Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/3/38382e3133352e37342e302f32342d3234203d3e20393833.roa
File: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier: cztt2XyDPAVyG8RFlS93sSAeKXm5MIvVN0rsxESCxj0=
Subject key identifier: 3E:35:60:37:AD:2C:70:0E:0F:A7:0D:03:EA:9C:61:A6:F8:A0:0F:76
Certificate issuer: /CN=a662febc86bd39c9eac4aba4733a01c0eb1c0f1a
Certificate serial: 52CB840BA53F99E52B1830A0D6D21D46E5E71057
Authority key identifier: A6:62:FE:BC:86:BD:39:C9:EA:C4:AB:A4:73:3A:01:C0:EB:1C:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmL-vIa9OcnqxKukczoBwOscDxo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/38382e3133352e37342e302f32342d3234203d3e20393833.roa
Signing time: Mon 15 Jul 2024 14:27:27 +0000
ROA not before: Mon 15 Jul 2024 14:22:27 +0000
ROA not after: Mon 14 Jul 2025 14:27:27 +0000
asID: 983
IP address blocks: 88.135.74.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cb:84:0b:a5:3f:99:e5:2b:18:30:a0:d6:d2:1d:46:e5:e7:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a662febc86bd39c9eac4aba4733a01c0eb1c0f1a
Validity
Not Before: Jul 15 14:22:27 2024 GMT
Not After : Jul 14 14:27:27 2025 GMT
Subject: CN=3E356037AD2C700E0FA70D03EA9C61A6F8A00F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:62:38:8b:71:e6:77:57:eb:00:e4:fd:f4:
de:9b:c6:28:9e:c9:b3:8b:fb:e7:27:ed:dd:ca:75:
8b:45:24:97:cd:04:a2:83:2a:eb:91:68:36:c7:e9:
a9:c0:9e:d6:21:56:35:82:9b:da:6e:e7:72:81:d7:
81:44:38:df:c7:7a:c4:e0:08:29:53:2a:c8:66:be:
c5:7a:e1:99:69:a4:f7:62:fe:a9:e8:9c:b2:79:0a:
d5:b0:4b:f0:f8:bd:81:3d:07:6b:03:76:32:78:e9:
a3:a5:57:de:be:5e:98:3a:b1:db:4a:83:67:4f:23:
3d:9c:a2:a5:9f:3d:9f:84:c2:d9:9b:d4:0a:75:72:
00:c5:c4:66:90:b5:3d:a8:c9:c4:91:6d:6b:b5:de:
a5:64:91:4b:61:19:50:96:79:a2:b1:c5:db:7e:c4:
6e:c1:31:bc:1c:33:38:22:d6:b0:d8:3d:c3:26:e6:
79:62:0f:2d:a5:81:0b:ac:23:9e:54:0e:1b:45:e4:
73:1b:4f:e1:a9:db:ee:94:64:f8:37:66:f0:b1:06:
d4:53:15:57:41:9f:59:d1:d9:f1:42:6a:b9:45:e7:
83:67:ee:89:b7:18:4b:9d:9c:14:28:5e:72:de:5a:
de:aa:5d:22:69:80:fd:96:26:50:87:a9:d2:d8:58:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:60:37:AD:2C:70:0E:0F:A7:0D:03:EA:9C:61:A6:F8:A0:0F:76
X509v3 Authority Key Identifier:
keyid:A6:62:FE:BC:86:BD:39:C9:EA:C4:AB:A4:73:3A:01:C0:EB:1C:0F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmL-vIa9OcnqxKukczoBwOscDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/38382e3133352e37342e302f32342d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e8:9c:5e:24:62:d7:01:82:b0:32:b6:90:35:bb:b9:10:3c:
9c:90:63:e2:ae:c5:74:7c:6f:0e:6d:cc:41:65:b3:39:cd:93:
d1:ca:13:58:66:04:c7:91:42:95:4e:a6:60:2f:00:4a:02:5a:
1a:bb:a4:01:d9:0a:42:54:cd:70:d7:61:9d:46:14:e6:bc:86:
8d:9d:d0:d5:1a:a8:47:f3:f8:c5:cb:23:19:74:50:90:fe:f9:
e4:69:3e:16:11:c4:57:3b:9a:ba:22:56:c8:79:8c:55:1c:f3:
82:2e:5f:c2:1a:c1:a3:de:f7:d2:a4:aa:dd:8e:dd:9c:ec:f1:
14:96:32:67:93:47:24:91:c6:3d:19:af:e3:64:17:1e:14:8c:
50:0e:51:28:7f:57:8a:c2:5f:8f:fb:6f:80:d4:a5:3a:7e:a6:
84:68:8b:cb:3c:30:fe:dd:a5:b2:9b:f4:1e:59:3d:9e:84:a2:
dd:ab:85:bd:40:86:33:61:52:eb:85:52:fc:90:28:8f:d0:04:
e9:79:66:c6:fd:bf:e5:9d:e5:52:94:82:70:34:e0:73:f3:3b:
56:bb:ec:35:3d:bd:98:15:0f:85:08:14:a8:6b:68:7c:5d:83:
ff:35:01:61:81:4b:59:66:b9:1c:41:8e:e6:9c:79:54:d3:da:
08:33:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 06:49:25 2024 by rpki-client on console-ams.rpki-client.org