Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/apac_ZIS4wOs3JwphyocKYL9Jbs.roa
File: apac_ZIS4wOs3JwphyocKYL9Jbs.roa (raw, json)
Hash identifier: R/GfKMQle2bmXOps5Q9T+l6kDldDQhgasyldVfBJ6lI=
Subject key identifier: 6A:96:9C:FD:92:12:E3:03:AC:DC:9C:29:87:2A:1C:29:82:FD:25:BB
Certificate issuer: /CN=15a8ac30f422d2cba7efa3545d0e93d7aec87418
Certificate serial: 07A7C0E6
Authority key identifier: 15:A8:AC:30:F4:22:D2:CB:A7:EF:A3:54:5D:0E:93:D7:AE:C8:74:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaisMPQi0sun76NUXQ6T167IdBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/apac_ZIS4wOs3JwphyocKYL9Jbs.roa
Signing time: Sat 01 Jan 2022 07:54:21 +0000
ROA not before: Sat 01 Jan 2022 07:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208398
IP address blocks: 2001:678:ae4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128434406 (0x7a7c0e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a8ac30f422d2cba7efa3545d0e93d7aec87418
Validity
Not Before: Jan 1 07:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a969cfd9212e303acdc9c29872a1c2982fd25bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:65:75:8e:0a:01:68:36:c1:9f:92:1d:73:
25:45:3c:70:c6:9c:1a:ea:8f:d0:41:36:80:78:8a:
a3:4a:16:68:ee:ad:f2:e0:13:87:9c:f9:d7:57:bd:
6d:17:0b:05:cf:17:63:dc:1e:44:db:cf:8a:37:c2:
05:96:3d:cd:ad:c0:91:98:08:33:db:c2:7f:35:d0:
f5:cd:46:df:a9:2d:a8:ea:1a:2a:80:ba:a9:ae:26:
6d:e2:f1:3e:bf:4e:c0:8e:b1:26:2a:29:7e:ed:1c:
e1:63:21:8d:9f:e9:e4:7d:57:fb:ae:f4:ea:ef:78:
d9:bc:92:72:44:b7:58:bd:03:ab:29:a1:29:b8:2d:
1b:61:04:1a:f3:ad:98:5a:20:d5:64:4d:b2:94:b7:
88:78:ca:33:35:e5:ee:fd:5c:e8:8d:71:63:0c:78:
16:8a:be:a1:75:90:f6:87:ba:7b:c7:03:62:eb:fe:
04:a5:f2:a9:6c:7b:f5:69:fd:a2:ee:ff:a6:b2:7b:
a5:0d:90:20:d1:d2:9b:a8:a5:21:97:1d:71:f1:a5:
f4:65:1d:c3:cb:37:80:e6:59:c8:ac:fc:a6:d1:24:
e0:0b:33:de:da:98:22:d3:8b:0c:ac:04:4f:40:5a:
34:8a:65:25:e3:00:3d:02:cd:d7:b8:0d:03:aa:95:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:9C:FD:92:12:E3:03:AC:DC:9C:29:87:2A:1C:29:82:FD:25:BB
X509v3 Authority Key Identifier:
keyid:15:A8:AC:30:F4:22:D2:CB:A7:EF:A3:54:5D:0E:93:D7:AE:C8:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaisMPQi0sun76NUXQ6T167IdBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/apac_ZIS4wOs3JwphyocKYL9Jbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/FaisMPQi0sun76NUXQ6T167IdBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ae4::/48
Signature Algorithm: sha256WithRSAEncryption
2d:dc:6c:eb:f7:63:12:73:83:2c:c4:22:a9:cd:e2:69:79:cf:
dc:45:28:a4:05:12:c8:ad:53:21:6a:e4:a2:02:9b:97:c6:ce:
51:97:e4:4d:d6:81:ab:b1:0c:2a:07:e3:eb:2d:7f:1b:7f:9a:
1f:04:28:6c:92:b0:46:d8:db:f3:d1:a2:cc:0f:2a:43:1d:d4:
97:d9:57:6f:d3:bb:f4:9a:ce:0c:68:c8:d8:cd:57:a0:92:34:
3a:45:e6:e6:80:f7:38:ba:3c:ec:ce:17:60:85:07:4c:6b:61:
50:0e:54:ba:33:9d:c2:11:c3:d1:e6:02:4a:fd:b7:f3:65:0f:
83:15:45:cf:8a:ad:9d:16:7d:a0:55:2e:e2:2f:71:66:ea:26:
cf:24:e6:a6:75:a6:5e:ac:a0:5b:de:51:72:77:b1:49:35:df:
d3:e9:44:9e:85:44:0c:ae:d4:d3:9c:19:3e:4e:e8:d2:df:d4:
c5:cc:18:05:00:f5:eb:93:8c:61:ae:11:a7:fa:83:70:7c:d4:
30:22:92:55:79:54:64:87:de:8d:08:c6:1e:2b:62:6a:85:19:
da:4d:2b:ab:86:52:9f:13:c0:0d:96:f5:89:71:bd:4f:05:1d:
92:d7:11:75:ca:8d:ac:86:74:74:2a:d0:79:0b:5f:cf:9f:c3:
43:91:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:50 2024 by rpki-client on console-ams.rpki-client.org