Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e203630383538.roa
File: 3130332e3132312e34322e302f32342d3234203d3e203630383538.roa (raw, json)
Hash identifier: vSW2qrMGXcUeq2fnaotTaCmzC0yWKqDEDBD53+ij56g=
Subject key identifier: BF:E5:84:F5:98:1C:92:7C:F1:F4:0C:73:4C:49:C7:F8:B3:04:3D:B4
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 100545AA4EBF5A287D6CF852ACDAE7341E6B835C
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e203630383538.roa
Signing time: Wed 10 Apr 2024 10:24:35 +0000
ROA not before: Wed 10 Apr 2024 10:19:35 +0000
ROA not after: Wed 09 Apr 2025 10:24:35 +0000
asID: 60858
IP address blocks: 103.121.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:45:aa:4e:bf:5a:28:7d:6c:f8:52:ac:da:e7:34:1e:6b:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000
Validity
Not Before: Apr 10 10:19:35 2024 GMT
Not After : Apr 9 10:24:35 2025 GMT
Subject: CN=BFE584F5981C927CF1F40C734C49C7F8B3043DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:07:7c:40:e2:b5:55:4e:2b:32:e8:17:dd:
7c:a1:63:ae:0b:f4:b0:42:d1:be:19:dd:9a:58:b9:
32:3c:8a:9b:4f:96:89:52:19:37:1a:7b:d1:1d:41:
03:0b:be:0c:cc:aa:81:cc:5f:5f:56:f6:a0:97:cb:
87:c6:8f:fe:2a:4d:27:17:e9:01:ba:dd:be:3e:a5:
03:60:c2:8e:f8:ae:db:61:83:11:86:e3:41:06:58:
ac:d3:7d:aa:ad:7b:51:bf:e2:ee:05:eb:73:b0:9c:
7c:26:15:68:ae:2e:f7:13:13:d8:d8:36:18:87:47:
1c:f9:fe:c5:68:a3:34:56:e7:20:29:c4:28:03:c3:
50:37:d7:8d:74:8a:85:ae:1f:80:6c:cd:1a:6a:bf:
cd:54:3b:04:fe:c2:a7:d5:29:90:55:72:e0:31:2f:
9c:d1:ac:09:26:7c:d3:b1:ad:b4:ea:03:a8:6b:1a:
bc:f4:2f:72:0e:2f:5b:95:71:a9:46:f1:00:be:59:
68:0e:a7:05:f1:d1:a5:68:89:cf:1e:f2:db:67:75:
ed:35:41:11:5f:ab:d5:54:69:ea:06:1b:b9:da:2b:
4c:14:6b:8d:bc:7e:03:01:48:12:1d:1c:af:ce:2e:
97:9b:6d:a2:d5:5d:07:39:d4:44:c6:a1:7c:e3:76:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:84:F5:98:1C:92:7C:F1:F4:0C:73:4C:49:C7:F8:B3:04:3D:B4
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34322e302f32342d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c8:f8:7a:65:a9:7e:94:aa:ee:ef:b0:bf:7d:4c:d4:cd:32:
70:22:14:9f:cb:a3:3e:f1:a3:9b:58:dd:b1:9c:1b:ea:a3:3c:
b3:80:49:52:68:2c:f5:58:3f:2d:61:82:4f:c9:59:b2:bc:fd:
ad:23:d0:a4:12:cc:ab:b6:5b:69:19:f0:c6:bd:ee:02:5d:d9:
8f:20:b5:9a:19:2c:25:36:39:f8:5d:a4:df:ac:ab:d2:2c:09:
0f:4c:fc:de:89:13:ca:cf:9c:e5:bf:fd:68:12:fb:b2:2e:ab:
f0:53:12:19:d1:31:6d:25:9a:02:c1:71:a3:6c:ce:19:0e:44:
f3:cc:af:77:46:7b:50:95:92:af:29:58:9a:9e:8f:46:2f:37:
e0:c4:18:30:f8:fa:d0:e3:bf:e7:05:c8:47:7d:50:fb:f9:bf:
c8:25:a1:46:e6:bd:f2:a3:ad:4b:f9:6f:9b:57:e8:5e:cd:dd:
7e:b4:b1:d2:6b:26:eb:82:fe:9a:86:a1:d8:c9:32:9a:ab:bc:
d1:3b:02:63:de:08:37:e8:6c:e7:4a:28:5b:50:4e:89:2e:55:
4b:f5:f2:cf:e5:78:fe:fd:09:33:62:77:cc:34:bd:1e:32:da:
d6:82:3b:85:bb:09:84:8f:ef:74:12:4e:d2:87:d0:2a:46:39:
07:9e:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:28 2025 by rpki-client