Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
File: 325B473EB3EE11E9A813740DC4F9AE02.roa (raw, json)
Hash identifier: edIcSFe2VO5GESLWSGwVRbj7X1S3p26B6PRi251h0sg=
Subject key identifier: 5F:C6:AF:1E:CF:0D:AA:09:36:AB:D6:B4:98:07:72:B8:83:CB:28:F9
Certificate issuer: /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial: 1055
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
Signing time: Fri 07 Jan 2022 06:16:25 +0000
ROA not before: Fri 07 Jan 2022 06:16:25 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 16509
IP address blocks: 175.41.192.0/18 maxlen: 24
2400:6700::/32 maxlen: 32
2400:6700:ff00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Validity
Not Before: Jan 7 06:16:25 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61d7dab9-a675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:a2:d4:0c:a3:e4:97:da:00:3d:f2:a6:f4:
3b:40:e6:9e:e6:64:97:6a:13:d4:57:3d:87:c6:d6:
68:b6:64:c4:8d:19:93:bd:c8:9a:a7:ae:62:09:a3:
a7:b3:0e:31:b2:2b:a5:9b:50:29:f0:01:2f:1e:da:
df:2f:86:fd:fd:87:d7:1d:7e:5a:4e:05:67:ae:93:
a7:08:29:84:b2:13:fb:93:78:79:c9:04:a7:8f:97:
5e:cd:03:3d:e2:c0:34:b8:29:39:13:bf:e1:50:c6:
58:b3:7d:8a:b2:7d:93:af:de:fb:01:3a:91:a8:dd:
3b:86:60:31:bc:31:c7:27:4b:09:21:2a:c1:c3:96:
e1:c1:c3:b9:2a:38:d4:ad:41:ec:65:72:93:4e:08:
67:e8:ff:7e:25:24:24:d3:7f:69:70:eb:2a:75:1c:
53:a0:fe:72:8b:32:b1:d9:20:50:26:1b:6a:6c:94:
37:b4:dd:3f:2c:d5:41:f7:5b:36:e2:aa:a9:2d:9c:
0c:31:7c:af:36:88:5c:fc:cd:cf:a3:4d:b1:64:d4:
a5:13:4c:e4:66:79:b1:b0:0d:48:09:3c:73:bd:a2:
4e:03:e5:cd:e2:77:30:2e:4a:22:4d:5a:1d:66:99:
29:0a:ba:c8:de:58:8e:ca:e1:95:59:5c:29:04:d7:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:AF:1E:CF:0D:AA:09:36:AB:D6:B4:98:07:72:B8:83:CB:28:F9
X509v3 Authority Key Identifier:
keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.192.0/18
IPv6:
2400:6700::/32
Signature Algorithm: sha256WithRSAEncryption
72:04:24:7d:0b:ea:3e:d3:df:f9:01:b7:02:ee:a9:32:c3:d4:
03:c9:55:9c:5f:1e:52:64:02:a1:80:ec:8d:39:25:be:34:9c:
91:1f:95:80:ec:7d:47:c2:81:f2:32:38:c7:96:4f:90:43:0a:
ef:10:f6:c0:06:9f:9b:12:4a:49:ee:5c:01:69:b0:90:23:ee:
9b:ae:57:dd:25:34:48:78:c8:6e:32:5f:39:50:93:ca:8b:f0:
e7:92:f2:98:3f:47:5d:96:84:0a:9a:2b:63:de:c0:40:6c:f3:
4d:e4:d8:d0:9f:1f:8e:50:95:1d:15:b7:6e:6e:1a:65:f9:4b:
c8:47:73:6f:e5:c1:1d:04:f8:ee:9f:47:e2:9c:fa:8f:58:e4:
8c:9c:6e:23:c3:bb:89:d9:f2:88:9b:c3:fc:73:4a:78:41:7f:
17:3b:37:f5:71:ae:88:41:84:a8:ea:18:07:59:3b:3c:18:43:
6d:81:82:de:f7:bc:a9:96:fa:09:01:3b:c7:cd:1a:fb:31:c4:
b2:18:f4:f5:4c:28:d9:10:88:2f:f9:7d:e5:2c:11:00:f1:36:
6c:94:cf:ce:e8:e0:16:e6:4a:2d:40:83:b4:0c:9f:dc:8c:45:
19:a4:a9:45:82:5f:db:ff:bc:9c:3a:5b:9f:1b:91:22:e6:5c:
84:e9:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org