Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/E49250AA58E511EEB526084CC4F9AE02.roa
File: E49250AA58E511EEB526084CC4F9AE02.roa (raw, json)
Hash identifier: XQQfWhvCN9ZAXF/mQh7qhMnLusSfzHoO3PDUGAZxGy4=
Subject key identifier: 15:B0:6C:F4:CA:07:CC:9F:10:AB:60:48:1D:30:20:85:7D:B4:34:7E
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27E6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/E49250AA58E511EEB526084CC4F9AE02.roa
Signing time: Tue 26 Sep 2023 13:39:34 +0000
ROA not before: Tue 26 Sep 2023 13:39:34 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 212517
IP address blocks: 122.254.65.0/24 maxlen: 24
122.254.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10214 (0x27e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Sep 26 13:39:34 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6512df16-8c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:1a:dc:47:51:6e:e6:4c:d2:ce:78:b2:e2:
5b:68:86:96:f3:1b:8f:f1:a7:fa:07:0f:d6:c4:de:
7f:01:31:87:0a:f9:76:1a:6d:43:07:da:d3:52:74:
01:d4:30:54:58:e7:f8:b0:61:0c:38:84:91:c7:fd:
43:5a:9e:98:91:33:6c:01:b4:01:e8:8f:1d:ec:a7:
7d:c9:cc:8d:38:31:ad:4b:a4:f8:b5:e2:b9:53:ba:
8f:ba:60:01:c3:3e:d9:76:63:ed:00:08:0c:67:81:
56:fc:61:19:58:d9:7d:29:70:8b:94:a1:61:05:43:
5c:4b:68:2c:ca:1d:9f:48:ae:f1:60:97:83:ec:f8:
63:34:14:a0:a5:59:57:3f:b9:bf:e2:5b:9a:83:bd:
ea:36:e5:82:dd:8e:b9:00:3e:8c:6f:27:fe:45:59:
eb:51:69:89:f2:57:04:a3:47:61:4d:24:b4:05:27:
81:4b:72:8d:e2:32:41:1a:93:d2:c6:24:53:e5:36:
89:20:55:ab:a9:5d:83:79:5f:ec:45:d2:cd:da:aa:
ef:e8:17:61:3b:71:19:ad:c4:b5:d7:cd:6e:71:a1:
6f:61:01:cd:07:59:65:7b:d6:7f:8c:34:e5:ac:84:
fd:56:5e:b2:58:fd:f7:b1:14:9a:48:f6:e5:d7:fb:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:6C:F4:CA:07:CC:9F:10:AB:60:48:1D:30:20:85:7D:B4:34:7E
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/E49250AA58E511EEB526084CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.65.0/24
122.254.67.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:4a:14:64:2a:22:4e:d5:ba:b0:8b:9a:24:55:ed:f6:78:98:
cb:ed:e0:00:92:9c:42:4c:92:ec:5d:57:e6:ec:97:85:ea:b0:
9a:08:e5:98:ee:65:ad:b2:f5:d0:4c:58:8c:92:7a:1e:b0:0b:
ef:7d:06:2f:15:45:05:87:5f:3a:e3:43:d4:53:13:2c:2a:c4:
9d:3d:2c:3d:6c:30:9e:85:7b:94:cc:e8:08:55:71:52:02:23:
ad:d2:a1:9b:a3:e2:51:cf:65:8c:bb:c0:3a:7e:7c:41:31:bd:
d9:1a:2c:9b:45:30:5d:1b:2b:b9:bc:af:67:84:b5:5b:3c:1c:
78:f3:15:84:3e:13:ea:3f:7d:28:48:12:e7:f5:e3:fc:b3:78:
47:6c:c9:d5:79:b4:8f:a9:61:0e:be:07:11:60:f8:ee:90:d2:
e1:da:9b:f4:72:9a:6a:42:a6:44:4b:3b:c3:6e:58:e2:91:3c:
50:93:52:3b:a7:65:1f:64:b3:d2:06:e6:77:f5:fd:41:bc:30:
f9:20:2f:0c:d5:86:24:0f:1a:52:0c:b4:75:81:52:1b:0c:ab:
6d:72:01:c1:bc:aa:a3:a0:30:33:a5:bb:70:b9:0d:13:52:a9:
ca:9e:40:34:39:95:0b:f4:0f:8a:24:6c:da:97:f9:de:80:20:
38:92:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:16 2024 by rpki-client on console-fra.rpki-client.org