Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/70B16952A33F11ED955D647EC4F9AE02.roa
File: 70B16952A33F11ED955D647EC4F9AE02.roa (raw, json)
Hash identifier: 6jOLhcuS6l8cgb11gm+hlPr1bu+jQqwysMUPPc9hA14=
Subject key identifier: 84:CD:AB:62:96:93:00:F9:C2:AC:80:03:B2:C9:E9:D3:76:9B:BC:BA
Certificate issuer: /CN=A913429A/serialNumber=CE291F6ECC60DD4CC481D8BD2C4650AD1DFEE355
Certificate serial: 32E9
Authority key identifier: CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zikfbsxg3UzEgdi9LEZQrR3-41U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/70B16952A33F11ED955D647EC4F9AE02.roa
Signing time: Thu 02 Feb 2023 21:20:39 +0000
ROA not before: Thu 02 Feb 2023 21:20:39 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38016
IP address blocks: 2406:c800::/32 maxlen: 32
2406:c800:a1ca::/48 maxlen: 48
2406:c800:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13033 (0x32e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913429A/serialNumber=CE291F6ECC60DD4CC481D8BD2C4650AD1DFEE355
Validity
Not Before: Feb 2 21:20:39 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63dc2927-7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:cc:b6:d0:db:b9:e5:1b:39:5b:96:c2:2e:
2d:f6:81:76:bd:45:41:96:83:d2:96:9a:b3:af:56:
b8:6a:ae:da:cd:94:62:66:26:b6:04:d6:60:0b:db:
eb:d5:53:00:9d:50:97:56:ae:5f:be:f9:97:af:5b:
69:77:5e:86:63:1e:32:f4:a6:9b:d6:c2:51:f7:68:
ed:56:12:ea:39:3f:8f:33:ca:82:2d:fe:50:2a:7a:
31:62:4b:05:29:5d:d2:da:e6:33:ce:1f:63:b4:6a:
6e:be:0d:14:27:18:09:0f:09:dc:5e:fd:cd:fb:ce:
84:e3:88:1c:66:41:a5:f7:5a:a7:bc:70:39:02:48:
89:36:9a:b1:df:38:b5:7e:24:ca:26:67:5d:91:0e:
ae:a9:18:44:82:cb:aa:c8:eb:bc:af:3d:12:af:13:
f2:13:99:ff:06:47:c1:58:17:7e:7c:96:60:02:64:
f8:32:b3:88:3e:36:ec:a6:ee:24:00:5f:82:56:f4:
2d:77:00:b3:63:5c:ff:80:2f:21:c3:71:75:65:89:
ff:01:f6:cd:6d:fa:a8:e4:e3:87:63:48:22:5b:53:
98:6b:73:cd:ed:7e:e8:33:37:e2:95:8c:31:bf:10:
fd:39:c9:b6:ef:43:07:0a:55:ec:1b:56:56:2f:24:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:AB:62:96:93:00:F9:C2:AC:80:03:B2:C9:E9:D3:76:9B:BC:BA
X509v3 Authority Key Identifier:
keyid:CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/zikfbsxg3UzEgdi9LEZQrR3-41U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zikfbsxg3UzEgdi9LEZQrR3-41U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/70B16952A33F11ED955D647EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:c800::/32
Signature Algorithm: sha256WithRSAEncryption
5e:a3:26:0b:92:aa:4f:81:9a:87:fe:4c:80:21:cc:aa:29:9a:
ef:6d:5b:42:89:56:ef:74:f9:34:5d:0e:e9:a2:c9:fa:bf:3b:
36:2e:f0:ea:49:77:b6:bf:cc:2d:fa:30:59:71:5e:1a:09:6e:
fb:f2:4e:1f:3d:32:70:31:1d:a9:01:13:d4:16:b0:1d:92:ac:
2e:02:d8:9a:99:06:da:d1:c4:39:a4:9a:c1:b8:d9:2a:25:35:
28:bf:70:d9:af:d3:7c:3f:32:45:f1:e0:72:50:99:bf:cf:98:
38:be:b6:3c:6c:c5:f5:36:0a:71:1d:06:39:bc:0c:3d:83:dd:
91:79:40:8e:9a:b1:fa:b5:1b:23:2c:79:1c:7f:5e:21:ca:fb:
c4:7c:bd:88:82:0e:a9:1d:fb:8b:33:59:71:53:f5:39:99:f3:
74:13:23:ef:f0:67:b7:18:db:37:1b:fb:e5:24:91:bd:2e:7d:
13:0a:64:ce:cf:a6:d9:95:cd:c2:c7:09:18:20:3b:62:2e:8f:
1b:e3:2a:5f:a7:cc:7c:5c:fd:4e:2a:98:62:d5:c0:2b:0b:ac:
d8:e3:4b:c8:67:3a:78:7b:d8:ce:e4:24:04:19:53:b6:5a:6d:
8e:25:45:4c:aa:06:82:e5:5a:a7:b1:1e:13:dc:44:24:ba:f6:
88:32:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:59 2024 by rpki-client on console-fra.rpki-client.org