Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
File: 2D762F5CC98E11E583B5610BC4F9AE02.roa (raw, json)
Hash identifier: +NVA2kzxB/ohyXTuPLl2R9qfHVTKklhMtvuwsFKQ9LQ=
Subject key identifier: 54:B4:BD:8B:05:20:6E:66:6D:EB:88:7F:A2:2B:A3:48:31:BD:50:58
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3334
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:23 +0000
ROA not before: Tue 16 Aug 2022 02:30:23 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 65013
IP address blocks: 58.26.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13108 (0x3334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:23 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb013e-eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:64:ee:70:95:6a:04:02:94:e5:96:66:b9:
30:fe:e2:5a:6b:79:8c:51:cb:f3:46:9b:0f:cc:11:
54:40:6c:e8:3b:28:bd:4c:3a:45:ca:d4:ba:4c:ec:
f9:b1:d9:a2:74:7d:de:80:53:03:cf:bd:3b:9b:b1:
fd:73:1d:89:32:31:8e:0f:13:fd:0c:a6:85:9f:b4:
f4:16:70:89:0e:00:50:cc:b7:65:20:e2:35:73:c1:
9b:d9:dc:f1:01:c7:2e:e0:8d:f5:00:db:32:dd:61:
0b:d4:f5:2d:16:5e:08:80:0c:9f:18:73:4a:42:53:
32:6d:76:38:bc:89:1e:aa:11:b5:c7:d7:e0:5e:6a:
e3:c4:29:80:70:0e:b8:24:65:3e:58:63:65:41:12:
3c:47:09:99:6c:cd:19:a9:20:d1:d0:de:1f:ef:81:
7f:f8:28:c4:d1:af:40:6d:bf:f0:3e:7b:a5:43:06:
80:97:f6:36:2e:82:cc:e4:e1:7f:09:3c:14:8d:ad:
b9:22:ae:0e:c8:de:7f:c5:15:36:1c:2e:58:99:b2:
7a:f0:19:67:a4:36:7a:06:6a:e8:61:9c:6a:1c:90:
40:94:d6:b1:44:47:b7:64:38:83:b7:64:84:b2:b7:
e0:94:1b:81:f3:e8:10:19:14:8c:2c:bf:a7:70:2d:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:BD:8B:05:20:6E:66:6D:EB:88:7F:A2:2B:A3:48:31:BD:50:58
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.26.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8e:ab:a8:c5:a8:87:f3:c7:25:85:3d:2e:76:1c:fb:1b:73:
73:b4:5b:e4:30:df:a4:0c:36:ba:be:42:92:71:37:f5:fb:f0:
08:27:73:bb:f1:a0:97:dc:4d:23:d4:18:9e:03:80:75:9b:62:
b9:4e:6c:ca:58:3c:7f:9f:f2:c2:7c:af:52:34:93:38:c9:0a:
4e:10:26:8c:0d:38:e2:e7:ac:63:cb:11:b2:63:f2:5f:39:52:
9a:1a:a6:43:db:6c:10:00:47:67:8c:62:c7:2d:38:cf:0d:5f:
3d:b0:ca:be:de:ee:3f:fc:a7:da:ec:0b:a2:9d:84:18:06:07:
f3:55:b4:a4:9c:6a:e0:65:25:1d:86:a8:e3:d1:97:0d:8e:08:
3e:98:ef:14:a6:d7:84:db:c9:fe:d5:e6:53:4b:fe:9c:ba:47:
58:10:eb:37:75:c7:3b:f2:99:81:57:8b:ab:b0:58:82:9d:48:
c7:cc:10:36:2d:37:96:7b:aa:37:cc:44:10:3f:61:da:c1:55:
eb:10:bc:ef:e3:11:8a:d6:a6:a4:65:66:c1:97:74:65:97:c0:
f1:46:b8:87:a9:f6:f3:c1:a4:37:54:b1:cd:76:7f:62:54:f5:
4a:13:03:95:93:b4:4a:10:d3:3c:97:67:1d:da:b9:5f:73:cb:
3f:1a:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org