Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2E9A0BA6C98E11E583B5610BC4F9AE02.roa
File: 2E9A0BA6C98E11E583B5610BC4F9AE02.roa (raw, json)
Hash identifier: ipntf8QtpF2FBJC9CtjqY6IR59azSVlHcbEO294NzBs=
Subject key identifier: E9:FD:85:91:29:06:A2:15:F4:9D:D1:4E:5A:26:14:6A:41:0D:F5:C6
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3336
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2E9A0BA6C98E11E583B5610BC4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:25 +0000
ROA not before: Tue 16 Aug 2022 02:30:25 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 65040
IP address blocks: 218.208.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13110 (0x3336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:25 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb0140-edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:0a:0c:33:c1:0a:ac:02:fc:f3:b5:55:b1:
e9:a1:d0:57:b7:e6:51:86:00:8f:40:3a:98:7a:7a:
19:e0:2a:3c:16:4c:05:10:1a:d1:89:8d:10:f7:72:
2c:0a:fe:63:21:15:33:dc:c7:83:d7:9b:a8:38:05:
d3:f2:32:27:64:f2:92:08:57:7c:58:8b:f6:99:c6:
6c:6f:90:94:4d:db:1d:2e:fd:69:26:01:d8:7e:7f:
47:7e:50:ca:b7:c5:7a:72:8e:7b:a5:12:49:22:64:
c7:3d:f1:18:16:24:c0:c7:7b:b9:b5:78:4f:c6:ca:
d6:5c:d8:91:3e:e9:2d:1d:8c:bf:12:a5:d5:27:16:
1c:3c:25:0a:cb:33:2f:20:77:60:aa:e9:33:55:17:
5a:4a:ec:27:f3:f2:4d:e5:d5:ac:2d:6f:9e:1f:05:
c6:4a:10:ff:f0:46:e5:10:37:44:16:25:3e:f1:1a:
9e:0a:0a:fc:3d:02:a4:00:40:75:b6:c1:01:be:3d:
51:b1:d3:11:97:d4:6c:a1:71:4e:4a:e3:a0:ae:ad:
ca:1a:70:cf:ba:7b:f8:50:34:53:12:88:cd:4f:fd:
3e:38:6c:90:1d:4b:04:12:70:bd:61:be:6e:03:88:
47:06:11:cf:e7:46:f1:47:c7:e8:17:d6:90:18:a4:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:85:91:29:06:A2:15:F4:9D:D1:4E:5A:26:14:6A:41:0D:F5:C6
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2E9A0BA6C98E11E583B5610BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.208.39.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c9:a5:bd:3b:5f:ee:e5:28:ef:ee:ac:cc:be:65:dd:ce:99:
c6:33:5b:27:ba:0c:04:f2:05:d8:29:92:1c:8a:50:14:95:78:
9d:36:70:6b:e2:db:76:1e:c7:95:7a:18:20:f1:23:f3:eb:41:
16:a0:b2:bc:3b:eb:02:f2:69:4a:94:69:17:4f:7d:8b:a7:8d:
7c:c7:2c:55:67:13:5d:43:4a:50:27:b4:c1:55:a0:1c:df:bb:
e1:4a:0e:60:94:97:7c:0d:df:e7:83:3a:ff:d3:54:7e:83:2b:
e9:1d:5f:8f:53:c9:5f:85:ea:8b:b9:bb:a9:0e:1f:96:b0:dd:
6b:e0:22:82:5d:04:c9:37:54:22:96:9b:d6:69:3e:ca:ba:f3:
4d:45:0a:f8:d5:4f:01:50:fc:cf:39:3b:af:5f:f5:02:ce:c2:
12:21:36:5a:06:96:93:98:eb:b8:7f:19:5a:f5:60:07:d4:52:
f1:78:9c:4d:5e:1f:d4:1c:fa:97:2c:37:f6:6f:4b:5e:0a:9a:
45:7a:32:a5:47:7a:12:a9:9b:4c:b6:1c:6c:c1:44:54:61:be:
3d:62:25:3a:d5:16:b4:42:67:5c:1a:d8:9b:c8:2b:e5:b9:a3:
e8:2b:88:9a:d2:a6:e2:a6:6c:b9:40:ab:1f:49:43:5d:b3:76:
8a:43:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org