Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C49F047491A711ED97B3DB55C4F9AE02.roa
File: C49F047491A711ED97B3DB55C4F9AE02.roa (raw, json)
Hash identifier: UdshW0QRi0mSlYSXzxvUfRnc2qZakYFCHu38PezY7qY=
Subject key identifier: B2:B1:FA:0D:D7:7A:D7:75:AD:26:87:CC:F3:B1:5D:71:61:94:FF:57
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 03A3
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C49F047491A711ED97B3DB55C4F9AE02.roa
Signing time: Wed 11 Jan 2023 12:02:06 +0000
ROA not before: Wed 11 Jan 2023 12:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7586
IP address blocks: 2401:1740:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Jan 11 12:02:06 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bea53e-8615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:46:ef:7e:fa:27:e5:e5:68:18:b8:3f:e6:
5c:1e:44:f7:f6:17:63:f3:fd:2b:4d:a6:78:7c:b7:
24:56:71:a6:93:ca:60:50:e3:b5:72:25:d3:69:eb:
b4:88:a5:9d:76:fe:80:8b:de:38:d2:d8:67:72:5f:
ef:2c:9d:25:94:58:42:55:74:8a:df:05:5b:fc:e7:
b4:84:29:e9:76:aa:55:64:96:2c:e0:a9:d7:14:b6:
d4:f8:58:c3:00:75:8f:fc:96:1e:2e:ae:5d:1e:71:
c6:10:72:8b:8d:f8:a2:2e:80:0b:8c:85:00:af:5d:
60:b0:a0:41:a4:1e:4d:59:13:c3:93:ee:70:0d:8e:
a6:49:f9:90:8e:20:f2:1c:7c:e2:fc:bd:2d:a2:74:
80:4f:9e:6e:88:ea:5a:c6:ec:bf:b4:bc:6a:98:13:
ad:39:15:be:f7:fe:90:2c:c3:3c:11:ba:3d:7c:fe:
75:d7:4d:68:0b:d8:23:dc:19:95:a8:e9:1b:9f:f3:
dc:32:d4:ba:96:b5:4a:4c:b8:80:ef:a8:0a:70:4f:
ef:9d:20:88:7e:30:2c:85:85:2d:d7:81:6b:52:b1:
f7:6d:cf:cd:5e:b1:e0:b5:69:21:c2:09:f9:f4:f5:
2c:8a:79:12:c7:78:ec:27:90:c8:67:02:a8:2c:a9:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:FA:0D:D7:7A:D7:75:AD:26:87:CC:F3:B1:5D:71:61:94:FF:57
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C49F047491A711ED97B3DB55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:2000::/48
Signature Algorithm: sha256WithRSAEncryption
77:87:6c:c3:56:07:b5:62:64:f0:d4:62:ce:c2:22:3c:22:70:
50:92:5a:df:49:60:56:65:ee:a6:76:57:26:af:7d:61:ee:19:
5c:3d:70:0b:b5:af:c1:a5:81:ab:30:5a:46:57:6e:b7:09:fe:
c1:32:2c:00:77:e5:a7:86:69:1e:fc:69:ba:e2:f7:d4:0c:21:
df:1e:32:c6:48:44:d3:c2:1e:45:94:f2:27:3d:04:e5:a7:28:
3a:bd:f9:40:64:6a:85:f3:ab:80:8b:aa:ed:ae:1f:42:ba:d5:
d6:11:eb:de:8a:59:3d:c3:3e:b1:b0:2b:e4:2e:86:69:cf:9f:
52:f5:50:87:6c:df:b3:78:31:16:cc:98:85:01:21:d8:f6:77:
43:b7:28:5e:70:a5:52:60:9e:6a:6d:82:ac:c0:f3:e4:9e:ee:
81:93:77:21:2e:be:97:27:9a:89:18:58:5c:3a:64:10:57:8c:
30:98:73:13:a9:b4:10:2d:d1:39:aa:86:e3:5b:b5:b1:70:17:
e5:92:1d:19:77:0d:53:cd:2e:e0:e1:1c:1b:38:1f:98:ab:7d:
c0:d5:23:06:c4:70:0c:71:a2:8b:bf:5b:7b:0b:33:3c:b8:bd:
80:7a:46:9f:8f:d6:2d:ef:71:e5:79:9b:ac:81:82:4a:55:28:
24:69:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org