Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
File: 59C8096CE25511EDBC456C82C4F9AE02.roa (raw, json)
Hash identifier: ajXCWPkkNcuY387Q9NFIgEzLe9923VaSbVM0vkG1BBM=
Subject key identifier: 6D:3A:2D:65:03:43:91:AA:E5:EF:9B:37:70:52:35:29:B7:F0:42:80
Certificate issuer: /CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Certificate serial: 0F
Authority key identifier: 02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
Signing time: Mon 24 Apr 2023 04:06:13 +0000
ROA not before: Mon 24 Apr 2023 04:06:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 50058
IP address blocks: 2001:df2:45c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Validity
Not Before: Apr 24 04:06:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64460034-6efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:ba:8e:ae:69:e8:c9:a0:1f:26:63:e3:fb:
33:a8:93:de:0d:ce:a9:35:4d:6f:23:d1:db:f4:7f:
9a:2b:7b:be:38:61:c3:f0:db:83:92:63:0f:6f:94:
3d:e2:cb:e4:52:2f:62:0b:b0:5d:e6:86:55:44:82:
1d:47:65:df:19:66:bc:fb:a0:ea:be:3e:19:66:ac:
4a:ab:21:5f:1d:45:44:fb:6f:b7:21:64:bd:92:62:
5e:de:7f:97:c7:d0:2e:9f:03:92:5b:a3:11:9d:0c:
06:1b:b9:7f:40:64:89:fe:c9:fa:55:94:c2:1a:4f:
69:14:74:a1:02:0b:ef:96:19:a3:a2:78:35:5a:32:
1f:a6:51:7e:d5:89:fb:9a:18:84:e6:4e:e7:70:44:
26:56:04:1f:83:5a:47:9a:d2:1e:53:bb:a5:27:0e:
3a:93:f9:e2:68:cf:fe:1a:76:b4:b2:58:61:71:29:
5d:39:eb:26:32:e1:88:43:62:cd:ce:de:50:8d:ce:
26:a7:dd:c8:88:d7:c0:8d:a6:ff:6a:97:ac:2e:5e:
8e:6e:d0:e7:5e:0e:9f:2a:ac:e3:ee:0b:d5:8e:83:
55:6d:31:15:d8:0c:7b:b2:f9:e4:d7:dc:d9:07:a4:
17:99:02:ed:79:27:eb:0d:28:6a:cf:28:41:73:11:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:2D:65:03:43:91:AA:E5:EF:9B:37:70:52:35:29:B7:F0:42:80
X509v3 Authority Key Identifier:
keyid:02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:c7:5e:b0:3d:56:ae:b3:fa:54:0d:7b:28:56:87:e1:62:f9:
47:0c:d4:2d:30:53:8f:7e:ea:a9:0a:0e:a0:48:79:1c:39:dc:
7e:20:e8:7e:70:27:09:a7:81:50:47:db:a0:92:ae:d0:53:b1:
4c:78:ee:52:13:24:7a:84:32:de:fb:ca:f1:84:d1:1f:ee:3f:
b3:cc:d1:30:3d:a0:4d:17:40:fc:ac:b5:b0:2e:72:06:ba:35:
33:75:30:c2:9c:50:46:4f:a4:d7:12:09:93:2e:83:4e:2a:46:
c6:78:a7:f7:0a:48:b6:d9:ff:f3:69:26:be:42:bd:db:d1:d7:
3b:88:88:1f:09:68:91:b1:24:0a:a4:6e:0c:e1:0a:f8:12:77:
89:2e:a5:c3:c5:c5:17:67:7c:1d:c1:fa:f4:22:75:63:34:d6:
c4:31:e8:8c:21:25:3a:84:bc:f8:dc:89:3e:25:ac:5a:ce:8d:
b5:22:9e:77:a5:36:28:dd:33:48:d0:30:84:f9:11:56:4e:88:
be:d3:3b:b4:a8:65:1c:fa:8b:26:a8:47:7a:65:c2:86:05:03:
c4:e9:32:11:34:05:ff:fb:a5:2c:99:4e:fa:43:2a:1d:70:bc:
ef:64:6e:99:81:d5:f5:c7:cd:1e:75:99:b3:9b:84:52:94:27:
5a:60:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org