Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
File: 8E1EEE2A04FE11EAB778E81CC4F9AE02.roa (raw, json)
Hash identifier: F1go961uPRCOEWBEhzBS5WE9bNVhP823U59kxw5dCck=
Subject key identifier: 04:50:28:ED:F6:55:2D:EE:15:99:57:92:7E:98:BD:2A:63:E7:48:CD
Certificate issuer: /CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
Certificate serial: 0B23
Authority key identifier: F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
Signing time: Wed 08 Nov 2023 19:27:22 +0000
ROA not before: Wed 08 Nov 2023 19:27:22 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 10148
IP address blocks: 45.113.232.0/22 maxlen: 22
103.6.252.0/22 maxlen: 22
115.146.80.0/20 maxlen: 20
2407:ae00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2851 (0xb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
Validity
Not Before: Nov 8 19:27:22 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=654be11a-51c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:86:62:fe:e5:8f:ba:c3:7c:e8:79:cc:d2:
21:71:a9:27:de:4d:90:10:77:5f:19:4a:58:ad:16:
4d:87:35:76:29:38:8b:9a:6a:b0:00:3c:80:b9:b4:
8c:27:d2:7f:5e:89:5d:a5:6a:cd:b6:49:ed:c3:82:
f5:d9:c6:41:e2:fe:d5:b3:28:09:fa:02:9b:f3:79:
2b:49:f7:3e:96:af:c4:59:8c:12:de:51:9b:6c:0d:
fd:c4:b2:27:78:f8:29:fc:57:75:e2:c2:39:67:21:
85:50:f7:8a:ce:09:4c:a0:7d:8a:c4:70:4b:e6:14:
08:43:04:e8:e9:b4:05:48:03:d6:2d:de:70:3d:46:
1c:aa:f4:e1:af:38:b0:8f:8d:e6:b8:f3:3c:0a:f2:
53:ce:23:a3:72:4e:72:d5:f6:dc:d4:f0:d9:53:a5:
12:81:ae:ca:7d:bc:f2:78:e6:6e:40:90:f3:b0:c2:
29:08:55:b5:74:75:1d:44:f0:8d:2e:c8:70:da:04:
14:64:27:e8:db:c9:f2:e5:48:67:a1:4c:7b:6f:2c:
e0:d3:80:90:0d:1e:99:7d:13:cb:5c:e8:01:80:6a:
ca:4a:e3:be:6d:bd:84:f2:9d:16:bd:95:c3:4f:32:
0f:3e:dd:d6:ca:33:e9:fc:2d:fc:3b:68:38:b6:1f:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:28:ED:F6:55:2D:EE:15:99:57:92:7E:98:BD:2A:63:E7:48:CD
X509v3 Authority Key Identifier:
keyid:F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.232.0/22
103.6.252.0/22
115.146.80.0/20
IPv6:
2407:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
9a:b6:81:22:b7:e1:26:18:f7:a9:7d:a3:53:a6:f9:60:af:cd:
16:4f:23:02:9e:8b:59:fc:28:ad:5e:97:b8:c7:3e:21:e3:1e:
4f:b6:93:06:a2:b0:46:01:45:74:4a:1b:03:e7:fe:73:fe:3b:
7e:ea:fe:be:99:eb:a2:c3:2b:34:b3:f6:eb:8a:0d:f3:0c:e1:
a9:34:d8:1c:55:34:b9:5d:94:d6:e0:f4:94:90:c2:d5:ce:fb:
48:d0:2b:14:d8:0b:4d:1d:4e:19:51:ff:67:f1:e5:78:fc:fb:
d2:ee:f3:5a:02:7b:6d:73:49:c3:f2:f5:45:62:f8:bb:f4:e2:
54:cf:2f:09:2a:a7:19:b4:b5:36:80:92:31:a6:56:57:a7:01:
51:98:17:c8:4a:c6:5d:71:bf:52:0a:05:d9:ef:4d:9a:b6:e5:
38:18:95:2b:6c:d9:4e:65:e3:bc:5b:0a:63:5c:ab:5d:de:30:
4e:da:18:29:e2:fa:e3:2d:94:be:5e:d1:57:84:c8:f9:dc:c4:
04:01:a7:bf:99:e1:07:f9:37:84:07:14:89:47:68:d3:5e:5e:
03:fd:e6:1f:73:a8:fa:81:56:3b:a7:02:40:4e:85:22:3d:84:
8e:17:5e:31:0e:2f:97:a5:a1:e1:e1:cd:5b:96:39:4b:35:82:
93:24:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org