Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA37D/DC9BB5A84BC011E982334B46C4F9AE02/E0AE70CC68D911EA8F11BA0EC4F9AE02.roa
File: E0AE70CC68D911EA8F11BA0EC4F9AE02.roa (raw, json)
Hash identifier: Qtv+FfF7Lfm6/CHD4AoedvojbWUOqV0f61dmkvbtO04=
Subject key identifier: E4:74:51:99:D0:D1:EF:42:E7:C4:B1:A9:E5:C4:D8:1C:15:28:BE:7B
Certificate issuer: /CN=A91FA37D/serialNumber=7E942765D4530F3519D67D7770ABE711F4E9F06F
Certificate serial: 0A7D
Authority key identifier: 7E:94:27:65:D4:53:0F:35:19:D6:7D:77:70:AB:E7:11:F4:E9:F0:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fpQnZdRTDzUZ1n13cKvnEfTp8G8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA37D/DC9BB5A84BC011E982334B46C4F9AE02/E0AE70CC68D911EA8F11BA0EC4F9AE02.roa
Signing time: Fri 02 Jul 2021 18:44:42 +0000
ROA not before: Fri 02 Jul 2021 18:44:42 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 4785
IP address blocks: 45.117.101.0/24 maxlen: 24
45.117.102.0/24 maxlen: 24
45.117.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D/serialNumber=7E942765D4530F3519D67D7770ABE711F4E9F06F
Validity
Not Before: Jul 2 18:44:42 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60df5e99-1203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:a1:4c:52:b7:d4:b6:80:81:64:bd:5a:c8:
92:38:fd:43:90:c2:c6:04:2b:de:4c:80:6b:f2:64:
2d:12:4f:40:bf:6c:68:18:4d:82:68:c4:10:f6:54:
a9:e5:c4:2a:0d:1a:7c:b0:a4:ff:06:c1:a3:11:74:
33:5f:59:58:a0:e9:17:8a:a8:84:b5:24:fb:94:3e:
19:0c:b6:a6:e1:ad:9c:c9:6b:17:00:84:11:0d:b0:
bb:f7:b3:b0:f2:89:46:9b:cf:19:6f:36:ad:f4:73:
92:c2:b2:49:23:40:03:0b:3c:a4:e5:4b:62:76:fb:
d5:b6:5b:38:0a:2b:71:ab:1f:fa:0f:ce:2c:37:e4:
3a:da:f2:ed:13:2c:d2:3f:ad:65:6f:91:3f:d7:df:
fc:ed:dd:8e:41:83:7d:c0:55:7f:ed:dc:b2:72:8e:
31:11:18:4d:7a:1f:4d:aa:68:10:49:4c:4a:c4:77:
d3:1c:05:48:fd:cd:d0:8e:9b:bb:fd:f1:d5:28:8d:
cb:25:44:26:44:6e:8d:33:83:71:30:d9:14:d1:56:
a1:3e:ec:9f:e7:fb:5a:88:c5:df:2b:5c:a8:79:8c:
a9:4b:d3:03:e1:23:83:b3:8e:11:ed:21:2f:85:6a:
42:03:94:07:ff:38:7d:2d:b9:a9:2e:56:cf:11:be:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:51:99:D0:D1:EF:42:E7:C4:B1:A9:E5:C4:D8:1C:15:28:BE:7B
X509v3 Authority Key Identifier:
keyid:7E:94:27:65:D4:53:0F:35:19:D6:7D:77:70:AB:E7:11:F4:E9:F0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA37D/DC9BB5A84BC011E982334B46C4F9AE02/fpQnZdRTDzUZ1n13cKvnEfTp8G8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fpQnZdRTDzUZ1n13cKvnEfTp8G8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA37D/DC9BB5A84BC011E982334B46C4F9AE02/E0AE70CC68D911EA8F11BA0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.101.0-45.117.103.255
Signature Algorithm: sha256WithRSAEncryption
86:52:22:4f:02:c5:ad:23:c0:aa:54:d8:b9:3e:88:a4:5d:99:
77:90:ba:5e:86:8e:af:26:0b:bc:98:ce:72:84:fa:ed:ea:bb:
ee:c8:93:61:ec:8a:f4:da:60:71:83:e4:48:02:a9:ba:ad:26:
b5:64:4a:3e:5f:e3:d7:73:4c:b9:e6:cb:bb:8b:64:0f:bf:1b:
52:3c:d2:07:43:65:78:bb:d3:11:47:fe:bc:98:b1:a8:ba:29:
69:0e:66:fb:00:74:2c:22:84:4d:c3:46:f9:ff:18:54:25:0b:
1f:d9:8f:99:19:a6:7b:0e:77:6b:97:8f:4c:05:5b:1a:1c:61:
56:19:2c:7c:2d:88:00:f9:17:6c:44:a9:ef:a9:81:48:f2:fd:
71:4f:3a:af:39:b9:2d:86:14:79:80:3d:20:17:80:1c:ca:b5:
4b:96:18:45:e4:2a:08:ba:43:41:08:91:2c:7a:45:60:ad:f5:
ae:3a:a1:b7:7c:5b:7a:0d:fc:2c:e0:17:dd:fb:00:7c:07:aa:
e2:f5:28:aa:bd:23:aa:47:8c:f4:d8:71:15:39:90:25:48:62:
16:18:3f:29:a3:6a:c5:6e:27:cf:97:8d:0f:e4:90:38:de:6b:
04:63:a3:9b:0d:21:3f:74:ba:91:6f:70:40:76:a8:b0:b6:7b:
e3:29:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org