Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E848/B76DDD088A2B11E88970E71AC4F9AE02/015565E8D30011EA9656C970C4F9AE02.roa
File: 015565E8D30011EA9656C970C4F9AE02.roa (raw, json)
Hash identifier: +ngdmmw3u1hr0idqfSisiudHb4FLc8r2FsEitQdkGxA=
Subject key identifier: 13:A0:54:C0:F3:41:E3:2B:A3:6E:03:A1:B7:6D:36:BF:A0:F7:40:AA
Certificate issuer: /CN=A915E848/serialNumber=C37EA70A2A5FC4953F1C5CDDF463E1249BEB2E21
Certificate serial: 1033
Authority key identifier: C3:7E:A7:0A:2A:5F:C4:95:3F:1C:5C:DD:F4:63:E1:24:9B:EB:2E:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w36nCipfxJU_HFzd9GPhJJvrLiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E848/B76DDD088A2B11E88970E71AC4F9AE02/015565E8D30011EA9656C970C4F9AE02.roa
Signing time: Tue 01 Mar 2022 06:24:37 +0000
ROA not before: Tue 01 Mar 2022 06:24:37 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 134090
IP address blocks: 45.249.116.0/22 maxlen: 24
103.85.36.0/22 maxlen: 24
2400:a840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E848/serialNumber=C37EA70A2A5FC4953F1C5CDDF463E1249BEB2E21
Validity
Not Before: Mar 1 06:24:37 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621dbc24-1b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:dd:d4:aa:16:73:33:1e:3d:f7:33:c6:24:
0c:db:e7:e1:d0:f3:cf:fd:ab:5c:d5:1b:ba:60:9f:
cf:d5:77:64:85:e2:97:ae:11:f9:d8:7c:4a:61:3d:
ee:b7:a6:50:b1:16:c4:43:ef:e0:1c:1f:1b:b5:1f:
73:e8:06:38:43:6d:b5:da:01:e4:f0:5f:4b:83:93:
ab:42:66:2c:c3:a9:79:03:0f:bd:00:81:d2:db:6e:
75:3c:13:31:85:bb:1b:78:7b:13:5f:1f:6a:d2:a0:
cd:41:ba:e2:b5:bc:87:c2:65:8f:c1:d0:cf:46:ce:
0b:a8:d4:77:15:93:c2:8c:6b:ef:4b:6d:13:f5:e2:
b7:c1:fb:79:5d:78:23:03:20:cc:a2:a0:d0:a3:3c:
21:bc:87:0a:98:68:38:7b:00:a4:89:ee:2f:1e:47:
0b:df:7c:b5:39:5b:e9:81:70:e7:8d:4b:93:31:76:
a4:c7:2d:08:da:13:c8:8f:b8:12:87:18:1b:cb:46:
03:a5:ed:2b:90:01:84:d7:2d:c2:c6:1b:92:dc:52:
30:53:08:29:58:4a:91:57:17:e4:c5:57:5f:92:9f:
23:49:ca:e5:08:7d:ab:ca:25:d9:af:cb:37:79:3d:
a7:87:c1:df:1c:4b:b3:5b:42:4c:33:bc:23:89:ce:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:54:C0:F3:41:E3:2B:A3:6E:03:A1:B7:6D:36:BF:A0:F7:40:AA
X509v3 Authority Key Identifier:
keyid:C3:7E:A7:0A:2A:5F:C4:95:3F:1C:5C:DD:F4:63:E1:24:9B:EB:2E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E848/B76DDD088A2B11E88970E71AC4F9AE02/w36nCipfxJU_HFzd9GPhJJvrLiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w36nCipfxJU_HFzd9GPhJJvrLiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E848/B76DDD088A2B11E88970E71AC4F9AE02/015565E8D30011EA9656C970C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.116.0/22
103.85.36.0/22
IPv6:
2400:a840::/32
Signature Algorithm: sha256WithRSAEncryption
02:59:3d:a8:d7:d1:98:80:07:88:23:40:1b:70:04:91:c0:66:
c5:f5:2f:7d:a3:fb:d2:f6:a6:53:99:78:32:92:90:4f:a9:5d:
c5:5b:de:30:81:a9:03:51:e0:1e:18:cd:f4:e3:f1:ce:98:da:
37:86:a6:7c:c1:48:0f:3b:e4:f1:8f:ba:6c:8d:a0:53:1b:04:
6c:f7:9d:5d:f8:e9:82:33:cb:dd:39:28:16:86:41:92:c4:59:
3b:8b:16:28:f9:dc:91:90:04:f4:fa:fc:85:db:fd:7a:94:ea:
b6:79:b6:77:fe:4d:e3:5c:40:49:a8:80:34:fa:53:63:51:de:
4e:95:7d:f7:5b:ae:85:3c:79:b7:04:c2:9d:a2:6c:d1:2f:f7:
fd:40:4f:27:39:ae:32:db:ba:61:5e:b5:97:72:06:70:4c:75:
85:9f:fe:68:95:88:57:47:fb:72:7b:09:3b:7a:e4:11:71:3a:
27:cc:61:51:21:27:42:f9:34:b0:e8:46:59:7c:0a:39:9e:bf:
bb:89:f9:7d:cc:4b:33:17:11:ce:37:01:5a:20:a9:9a:34:8f:
72:a0:0c:d3:84:5c:2e:6e:2b:f0:48:3d:3b:be:42:49:c2:52:
2e:77:a1:68:83:d1:46:0f:41:f9:44:82:ad:4d:27:d8:28:0f:
36:de:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org