Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e203630383538.roa
File: 3130332e3132312e34302e302f32322d3234203d3e203630383538.roa (raw, json)
Hash identifier: gmu8G7P1l6+PvG66WMg0QF1ZwidSyewmtGDvS+GQrHU=
Subject key identifier: B4:4C:A0:73:28:C3:73:07:67:22:23:67:FC:33:F6:65:FF:DE:35:E0
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 60D0ABB4BAD7022088207E130AF1D0DA552E1ABF
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e203630383538.roa
Signing time: Wed 10 Apr 2024 12:17:33 +0000
ROA not before: Wed 10 Apr 2024 12:12:33 +0000
ROA not after: Wed 09 Apr 2025 12:17:33 +0000
asID: 60858
IP address blocks: 103.121.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d0:ab:b4:ba:d7:02:20:88:20:7e:13:0a:f1:d0:da:55:2e:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 10 12:12:33 2024 GMT
Not After : Apr 9 12:17:33 2025 GMT
Subject: CN=B44CA07328C3730767222367FC33F665FFDE35E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:90:e0:59:b7:fb:64:95:33:0e:8f:fa:40:
87:6b:25:52:59:ff:7b:f6:a9:03:23:41:04:4a:00:
08:ca:9f:9b:6b:14:d9:d2:29:03:ab:d9:2e:d5:1a:
cc:80:1b:5f:6e:b6:5f:17:17:ca:8e:11:93:c2:ed:
7c:fb:ab:d3:02:de:e7:4e:b8:47:e8:96:2d:e0:45:
d6:92:50:fa:50:00:21:20:cf:cd:ed:16:9a:b3:97:
5d:c0:b3:ec:07:ad:95:41:82:e7:d6:bd:f2:6e:bc:
ee:de:a3:c3:01:3e:32:70:f6:8b:08:18:cc:68:bd:
4a:a6:50:61:2c:f6:24:22:a6:f5:fc:c6:15:e2:75:
02:97:c5:4b:cc:b5:4f:3c:3e:bb:0a:61:e3:ca:db:
04:d5:9d:80:40:1d:7e:da:20:1b:8c:6b:9e:d6:c9:
5b:1d:1a:74:96:bf:09:ea:28:ab:2b:47:e5:72:b3:
09:52:ce:3f:0c:1d:4e:ac:56:52:0c:16:b3:17:f6:
13:c9:1b:1f:07:44:7e:f0:78:e3:70:41:93:f8:be:
84:e3:46:67:8c:81:9a:6e:13:95:4c:07:c0:be:c8:
d9:dd:0e:2d:e8:05:31:57:74:3c:52:68:6f:d1:03:
60:2c:fa:3c:25:c7:ae:3b:9e:09:c0:c4:fe:88:19:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4C:A0:73:28:C3:73:07:67:22:23:67:FC:33:F6:65:FF:DE:35:E0
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/22
Signature Algorithm: sha256WithRSAEncryption
26:70:54:76:43:0b:f2:8c:1b:e4:65:22:91:f8:9e:ef:74:69:
25:47:9f:8b:f3:f6:c5:d9:41:10:25:a1:bb:75:0c:47:28:87:
f5:86:14:c7:82:ae:72:10:c2:e4:8d:f2:0d:c6:fa:90:94:e0:
00:13:2f:53:93:22:01:9f:fd:13:b3:62:32:29:6b:de:a2:d7:
91:19:de:f8:13:62:6b:e5:b6:8a:2f:38:4b:44:d9:01:aa:be:
92:08:43:c6:a6:b9:4a:7c:3d:8f:83:ee:94:e2:fd:6e:96:dc:
8a:3e:b2:8d:31:7d:16:e7:22:55:3e:1f:92:1c:6f:5b:a7:9f:
b5:db:e9:82:ec:16:a4:0e:48:52:05:14:b9:63:c1:cd:15:98:
f6:54:23:7c:d0:82:45:ed:54:22:c5:91:17:69:60:07:b1:18:
4e:2e:47:a1:b7:6f:f9:c3:5b:64:13:94:5b:16:fb:9d:2c:98:
55:80:5f:39:06:52:2c:fc:05:be:b4:39:dc:be:43:f8:44:35:
92:9f:3d:c5:e9:2d:68:3d:29:44:a7:25:85:4c:27:da:16:e4:
3a:77:6a:74:26:79:6f:d9:a1:26:14:e6:37:2e:ad:9c:4c:de:
21:8f:a3:df:82:b1:10:bb:7d:52:0c:db:ef:6f:a3:de:fb:04:
2e:4a:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org