:cf:76:ef:d1:22:
89:37:c9:5c:eb:0e:b2:57:78:cc:b0:95:5c:49:8d:
cd:f7:2b:fc:ed:63:c0:d8:cb:a5:8c:63:8d:de:fb:
fd:3a:d8:9d:39:3b:3d:c0:b5:13:a2:19:3d:c4:d5:
19:24:34:f6:5a:a6:c9:b0:62:b0:cb:fa:0a:9b:de:
f2:a5:3c:79:12:52:f4:17:33:11:71:b0:86:e6:ef:
fd:88:87:8f:3c:bb:d7:8d:0b:df:2f:14:1b:32:7e:
e6:c0:ae:ee:43:d8:0d:13:a4:7b:24:94:ee:2d:03:
aa:61:24:f5:93:0b:fa:75:82:bd:aa:28:0c:6b:19:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:67:05:F6:68:CE:60:29:23:1D:A6:59:8E:B9:17:09:9F:C7:20
X509v3 Authority Key Identifier:
keyid:5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/WpgvE2_mePVekEQndmsdUTUZpZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:c80::/32
Signature Algorithm: sha256WithRSAEncryption
6b:08:8f:94:b3:9a:cd:8a:e0:7d:20:84:1c:d7:86:80:9f:f0:
8d:55:81:c3:3b:ec:6a:cc:62:78:4c:4b:2a:33:cc:c6:6a:09:
da:90:60:9c:a6:af:81:ef:e3:3f:c8:5b:ec:46:98:ee:26:a9:
0e:f0:5d:6b:e4:3f:53:0e:ec:fe:59:e2:36:15:6a:5e:a2:ea:
b3:c7:f2:0b:ad:c7:35:87:f2:5f:23:0e:ef:a4:64:7c:d0:82:
07:df:28:27:51:92:ec:16:c9:0b:50:53:0f:21:bd:97:42:a4:
09:b0:78:8b:a5:64:b4:2d:1a:1b:36:f0:77:1c:13:63:34:b8:
e5:eb:be:9e:46:65:49:1d:8b:9e:ff:b6:18:53:ba:2d:a4:69:
8f:4a:55:97:09:0c:26:07:57:5a:d2:17:de:54:c2:77:8d:2d:
d3:a8:60:7c:2d:21:b2:1d:2a:fc:8c:34:d6:33:78:d0:9a:ba:
eb:78:48:7f:18:ef:bf:22:13:1c:43:b7:9a:2c:11:61:af:76:
32:80:5c:59:32:6c:83:e2:66:6a:b3:6f:23:e4:60:4c:f1:4c:
81:8f:5e:75:28:60:63:dd:4f:a3:2e:9f:12:07:55:3b:63:cb:
59:ee:33:4a:7a:94:db:0e:d2:90:0d:c7:d2:64:d2:67:25:a7:
13:91:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org