Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E3D/02A2FF12225C11E2B3438FBC08B02CD2/E6610FA8B0EA11E5A2DD683CC4F9AE02.roa
File: E6610FA8B0EA11E5A2DD683CC4F9AE02.roa (raw, json)
Hash identifier: bq1Z/Osu/9SoxvUvA6QPDDQux35jiVSm8O+EnEUf+9s=
Subject key identifier: 27:AA:F7:B4:E8:16:3A:86:86:FF:7F:B2:97:AA:EB:09:CB:E1:D0:A1
Certificate issuer: /CN=A91E6E3D/serialNumber=22892EDB74D0D134FBC74E5C094AC8E3D62E848E
Certificate serial: 32C7
Authority key identifier: 22:89:2E:DB:74:D0:D1:34:FB:C7:4E:5C:09:4A:C8:E3:D6:2E:84:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ioku23TQ0TT7x05cCUrI49YuhI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E3D/02A2FF12225C11E2B3438FBC08B02CD2/E6610FA8B0EA11E5A2DD683CC4F9AE02.roa
Signing time: Thu 12 Jan 2023 15:50:58 +0000
ROA not before: Thu 12 Jan 2023 15:50:58 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 38590
IP address blocks: 2001:df0:dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12999 (0x32c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E3D/serialNumber=22892EDB74D0D134FBC74E5C094AC8E3D62E848E
Validity
Not Before: Jan 12 15:50:58 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63c02c62-dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:41:bf:89:d5:1a:10:b0:cc:03:2e:a2:12:
bc:f7:e6:77:8d:5a:19:84:20:55:f8:35:ec:52:1f:
67:0a:98:51:d0:f6:8f:23:f1:d0:3b:34:c2:cc:77:
62:3d:8e:52:60:53:59:66:50:e9:c3:76:ce:a2:0e:
ab:89:bd:95:94:5b:d6:04:ad:50:50:13:61:3a:75:
fd:09:ff:f6:67:0c:a4:dd:cf:e3:47:75:e9:8f:0e:
da:8a:e4:25:88:f8:52:a8:20:ee:9b:db:57:06:2c:
c4:bf:77:43:9f:91:bc:eb:32:6a:cf:02:b7:75:7b:
3e:ac:f9:7f:c8:ba:0c:66:91:bb:80:78:4f:ad:ed:
d6:3a:59:2e:19:b3:49:48:ff:bf:25:8a:85:be:c3:
b4:50:b7:1e:91:7e:f6:5f:82:19:ab:42:f4:e7:21:
08:ad:01:40:52:7d:1b:f8:83:b5:53:9a:70:c9:98:
a5:22:f2:41:78:72:be:01:fc:73:c6:5f:fd:84:86:
49:86:f6:72:11:8c:42:07:55:f3:9f:8a:a3:00:a9:
c7:d3:79:fd:84:ee:42:46:54:10:f0:66:98:27:6d:
8c:a2:c7:b7:81:6e:53:3f:55:59:fa:b2:dc:e8:10:
d9:e8:24:55:d4:65:61:28:b7:18:20:2a:7d:90:7e:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:F7:B4:E8:16:3A:86:86:FF:7F:B2:97:AA:EB:09:CB:E1:D0:A1
X509v3 Authority Key Identifier:
keyid:22:89:2E:DB:74:D0:D1:34:FB:C7:4E:5C:09:4A:C8:E3:D6:2E:84:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/02A2FF12225C11E2B3438FBC08B02CD2/Ioku23TQ0TT7x05cCUrI49YuhI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ioku23TQ0TT7x05cCUrI49YuhI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/02A2FF12225C11E2B3438FBC08B02CD2/E6610FA8B0EA11E5A2DD683CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:dc::/48
Signature Algorithm: sha256WithRSAEncryption
13:63:f4:d7:66:a0:c9:9b:b9:e5:50:ec:54:7c:f3:a3:b9:86:
84:47:82:d1:b7:ec:ec:1e:d4:cc:1e:61:54:c3:05:6d:e6:96:
5a:e8:a3:4c:4e:36:b1:1c:3e:f4:5c:c5:84:d1:aa:71:64:34:
f0:6b:cb:93:a6:52:7a:18:4d:67:f8:f7:75:75:b0:ca:8b:10:
0a:d5:46:59:c1:55:8b:31:ab:d8:04:fa:9f:97:a9:52:20:25:
27:fb:91:a9:8d:ef:d2:3a:8c:a5:a7:af:9e:fa:00:a4:2d:1f:
23:e1:a9:46:97:17:9c:96:55:68:fd:df:96:05:63:c7:bc:67:
ac:6f:ac:da:59:35:f9:85:ff:ab:b8:e8:d0:0e:f1:72:3d:78:
09:0c:38:5b:da:01:2f:69:32:17:fd:04:46:7b:d7:c2:dd:ee:
3a:c6:7b:53:17:9a:95:ee:f5:01:b4:1c:19:07:d7:be:50:31:
6e:a6:05:47:8f:50:30:63:81:33:70:9f:67:90:14:37:1d:0d:
ab:c8:6a:0e:6d:7c:84:3b:d8:d1:38:81:b5:16:ce:73:3f:a3:
fa:10:a7:1a:56:f4:17:78:fe:6f:46:6d:56:00:84:1d:d9:c6:
df:4a:cc:b0:91:f5:3a:c4:18:01:ca:52:e5:c6:fd:d7:cf:70:
b4:02:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org