Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
File: BA4F1234201D11EE8BD7393AC4F9AE02.roa (raw, json)
Hash identifier: x+4IeF9lo1rzICQKSFuE5+AxBEC7fSBe699rH2Jpl7s=
Subject key identifier: 62:48:94:64:F3:EF:1E:D2:0D:BE:9B:2C:21:A3:38:D9:65:5C:55:FA
Certificate issuer: /CN=A91E178D/serialNumber=23448B1856AFDE7CEEBB5924FD8AD805F07E06B0
Certificate serial: 02
Authority key identifier: 23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I0SLGFav3nzuu1kk_YrYBfB-BrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
Signing time: Tue 11 Jul 2023 19:04:15 +0000
ROA not before: Tue 11 Jul 2023 19:04:15 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137208
IP address blocks: 103.104.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E178D/serialNumber=23448B1856AFDE7CEEBB5924FD8AD805F07E06B0
Validity
Not Before: Jul 11 19:04:15 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64ada7ae-6cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:94:1b:a9:ec:9f:bf:84:4e:a3:39:29:9d:
45:35:d7:0e:90:a3:56:1f:3c:2e:53:a1:ef:29:d6:
07:76:0e:c5:71:20:83:65:47:b7:19:8a:e2:f8:aa:
bd:5c:91:27:8e:49:4d:37:6c:ba:96:66:fb:16:50:
79:d9:80:1f:e9:0d:f7:d8:33:d6:85:fc:78:63:c2:
a9:83:ea:24:99:e3:c8:5d:e4:eb:72:a3:d2:b9:a9:
ff:ca:d1:7d:69:bb:69:8c:38:85:9f:33:09:15:9c:
61:19:04:14:a7:0a:30:95:47:2d:78:7c:00:c1:7e:
f1:39:1e:c9:84:d5:48:21:b5:83:97:7f:4f:ec:03:
9d:95:40:dd:19:64:3d:23:24:d1:59:23:85:3c:12:
23:cf:97:24:58:f5:c9:5a:0c:fb:64:c8:0d:ef:a3:
9d:73:b5:5a:55:7d:08:5d:f3:26:a1:7c:9d:f6:20:
0c:dc:ec:48:56:40:87:3c:e7:7c:ae:60:8d:a0:6c:
05:8b:30:60:e3:42:19:f1:2d:e3:59:66:94:76:70:
34:bb:f0:ee:79:e4:04:01:77:6b:6d:39:4e:7e:44:
b5:30:e8:aa:4f:9d:2d:02:45:64:e5:99:08:48:6c:
4e:54:01:e9:90:34:df:7a:57:e2:f2:86:b4:b3:6c:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:94:64:F3:EF:1E:D2:0D:BE:9B:2C:21:A3:38:D9:65:5C:55:FA
X509v3 Authority Key Identifier:
keyid:23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/I0SLGFav3nzuu1kk_YrYBfB-BrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I0SLGFav3nzuu1kk_YrYBfB-BrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.242.0/23
Signature Algorithm: sha256WithRSAEncryption
07:b9:d9:52:05:a5:07:48:05:1f:b6:54:19:a3:7c:74:da:47:
ec:c9:d3:15:ad:1c:77:ae:81:84:6d:a1:0d:3e:5f:40:e8:4c:
b0:f6:66:60:5f:7e:25:bf:da:a3:d2:fd:c6:a3:02:a4:b5:99:
59:07:6e:3d:ed:16:bc:37:2b:5b:36:e3:de:19:a3:c9:e8:50:
ab:91:72:64:b1:cc:e0:44:d8:7c:52:a1:c0:e2:ab:5a:29:6f:
61:ce:e0:16:eb:3f:26:4a:6f:fc:b6:b5:2c:4b:c6:57:12:0f:
05:79:ca:de:76:c4:5f:50:5e:ae:68:9b:54:92:d8:a2:14:2f:
16:2d:24:9d:87:68:01:c3:a1:97:cc:4b:61:c0:d2:59:33:28:
1d:db:c2:36:61:18:2e:27:c2:87:44:83:78:78:3e:41:44:0a:
1b:7c:85:d1:1a:8d:69:ca:7f:e7:15:9e:9b:ac:d0:bc:72:e3:
87:44:e1:44:2d:e3:63:3b:f1:60:35:19:53:1c:72:9e:a9:d1:
1e:70:c3:99:e0:dc:f5:c3:3a:6c:ac:dc:47:f7:3e:45:8c:83:
89:91:ce:32:bf:91:fc:3f:5f:19:b3:67:57:91:2f:0c:45:b7:
0e:44:4d:3f:e7:fb:e6:3c:17:72:8e:fc:ab:b0:ca:dd:5a:09:
27:88:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org