Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
File: C8290E18C98C11E5915CA987C4F9AE02.roa (raw, json)
Hash identifier: 8dxI7l6ytAuSZHzjXkx9eyiPk1VC4dDvpJ/y7kPuNr8=
Subject key identifier: 4E:C4:99:49:38:8F:8A:D5:52:9B:73:C2:0F:38:5C:FC:88:A0:61:07
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3337
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:26 +0000
ROA not before: Tue 16 Aug 2022 02:30:26 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 65077
IP address blocks: 1.9.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13111 (0x3337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:26 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb0142-d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:91:85:15:2c:ab:b6:ab:34:9e:a6:b6:a6:
65:a2:59:1f:51:66:ee:73:32:f9:79:59:0e:03:bf:
a5:61:b8:97:a2:3a:a1:b1:60:16:d3:0b:1b:55:19:
5f:ef:06:0b:e1:15:b4:c0:20:35:4a:67:ec:d6:8d:
b3:f3:d5:75:5a:d4:06:ab:1a:66:d1:c5:e0:db:da:
84:3b:65:ed:71:41:93:27:65:f4:b0:5a:fe:c0:42:
46:82:fd:bf:2a:4c:ca:51:91:87:3c:93:f6:7f:e9:
5c:da:ce:86:04:da:9b:d1:74:45:86:e8:89:71:96:
9a:d8:e1:85:d6:56:72:bc:b2:66:c0:e4:22:ec:fc:
88:c5:af:a7:b7:53:50:e1:35:16:4f:05:ba:4c:46:
71:b2:cc:4a:5a:58:7e:85:2d:00:96:00:d2:95:1a:
69:51:39:75:d9:50:65:96:3b:2d:38:98:23:b1:f7:
9e:8b:83:56:0e:9d:f4:16:33:84:1a:f3:14:79:8e:
48:ca:d4:81:f5:b1:d3:4c:a4:cf:52:88:5f:e1:9e:
73:ef:ed:db:59:bd:8f:0b:dd:d1:30:c9:88:18:85:
d2:7b:81:27:6e:ad:3c:b4:84:b0:28:74:a8:57:99:
d4:0d:28:53:8e:5b:82:c2:2e:be:c1:3b:4a:16:0d:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:99:49:38:8F:8A:D5:52:9B:73:C2:0F:38:5C:FC:88:A0:61:07
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.9.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b2:bd:95:85:67:db:af:52:89:7f:97:d8:e5:f5:f6:bf:cc:
b9:40:a5:b7:fb:3d:c7:bf:c5:77:23:ad:a4:8a:46:18:51:f2:
c3:8a:84:25:a9:b5:3e:0b:60:ee:50:54:2e:13:16:87:48:b2:
bf:e0:e9:41:63:da:7c:fa:cb:7e:d5:09:cd:22:b8:d0:ef:06:
6e:63:55:bf:e7:ec:01:1b:62:39:e7:93:e9:cf:0f:86:0c:10:
f2:ac:97:54:f6:2e:a7:57:bd:a5:a3:7a:02:da:cf:4b:ce:14:
a8:4d:f9:83:ce:2a:f2:a1:d9:ef:ac:61:73:aa:cc:f6:4a:88:
b6:e6:58:7a:cc:b9:e8:db:c2:04:77:c1:08:fc:50:a4:fe:88:
97:8e:4b:a6:96:0d:9c:5f:26:23:dd:07:b8:23:1e:ca:9f:33:
a8:fb:de:ab:af:8e:69:82:09:f6:6f:b3:23:fe:c1:52:b3:27:
36:45:40:63:75:f1:cc:23:34:ec:1c:25:fa:3c:54:31:a7:b4:
78:de:21:c2:bf:9c:e9:3b:e6:51:9d:e4:04:01:b1:ec:16:12:
44:5a:bb:36:3e:0c:b5:5d:73:c5:90:91:5c:f6:0c:37:73:00:
e0:b9:e8:ba:37:12:d0:19:b5:04:91:bb:c5:ab:cd:79:44:c2:
fc:42:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org