Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7C66069EB48011ECB2D05431C4F9AE02.roa
File: 7C66069EB48011ECB2D05431C4F9AE02.roa (raw, json)
Hash identifier: yfbOykuBTu8DKCwLyLRjOOHhHuE2x3//y8+TVH2Qy4k=
Subject key identifier: 9A:3A:89:C4:F0:9F:93:D7:48:D2:79:36:24:FD:08:0D:A8:8C:92:BF
Certificate issuer: /CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
Certificate serial: 03
Authority key identifier: 7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7C66069EB48011ECB2D05431C4F9AE02.roa
Signing time: Tue 05 Apr 2022 01:34:08 +0000
ROA not before: Tue 05 Apr 2022 01:34:08 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 45192
IP address blocks: 2401:4600::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
Validity
Not Before: Apr 5 01:34:08 2022 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=624b9c90-b090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:e8:bb:f5:04:8c:c6:ad:40:2f:49:35:dc:
ce:1a:46:e3:47:bf:99:cf:62:90:1b:e4:23:2e:d8:
97:9d:05:d1:95:41:88:ab:22:32:4b:1a:d2:34:81:
a0:69:d3:e3:4a:fb:84:95:42:44:11:35:c3:77:65:
9a:8a:64:87:4d:77:3d:7c:e1:60:f1:ac:1f:bf:b6:
c4:25:57:81:b4:94:90:fe:08:79:30:9a:03:58:ac:
e2:3f:09:a4:26:3c:76:a9:70:f0:c8:22:94:b9:97:
38:f5:44:45:ed:c5:95:47:bc:30:36:f5:23:a3:fd:
c4:d6:10:bc:20:d1:0d:84:d1:af:d6:10:d6:f9:23:
3e:db:3c:c9:99:a2:19:25:79:4d:b2:46:aa:c9:b2:
f4:66:5c:e2:7b:49:3c:61:2d:9f:29:b9:dc:41:90:
b1:29:59:f4:6b:17:46:fd:18:a0:89:15:9c:b7:a2:
43:fa:0f:4b:4a:98:76:2d:f6:9d:e9:8b:0b:6e:70:
e8:2e:ac:bb:54:77:2a:87:40:33:cc:da:05:d9:90:
b8:4c:e8:52:9f:8b:47:e7:0a:f3:54:b1:0b:b9:4e:
9b:79:21:bc:cf:d8:07:29:43:e1:29:9b:ca:fc:cd:
f3:3f:fc:dc:f0:7c:47:f9:c5:4d:2c:b6:83:7c:59:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:89:C4:F0:9F:93:D7:48:D2:79:36:24:FD:08:0D:A8:8C:92:BF
X509v3 Authority Key Identifier:
keyid:7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/7C66069EB48011ECB2D05431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4600::/32
Signature Algorithm: sha256WithRSAEncryption
c5:52:f3:ce:34:b1:c3:2e:2c:83:28:65:e6:1d:3f:f2:41:46:
9b:bf:51:e7:ed:c5:36:b1:5c:8d:da:67:21:4b:c2:bf:8b:7a:
ea:39:13:25:1e:37:8d:d9:66:f3:80:15:dc:9a:26:24:1c:19:
c4:fc:fe:6e:aa:ca:37:ce:ad:3c:e0:bf:75:f9:53:44:51:c7:
db:6a:e6:df:1b:47:6e:c7:d5:cd:ec:28:62:67:0c:6a:56:3f:
59:3e:bf:dd:3f:c8:ce:a7:58:be:f6:90:6c:8a:5f:7e:aa:e4:
8e:45:4f:0d:ff:dc:38:08:b2:a8:56:98:f4:92:dd:0e:b5:16:
ca:c6:b8:19:1a:26:8c:df:8b:ab:5b:f4:16:2c:47:df:43:88:
92:ea:5f:77:d0:79:01:79:fe:ff:08:39:da:a8:f3:9a:cd:33:
b4:9f:22:29:c0:36:c4:06:3a:a7:21:b5:81:a9:bb:ce:be:a4:
a0:bd:09:50:fb:dd:ef:e1:00:6b:af:a1:dd:7f:7c:db:89:3b:
ac:05:c0:c1:68:eb:2a:2f:fc:10:54:44:41:b8:f9:21:81:ba:
9d:82:60:c4:68:57:5f:a5:d9:f0:59:3b:b2:ee:ca:e7:67:9e:
3e:0e:a4:e5:2c:6e:df:60:9c:30:47:96:37:5e:ad:8e:20:be:
35:fc:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org