Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55793B52FF5011ED905E291BC4F9AE02.roa
File: 55793B52FF5011ED905E291BC4F9AE02.roa (raw, json)
Hash identifier: 82YSkNtUygP3DLbSwg1dcqZNf/PTmaxIbfdv/ieKCd8=
Subject key identifier: B7:11:BB:48:AA:B7:C9:3F:8A:10:68:EF:D2:D9:33:B8:FD:EA:E7:80
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2770
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55793B52FF5011ED905E291BC4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:39 +0000
ROA not before: Wed 28 Jun 2023 16:02:39 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 62390
IP address blocks: 122.254.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10096 (0x2770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:39 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c599e-d372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:b8:a2:ec:77:9d:ad:59:17:02:26:60:ff:
80:72:70:84:c0:af:d1:82:ef:d7:bc:60:a0:99:1c:
2d:4d:cd:df:13:5d:cf:f1:4c:68:3a:78:4c:3d:97:
da:a2:8b:8e:ab:6b:3e:8b:c3:0a:55:ea:b0:1e:53:
94:e7:9b:40:d7:11:e1:31:62:76:f1:07:36:1b:ea:
d7:78:46:95:8d:36:ea:39:c8:a3:e1:3f:3a:15:1e:
eb:3f:ed:52:52:34:0d:67:1c:55:89:28:f6:82:14:
31:ad:e9:02:58:19:66:a2:f6:91:9a:43:a6:99:61:
ff:ac:3b:8d:37:9f:3f:f5:8e:7a:de:f9:79:b9:ac:
c7:68:4f:26:d5:2e:29:07:5a:60:fe:15:36:a2:b4:
5d:22:29:67:d1:86:bb:28:88:c2:c4:fe:fa:92:c6:
ad:c5:19:90:f0:14:2a:15:90:8d:68:88:89:52:de:
e7:9b:1a:0c:ea:13:9d:3e:4d:d1:13:2d:69:1e:f5:
d2:d5:05:3c:95:a2:01:c2:55:49:f1:7a:92:3e:99:
d6:fc:b0:89:2c:2e:24:84:20:82:15:e2:06:bd:f9:
ed:2e:29:cb:ca:2b:43:fa:b1:fa:4a:9e:6e:8b:ee:
3a:e5:6a:05:9c:99:6e:83:c9:7c:e7:58:ea:2e:b9:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:BB:48:AA:B7:C9:3F:8A:10:68:EF:D2:D9:33:B8:FD:EA:E7:80
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55793B52FF5011ED905E291BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7c:2a:ff:7e:d9:86:db:26:25:3b:87:b6:eb:08:b1:47:26:
31:c5:08:58:95:f0:ca:74:b6:21:fb:63:8e:c6:37:e8:31:33:
e2:8d:f2:5a:51:f0:a0:65:8f:3e:ad:c2:76:7a:bc:8a:c4:a3:
cf:d3:45:db:00:b2:ca:ca:93:12:eb:af:db:dd:2b:19:d6:3c:
78:2f:01:80:4d:c8:78:99:dc:f2:94:bb:fe:f0:c1:b6:8b:af:
db:47:bd:79:9a:e9:9a:c8:8c:5f:65:0d:38:be:ff:bc:5f:2e:
18:3f:f2:75:46:cd:a4:b4:4a:38:21:61:6e:a4:f0:b1:98:51:
81:63:cf:bb:dc:1c:96:d9:84:49:a6:f1:a3:c4:2e:e2:20:ef:
72:d6:72:6d:a3:f6:63:78:1b:b2:43:85:b6:81:da:bc:bc:21:
fa:72:e5:8e:be:58:43:50:ca:2a:f8:ab:81:5a:e2:0f:c3:01:
11:4d:03:73:e8:90:26:3f:15:fa:58:37:dd:01:33:a8:cc:5e:
7f:12:f1:a1:89:30:23:f1:47:77:59:3c:d4:82:10:dd:31:1e:
7b:de:88:bc:2f:c3:53:e0:75:e6:61:ec:14:c3:70:90:b5:8c:
08:85:80:b0:ce:92:e9:72:43:09:d8:85:a6:5a:23:c0:83:15:
82:4e:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:35 2024 by rpki-client on console-ams.rpki-client.org