Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e20313938393830.roa
File: 3130332e3132312e34302e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier: Td1Aq5e78LWTyQnTfe3qrBa02BJ4SiLnn2U3lTefKzk=
Subject key identifier: 3D:6D:86:7A:74:8D:13:78:DD:FB:8B:D9:26:41:44:D3:E2:A6:BF:22
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 7AD22660682A1465D2EB1F4BC47B08550405D035
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e20313938393830.roa
Signing time: Sun 14 Apr 2024 11:17:15 +0000
ROA not before: Sun 14 Apr 2024 11:12:15 +0000
ROA not after: Sun 13 Apr 2025 11:17:15 +0000
asID: 198980
IP address blocks: 103.121.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d2:26:60:68:2a:14:65:d2:eb:1f:4b:c4:7b:08:55:04:05:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000
Validity
Not Before: Apr 14 11:12:15 2024 GMT
Not After : Apr 13 11:17:15 2025 GMT
Subject: CN=3D6D867A748D1378DDFB8BD9264144D3E2A6BF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:4c:91:2a:7e:e9:81:c4:36:86:04:0d:d1:
1d:a0:12:69:46:bb:5e:c2:f1:c9:a3:a6:fb:e3:b0:
ad:09:ba:66:35:d1:10:2c:0c:6f:27:44:49:5a:e3:
fa:43:52:9b:31:22:b4:69:fd:21:eb:79:b8:85:4b:
ec:de:a4:85:95:42:ed:45:0f:bf:c0:26:0f:1e:8b:
b8:07:d8:c0:ac:ce:ac:22:34:0a:83:d3:7d:9d:c6:
17:06:f4:57:82:d2:13:c4:02:c0:9c:83:0a:85:e4:
29:52:ef:12:3f:eb:df:11:31:80:bb:c9:ae:60:b3:
77:b7:72:03:04:db:7c:d0:f1:7c:dd:8b:5b:4d:c9:
83:88:2f:90:83:c9:7d:58:56:d0:8b:c3:66:ea:1d:
1f:ca:a7:73:99:49:8f:ad:20:46:79:65:92:e5:2f:
bb:57:df:da:e4:82:4f:02:b4:8f:28:98:1d:43:91:
93:73:3d:88:67:6c:3f:48:01:97:d7:b7:e9:f2:d9:
c8:10:12:bc:4d:fc:58:5a:59:e3:b9:92:e0:4d:81:
a6:00:29:da:ac:18:c4:2c:ba:5f:a4:e7:7c:2b:a2:
2e:95:e4:72:dc:03:80:09:23:e9:d5:a2:00:bb:ed:
28:b5:de:62:c6:41:93:5e:07:cf:2d:68:2a:9c:43:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:86:7A:74:8D:13:78:DD:FB:8B:D9:26:41:44:D3:E2:A6:BF:22
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:56:58:fb:00:c8:c4:3c:19:1f:24:91:4a:75:dc:00:8c:
f1:01:fb:d4:a9:88:72:e8:f9:b3:c6:84:03:a4:43:f1:80:7d:
bf:10:d6:20:0a:b0:47:54:0c:41:58:79:28:94:6a:25:3c:d1:
ca:94:77:a1:8c:a1:28:2f:c5:29:c1:3b:d8:9c:f7:90:5d:6a:
fb:be:0c:74:e3:ad:a9:fa:14:ff:66:88:cf:31:29:77:98:fe:
91:3e:09:37:3f:87:4c:38:1c:fd:31:5b:49:90:f3:aa:bf:d0:
fa:2d:eb:c1:d0:48:9f:9d:7b:d1:c5:d9:c5:dc:d9:ea:ad:b0:
1e:df:3d:ff:26:7e:a8:ee:ac:8a:63:04:59:04:b9:e3:00:fe:
eb:0a:5a:95:1f:47:60:3e:64:51:12:04:f6:a9:22:34:6e:7c:
cd:8c:56:d5:84:31:5e:93:fc:83:ba:d1:77:71:3b:94:1a:43:
3b:f9:b7:cd:bd:a7:9e:c2:75:78:1e:85:03:47:81:d3:cf:c9:
90:9e:54:d7:92:74:f7:9d:41:b3:f6:f4:e7:5b:a8:77:13:9f:
2f:a3:4f:85:bb:b9:69:3a:a5:57:2a:9c:4c:d8:1c:42:cd:81:
84:4c:6b:1a:75:fe:18:63:56:0b:5d:83:fe:4c:be:19:4a:12:
eb:a0:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:58 2025 by rpki-client