Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e203630383538.roa
File: 3130332e3132312e34302e302f32342d3234203d3e203630383538.roa (raw, json)
Hash identifier: f/8Ls/3ACPppT2aybQ8+A3+Mevusk2jLkYswhiFZq9Q=
Subject key identifier: BE:D5:04:20:BC:E8:BE:B8:00:F3:F8:BC:82:8B:42:11:2E:92:91:A6
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 4A726A6B250F670B73AC06D15505061B25F53CB8
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e203630383538.roa
Signing time: Wed 10 Apr 2024 10:24:15 +0000
ROA not before: Wed 10 Apr 2024 10:19:15 +0000
ROA not after: Wed 09 Apr 2025 10:24:15 +0000
asID: 60858
IP address blocks: 103.121.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:72:6a:6b:25:0f:67:0b:73:ac:06:d1:55:05:06:1b:25:f5:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 10 10:19:15 2024 GMT
Not After : Apr 9 10:24:15 2025 GMT
Subject: CN=BED50420BCE8BEB800F3F8BC828B42112E9291A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:84:6a:c6:f8:24:2b:b5:52:30:fc:08:38:
ea:5f:74:c1:08:dc:d5:25:8c:1c:bd:81:5c:1d:46:
ec:4b:a7:d0:75:e6:fe:7d:23:4c:9f:c6:5c:bd:0a:
67:fe:f1:27:2e:cf:87:a8:0a:a3:cd:92:d5:05:2c:
93:18:cf:8b:f8:37:8c:c4:a6:04:dd:15:9f:31:2e:
a7:a7:f9:cb:17:c4:60:23:cc:87:ac:e6:d6:df:33:
7a:38:73:39:4e:42:12:9c:e3:12:31:97:b4:90:c0:
2d:65:a8:6a:a3:7a:4f:83:59:98:c4:e2:29:da:aa:
77:4b:cf:50:b8:ab:b5:e6:38:0e:aa:f8:2c:49:a7:
e2:79:77:8c:8c:b1:a9:63:ca:06:3f:59:1a:6b:b2:
16:35:79:5f:8f:83:38:77:25:40:f0:3f:68:cf:9e:
41:d6:c4:5c:69:5f:6a:9b:b5:8e:77:6c:3b:bf:7b:
1d:8b:18:3c:18:56:eb:72:e4:5c:52:35:7e:22:c5:
4e:92:af:c9:3a:8c:83:87:30:ed:17:35:4c:f7:81:
af:c4:0b:3d:ec:8b:8b:f8:d8:94:27:b1:d4:cc:80:
1d:bc:9e:73:d4:4b:c5:32:d6:86:9b:d6:51:6e:b3:
3b:09:b5:84:ee:11:20:e1:da:23:ef:e0:56:be:c6:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:04:20:BC:E8:BE:B8:00:F3:F8:BC:82:8B:42:11:2E:92:91:A6
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32342d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f6:cd:e5:9c:45:db:d7:54:83:6b:f7:02:8a:3f:d0:da:b1:
27:14:40:b3:48:4d:12:9d:02:b7:fb:20:61:ce:6d:8b:4c:4a:
a7:58:59:74:12:a6:3c:3e:91:ac:81:75:a0:4e:9e:c6:4e:17:
55:50:ec:80:7b:69:cd:9c:53:74:f6:2f:a6:76:a2:b4:4c:1d:
52:9f:85:88:f0:0b:40:28:46:2a:8c:8b:e3:20:60:3f:37:df:
33:a6:19:78:31:45:04:ad:a4:b1:1d:82:46:17:80:c9:da:5f:
e4:f9:cc:5b:90:c4:76:49:eb:c5:7a:27:74:c2:4c:ef:a4:36:
f6:17:17:a6:22:e9:40:da:33:63:c4:85:da:a4:78:84:48:aa:
3c:24:35:f4:3b:7a:6b:34:99:cf:23:1b:eb:5b:8d:1a:c5:73:
58:a2:a6:26:31:9b:48:de:a5:f6:f8:7a:0f:bb:9a:e2:9d:fe:
99:32:8e:e2:82:97:28:27:c8:5d:72:30:ba:de:e1:c9:f5:94:
3d:fd:e6:6d:50:ec:aa:50:4f:4d:3e:13:2c:ef:33:cf:fe:9a:
5f:1b:d0:ff:00:90:32:9d:3c:06:f8:05:5e:02:d2:df:28:20:
34:3a:a4:66:3e:7a:7d:97:49:1a:99:6f:5f:cf:2f:07:e2:c0:
60:2e:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org