Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e2030.roa
File: 3130332e3132312e34322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: YoHIpqJhHInFg2Ey98fC0JqET9SmPXNxktWxsF16u/0=
Subject key identifier: 37:72:24:CB:40:63:EC:D8:D8:7B:BB:6F:78:14:83:E9:B0:D1:1A:95
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 3586259A32C551B2A8472935B480F2EBFBA41994
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e2030.roa
Signing time: Sun 14 Apr 2024 03:53:19 +0000
ROA not before: Sun 14 Apr 2024 03:48:19 +0000
ROA not after: Sun 13 Apr 2025 03:53:19 +0000
asID: 0
IP address blocks: 103.121.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:86:25:9a:32:c5:51:b2:a8:47:29:35:b4:80:f2:eb:fb:a4:19:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 14 03:48:19 2024 GMT
Not After : Apr 13 03:53:19 2025 GMT
Subject: CN=377224CB4063ECD8D87BBB6F781483E9B0D11A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:39:c5:bc:a1:2b:9f:33:51:55:26:aa:78:
d3:c7:e3:2e:62:38:6a:3d:22:2a:4d:b8:5a:e9:c6:
35:20:6c:e2:ec:86:fa:e9:c1:25:46:c5:f9:8e:e7:
0c:39:05:c4:bf:03:86:66:cf:fe:d1:ba:fb:4a:b3:
9c:d7:b5:8f:8c:2b:15:ba:1f:da:60:dd:01:f4:3a:
ce:da:cd:d7:9c:9c:d5:6a:e2:88:27:4b:1b:95:7f:
e7:33:14:4d:3e:e6:8d:b4:6a:d1:21:3b:6b:c7:60:
fb:4c:aa:9d:97:3e:40:1e:6a:7f:02:9a:25:71:66:
04:d9:fe:41:cd:af:b0:a5:af:6b:8a:05:12:00:6e:
81:47:04:56:a5:e6:a2:89:23:01:3a:2f:ed:a2:38:
b4:04:b3:ac:00:74:8d:f7:a2:9e:0a:17:ca:5b:9e:
be:4e:13:3b:5e:4b:b1:5f:51:3a:76:ed:54:f3:d2:
08:56:92:66:08:9e:1d:f0:2d:0a:e1:4c:dc:6e:b9:
ad:49:ef:0f:94:74:db:51:b1:47:44:5e:a2:fa:d2:
72:02:95:3d:54:56:bf:56:7f:50:58:8b:be:74:2d:
d9:77:b2:dc:2a:fd:0a:ba:18:ba:ef:18:7f:66:08:
34:44:cf:3f:57:22:bb:fb:61:eb:89:81:6b:90:76:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:24:CB:40:63:EC:D8:D8:7B:BB:6F:78:14:83:E9:B0:D1:1A:95
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4e:23:57:36:99:66:7a:6e:67:0a:98:42:23:92:24:d9:8c:
57:79:25:66:df:6c:1e:c0:62:e2:e7:49:ba:fc:73:8a:7b:5d:
01:c3:ef:89:6e:4c:23:51:c2:b8:86:18:73:d9:2c:ea:07:b6:
13:42:d5:c0:53:56:9d:5a:e2:ef:2b:a7:04:99:ae:19:87:6d:
84:16:60:03:d7:33:70:88:87:59:5b:ab:04:5e:7a:19:8f:3d:
d4:bc:48:67:65:f6:d4:0b:e7:69:dd:af:6d:be:e7:08:0d:85:
5d:d3:2f:97:71:76:cb:1d:fd:cc:a4:1e:a1:ef:b9:50:92:48:
4b:57:64:e6:9d:2c:c3:d7:71:16:d9:63:92:da:47:c4:95:64:
41:b1:ea:a4:1d:ae:f8:07:3b:a8:4d:62:30:96:b4:e5:b4:99:
a8:f6:4d:cd:8b:d7:68:8a:ef:97:ef:14:99:15:66:6a:4e:34:
46:33:fd:a9:4e:7a:46:dd:54:a5:50:c1:a5:34:7e:88:0c:2e:
05:8a:2a:50:3d:ba:9d:83:9d:c9:aa:96:ce:16:c2:d2:c0:fa:
82:41:a8:66:5a:c0:b9:4f:68:3f:18:4d:36:f0:12:52:f0:c1:
19:07:ca:e2:92:00:fe:73:0d:51:10:be:bb:69:8d:70:54:72:
f8:83:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org