Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e2030.roa
File: 3130332e3132312e34312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: iydsdtj1MZ+BWPQqojniKuzVmWO6yyYwAaq2GAyQ5+Q=
Subject key identifier: 9B:7E:7C:1F:0C:83:23:97:CC:E4:EE:A6:6D:04:1F:D8:B4:97:79:F9
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 42D1FC9B4B452956093A8859123E6313472B0A7E
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e2030.roa
Signing time: Sun 14 Apr 2024 03:53:59 +0000
ROA not before: Sun 14 Apr 2024 03:48:59 +0000
ROA not after: Sun 13 Apr 2025 03:53:59 +0000
asID: 0
IP address blocks: 103.121.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d1:fc:9b:4b:45:29:56:09:3a:88:59:12:3e:63:13:47:2b:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 14 03:48:59 2024 GMT
Not After : Apr 13 03:53:59 2025 GMT
Subject: CN=9B7E7C1F0C832397CCE4EEA66D041FD8B49779F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:cc:09:57:b0:eb:8c:6b:59:29:f0:22:51:
6f:ed:fa:af:87:b4:c0:a2:be:4e:6a:f9:5a:1d:01:
08:ba:85:38:27:fd:91:49:a5:1e:16:60:2b:f8:9b:
84:88:23:31:23:6d:09:f3:40:95:4c:30:64:00:30:
6c:2e:60:85:20:47:2b:f4:f7:31:95:52:29:bc:a4:
99:71:15:9f:85:ad:53:da:4e:7d:46:c3:25:69:ea:
dc:fc:a5:ca:95:cf:fa:51:d3:c4:4e:b1:6e:25:e5:
28:ce:5f:62:54:3a:fd:16:10:fd:ab:16:e2:fc:64:
6c:12:62:28:e3:bc:32:31:df:8b:cb:0d:f4:e0:42:
1c:cd:0c:88:24:d1:39:6a:76:22:f8:97:b8:27:94:
74:1b:97:05:c1:97:07:99:ef:f0:b0:31:ca:78:54:
b8:0c:1a:78:49:b3:3c:24:92:8b:47:01:98:1b:55:
c7:38:7e:31:cb:4f:c3:cb:35:ee:df:0b:d0:91:ec:
74:b1:54:33:16:3d:ba:bb:a6:52:69:3b:75:51:25:
24:90:ae:98:d7:6d:60:c6:43:42:43:dc:69:e6:e0:
80:d8:d3:e6:ac:84:b5:b8:ee:22:c5:16:8d:93:e2:
5e:f4:a1:e2:fb:f2:71:80:8e:6d:85:7b:ca:9a:59:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:7C:1F:0C:83:23:97:CC:E4:EE:A6:6D:04:1F:D8:B4:97:79:F9
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6f:07:2c:a9:a0:fb:30:bb:49:7c:61:27:7a:37:14:8c:f8:
82:c1:39:ee:d4:b4:44:f4:bb:b0:b6:7a:09:2d:2c:08:cf:a7:
a9:0a:a8:51:88:2e:52:bd:8b:2a:66:4b:f0:81:e3:d0:a8:ad:
f8:38:84:7e:78:f9:42:b3:53:2b:be:d8:ee:41:70:52:51:24:
73:dd:0c:b8:c2:10:ce:9f:83:c0:bc:d1:b1:cf:d0:c5:71:5a:
39:5a:de:03:82:00:7e:66:a1:22:60:fd:86:be:0f:2b:f3:5b:
bc:99:e6:b8:d5:66:0b:fd:10:67:b5:b9:12:e5:63:09:bb:43:
7e:11:7a:b1:30:90:ef:02:a3:79:9a:a5:91:d2:4a:91:ca:df:
fe:cf:6a:be:f2:9f:7d:6c:a6:4f:9c:ed:ec:5a:1f:9f:ea:cc:
5b:b4:e5:82:5e:0f:97:4f:eb:a7:be:9f:34:fa:88:f6:2d:ae:
03:0c:aa:d8:95:84:eb:ac:bf:b9:f7:8f:e6:9a:de:df:77:2d:
b3:60:76:7d:c4:a5:c6:e9:c1:29:84:5c:f3:ea:c2:0d:ce:90:
0e:d9:68:86:7c:5b:7f:7f:e1:56:8b:ee:60:c9:9d:7d:7e:75:
38:04:5c:5d:15:f6:21:9c:2d:81:f9:8e:ca:3f:df:44:cc:06:
c2:d7:3c:51
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUQtH8m0tFKVYJOohZEj5jE0crCn4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkMxMEYwMDAwMTEwLwYDVQQFEyg4QzBFMzczRDFG
MTkxODNDRjFCRDgyMjBCMTQwMjBCOEJGMkM2NzREMB4XDTI0MDQxNDAzNDg1OVoX
DTI1MDQxMzAzNTM1OVowMzExMC8GA1UEAxMoOUI3RTdDMUYwQzgzMjM5N0NDRTRF
RUE2NkQwNDFGRDhCNDk3NzlGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK0zAlXsOuMa1kp8CJRb+36r4e0wKK+Tmr5Wh0BCLqFOCf9kUmlHhZgK/ib
hIgjMSNtCfNAlUwwZAAwbC5ghSBHK/T3MZVSKbykmXEVn4WtU9pOfUbDJWnq3Pyl
ypXP+lHTxE6xbiXlKM5fYlQ6/RYQ/asW4vxkbBJiKOO8MjHfi8sN9OBCHM0MiCTR
OWp2IviXuCeUdBuXBcGXB5nv8LAxynhUuAwaeEmzPCSSi0cBmBtVxzh+MctPw8s1
7t8L0JHsdLFUMxY9urumUmk7dVElJJCumNdtYMZDQkPcaebggNjT5qyEtbjuIsUW
jZPiXvSh4vvycYCObYV7yppZx58CAwEAAaOCAk8wggJLMB0GA1UdDgQWBBSbfnwf
DIMjl8zk7qZtBB/YtJd5+TAfBgNVHSMEGDAWgBSMDjc9HxkYPPG9giCxQCC4vyxn
TTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0x
ZDU3LTRjM2ItOTA0My1hMGU3ZmViZjE2N2QvMy84QzBFMzczRDFGMTkxODNDRjFC
RDgyMjBCMTQwMjBCOEJGMkM2NzRELmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9qQTQzUFI4WkdEenh2WUlnc1VBZ3VM
OHNaMDAuY2VyMIGlBggrBgEFBQcBCwSBmDCBlTCBkgYIKwYBBQUHMAuGgYVyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhm
LTFkNTctNGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8zLzMxMzAzMzJlMzEzMjMxMmUz
NDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneSkwDQYJ
KoZIhvcNAQELBQADggEBAAFvByypoPswu0l8YSd6NxSM+ILBOe7UtET0u7C2egkt
LAjPp6kKqFGILlK9iypmS/CB49Corfg4hH54+UKzUyu+2O5BcFJRJHPdDLjCEM6f
g8C80bHP0MVxWjla3gOCAH5moSJg/Ya+DyvzW7yZ5rjVZgv9EGe1uRLlYwm7Q34R
erEwkO8Co3mapZHSSpHK3/7Par7yn31spk+c7exaH5/qzFu05YJeD5dP66e+nzT6
iPYtrgMMqtiVhOusv7n3j+aa3t93LbNgdn3EpcbpwSmEXPPqwg3OkA7ZaIZ8W39/
4VaL7mDJnX1+dTgEXF0V9iGcLYH5jso/30TMBsLXPFE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org