Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
File: 4E6DC1C4210C11EE8355944BC4F9AE02.roa (raw, json)
Hash identifier: m9vC5vHfczHYRPkbapm3tDKPJpj6Wo3YBBmm0sPS5k0=
Subject key identifier: AF:F8:D4:39:17:93:40:AF:1F:C2:7E:2C:AE:24:47:B2:31:2C:D8:4C
Certificate issuer: /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial: 0177
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
Signing time: Wed 12 Jul 2023 23:32:04 +0000
ROA not before: Wed 12 Jul 2023 23:32:04 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 123443211
IP address blocks: 2401:4600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Validity
Not Before: Jul 12 23:32:04 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=64af37f3-5efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:4d:d1:2c:5a:7f:f4:3f:0b:68:7e:54:54:
ce:58:bc:25:d5:e5:8d:6b:cd:2b:aa:b3:35:19:ff:
b0:1e:c9:a9:67:f8:38:d4:b2:90:19:62:19:72:27:
8b:08:92:2f:15:b0:99:49:d1:d7:52:fc:91:3b:59:
50:3c:85:cc:52:b3:d7:14:68:5e:28:14:ea:83:75:
18:81:b5:1c:c8:05:3f:19:92:b8:8f:f0:e4:53:79:
af:67:a7:65:ab:14:34:f2:93:fe:65:ea:69:15:53:
52:14:3d:73:8b:82:70:8d:0e:0d:25:df:2d:4e:19:
8b:80:92:70:1e:9e:d2:bb:84:1c:67:4c:2b:1e:e7:
aa:7f:37:d5:a0:94:65:ef:38:c6:65:69:97:b9:f7:
42:14:62:fa:29:64:8b:09:11:49:c7:f5:d4:5a:35:
32:9a:9f:fb:ef:45:2a:73:e6:83:75:f8:23:c2:ce:
29:4f:d4:9b:b5:a8:7e:2d:52:87:fc:e4:d2:00:df:
85:ca:0f:c2:12:f5:0b:8f:25:f2:2f:e0:4e:b6:d8:
e8:9e:38:56:66:9d:bc:46:71:7f:2e:ff:fd:90:6b:
9b:d2:62:b8:5d:06:cf:55:2b:ef:cc:0c:d6:11:97:
3d:69:7e:f3:3f:3d:2e:79:db:57:77:91:7a:ae:4d:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:D4:39:17:93:40:AF:1F:C2:7E:2C:AE:24:47:B2:31:2C:D8:4C
X509v3 Authority Key Identifier:
keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4600::/32
Signature Algorithm: sha256WithRSAEncryption
36:92:0d:40:bd:ed:83:70:9d:0e:3b:e2:5a:ba:00:7d:55:69:
0a:2d:22:f5:2b:7b:73:a7:91:ce:8d:3f:67:3f:07:37:2e:77:
bf:3b:4a:87:58:35:47:85:c5:97:c5:e8:10:24:80:96:57:4c:
f2:d1:1e:26:ff:4e:e0:f1:10:1c:62:5b:07:20:48:ee:08:43:
37:58:f5:d9:50:ba:ae:bd:2d:e7:1f:d5:ba:19:8f:ef:66:ff:
c9:06:6a:79:3f:ee:bd:69:ce:0c:90:2d:b5:d0:a4:b2:ce:9c:
4a:26:fe:6e:fa:6d:32:45:4f:f5:0f:e0:87:d9:69:a5:76:1f:
e6:c3:1e:19:53:77:40:05:34:05:e8:22:ad:a8:e1:dd:3c:85:
40:cd:f4:f5:57:6d:ef:19:8b:ad:8d:23:7e:a0:4a:a8:5e:a3:
9b:b5:95:1e:f3:fe:b4:cc:66:38:6b:ad:a6:64:a0:cb:b1:b4:
7c:a5:b1:49:f0:ab:76:96:7a:29:2f:a5:6f:11:85:53:db:47:
78:0d:51:6d:13:8e:9b:ce:d6:55:34:41:91:7d:b4:db:4c:cd:
5d:21:ec:d5:20:9d:27:9f:cb:2a:93:48:09:ad:7f:27:9a:1b:
96:84:13:70:19:f5:30:87:d9:d0:7c:ee:f1:3a:37:b0:36:a8:
94:83:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org