Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e2030.roa
File: 3130332e3132312e34302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: WNMIfYG6Rpf2kIUoN5tF4nK+6EorxLvHlcPIOTj1LnU=
Subject key identifier: D2:74:66:AB:68:01:45:5C:46:0A:20:AE:02:C8:5D:CD:58:00:5D:40
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 449BF7ECECF1D365DED489DC6E2A2611840CA8CE
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e2030.roa
Signing time: Sun 14 Apr 2024 03:50:28 +0000
ROA not before: Sun 14 Apr 2024 03:45:28 +0000
ROA not after: Sun 13 Apr 2025 03:50:28 +0000
asID: 0
IP address blocks: 103.121.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9b:f7:ec:ec:f1:d3:65:de:d4:89:dc:6e:2a:26:11:84:0c:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 14 03:45:28 2024 GMT
Not After : Apr 13 03:50:28 2025 GMT
Subject: CN=D27466AB6801455C460A20AE02C85DCD58005D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:16:0e:62:7d:dd:ff:ec:35:d0:39:b1:c9:
7f:8c:67:5d:24:0a:3e:09:e3:05:df:9f:96:e6:cb:
e6:9a:0e:82:4e:9b:9b:90:df:bb:50:92:a1:ff:21:
20:c5:ed:bd:0c:00:fc:9b:06:96:8f:a7:a7:b6:f6:
7c:0c:63:46:3e:be:c5:2e:01:fb:7c:d8:88:49:17:
ef:6c:89:ca:d8:70:15:5f:2d:04:9b:0a:e5:33:e1:
c9:59:80:fc:cf:d9:5a:73:0c:48:64:5e:24:09:30:
54:dd:cf:5f:49:32:97:cb:ac:9a:e4:37:36:5e:d8:
34:da:73:32:9e:61:08:50:32:87:f7:7f:ec:45:8c:
39:97:2d:aa:56:76:61:cf:d1:e4:4b:5a:d7:20:be:
80:5c:7f:34:2b:28:f4:0e:d9:ec:45:ec:fb:53:80:
19:d1:e5:78:eb:04:92:32:99:50:b8:56:31:29:73:
37:4c:8e:20:33:ec:63:05:e3:aa:34:9d:4c:cb:14:
fd:3a:34:47:53:56:b7:8d:32:b3:04:58:e7:09:86:
f8:84:d0:a3:89:63:13:0e:44:9d:9d:57:d3:19:29:
4b:d4:91:d5:1f:dd:91:78:2b:75:20:4e:a9:2c:9e:
35:7b:0e:d9:d1:ac:ab:18:84:58:71:ec:ec:67:58:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:66:AB:68:01:45:5C:46:0A:20:AE:02:C8:5D:CD:58:00:5D:40
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:26:b7:c5:cb:42:13:a4:18:ea:4d:7a:92:4d:9f:61:0f:26:
29:dd:25:28:cd:ab:a2:c5:81:fe:da:55:01:91:0c:e0:a7:da:
ba:d2:31:dd:b2:24:ec:c3:d0:0e:42:1d:ee:87:c9:d0:19:aa:
f9:28:34:40:81:9d:48:f6:6f:5a:1d:b0:1b:78:f6:f8:60:30:
e8:81:ba:31:9b:7d:4e:e4:51:06:6b:10:1e:c5:b0:09:93:97:
b3:63:1e:f4:ed:bb:47:dc:7b:ec:b6:c2:f0:90:44:cc:3a:40:
5b:ad:d0:78:33:26:eb:1d:6a:07:73:e2:f8:e0:22:91:b3:ec:
1d:d0:88:2a:1b:fd:ea:61:28:e4:45:de:51:57:d9:e2:e5:5d:
c5:36:bc:07:b6:e2:4a:06:eb:8a:db:83:19:9b:2d:86:49:71:
1d:6a:08:10:29:52:e6:4e:7f:9c:7c:55:04:2b:4d:6d:12:9b:
fc:94:33:33:ec:50:76:6a:d7:7b:8e:01:5c:d6:eb:35:96:a9:
55:34:f0:ad:0a:d0:c4:56:2b:01:09:10:bb:3f:58:0f:d3:38:
c0:ad:97:6b:55:41:36:16:45:bb:d7:b7:96:6f:81:7e:ff:49:
86:d4:d4:55:6f:13:f1:66:ce:9f:9e:eb:87:4f:cd:0b:cb:62:
e3:91:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org