Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FDB46342C22411EC8C25706EC4F9AE02.roa
File: FDB46342C22411EC8C25706EC4F9AE02.roa (raw, json)
Hash identifier: hYqbdXEJQDzIkdsMA9qSZqxl0Vk252ei4L55Qt09UNE=
Subject key identifier: 54:5D:67:5C:AD:03:F4:04:4B:A7:9D:CF:12:F0:3C:F8:58:A7:B7:5A
Certificate issuer: /CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Certificate serial: 2E
Authority key identifier: 03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FDB46342C22411EC8C25706EC4F9AE02.roa
Signing time: Fri 22 Apr 2022 10:14:28 +0000
ROA not before: Fri 22 Apr 2022 10:14:28 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 38136
IP address blocks: 150.129.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Validity
Not Before: Apr 22 10:14:28 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62628003-111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:e3:e3:96:5c:60:e1:af:25:dc:b8:b5:28:
8d:26:9d:52:4c:9d:46:3a:e9:80:e0:c7:e2:bd:a7:
91:37:96:cc:4f:b3:bd:b3:d7:bb:ce:21:7d:40:9e:
c6:e8:ba:29:77:e7:49:18:60:b9:8e:80:84:6f:cc:
57:8a:b4:d3:9e:0d:66:8f:44:26:28:48:93:9f:58:
64:1c:9b:54:66:b1:32:1e:39:fc:fe:44:cd:ab:02:
78:67:e9:56:b8:ff:f4:20:4c:6a:01:66:1b:0e:1b:
07:9e:bc:a0:fa:69:99:c5:18:3a:f9:0f:3c:ba:cb:
1f:cb:26:51:bf:0a:55:3e:18:b0:20:74:d6:c8:4f:
43:f9:f9:aa:bd:bd:49:6e:57:c1:7f:52:6a:24:4b:
c5:d6:87:63:d3:c6:eb:d1:ef:52:7c:94:e2:f0:8b:
80:55:99:55:24:3e:a2:ff:38:0a:50:b6:2d:d7:d1:
ce:b1:66:10:31:e3:d7:3e:6b:91:6c:75:b7:9b:2d:
89:13:d7:9d:e7:81:4a:28:17:4e:db:5f:24:8a:ae:
b3:ad:02:70:4d:7e:6c:f4:51:4a:f1:39:f9:97:c9:
7f:02:53:aa:c2:01:fd:6d:48:4e:4a:81:48:58:77:
54:a2:ef:98:3e:80:78:a0:b4:01:49:13:52:0f:7c:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:67:5C:AD:03:F4:04:4B:A7:9D:CF:12:F0:3C:F8:58:A7:B7:5A
X509v3 Authority Key Identifier:
keyid:03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/Awoex_wM6fofJJGblupk2TOa96s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FDB46342C22411EC8C25706EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:31:1e:46:78:00:06:db:d6:10:c8:85:e9:a0:aa:9d:9b:ae:
5e:91:5a:dd:02:e3:cc:2e:36:75:cc:c6:61:2a:61:bb:46:22:
f0:b3:19:8d:fd:fe:89:4b:c1:a3:76:30:9c:f5:26:f9:b6:eb:
6f:b3:30:7e:00:d9:7d:e9:86:9e:c9:f9:3a:6d:63:4a:1c:1f:
95:d1:9b:2a:54:3b:e3:ff:42:f6:28:0e:4f:05:5c:4c:59:a6:
87:22:1a:29:25:c1:0d:c8:1b:2a:f3:d2:58:ce:1f:5e:f3:ed:
1b:6c:17:72:0b:d9:75:60:94:68:97:d4:9b:b2:24:2e:15:c9:
f8:49:ba:ae:d9:38:15:a1:c7:93:f9:3a:a7:fd:7e:5d:4b:52:
6f:2b:2e:79:1c:dc:ea:63:03:28:de:66:e8:8f:fa:fb:84:9f:
25:bc:cf:75:07:be:43:22:ef:a9:af:8b:6a:c5:c5:ef:43:f7:
c8:ae:3f:a9:c1:19:a3:cb:0f:eb:27:c4:e8:8c:81:2b:6d:52:
58:57:64:9a:c0:6a:21:78:01:99:4a:68:be:b3:56:4e:80:c9:
2f:54:08:ed:d8:55:2d:04:cd:5c:35:40:79:c8:ff:95:0d:d7:
f5:4d:4c:15:83:82:20:a7:21:45:e3:80:f8:04:41:97:df:85:
85:8b:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org