Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32342d3234203d3e20323036383034.roa
File: 3130332e3230382e38342e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: yg6iXtGYG3QlwDmtAvWucj08Q7lMPvzWm72t2w7rvDA=
Subject key identifier: 0D:52:EE:EA:E5:C0:1E:C4:68:09:0D:46:EC:20:07:11:0C:04:66:6E
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 371387B2C174A8946768DD471AD809343AA11B18
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32342d3234203d3e20323036383034.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 206804
IP address blocks: 103.208.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:87:b2:c1:74:a8:94:67:68:dd:47:1a:d8:09:34:3a:a1:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=0D52EEEAE5C01EC468090D46EC2007110C04666E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:a7:a8:42:8c:5a:5d:8f:2b:95:fd:e7:b3:
d1:bb:04:7f:b3:23:f3:01:23:eb:31:90:cb:50:9c:
42:fb:84:d3:35:e4:02:47:a0:c4:64:d7:a3:95:35:
02:42:10:5a:44:a3:dd:07:6c:5f:11:23:92:73:24:
f6:ce:29:ce:15:6c:21:cc:0f:ed:7e:e4:bc:ee:28:
c9:7b:64:47:4e:5e:72:5c:61:24:c1:4e:ec:f2:b9:
ef:0f:a9:c7:c8:a6:01:b6:da:7f:f7:83:b6:6f:bf:
38:69:39:63:3d:fe:fd:8f:f7:be:f2:e0:c5:b2:59:
90:2b:59:70:71:58:fc:9e:8a:79:84:a3:86:55:2c:
2c:5a:81:2b:f1:54:2d:cc:ea:1c:6b:70:1d:bd:61:
de:64:de:be:f7:40:c5:db:a2:ee:d8:92:14:35:f8:
26:ec:0f:5d:32:54:57:40:1f:3c:2d:a3:25:b3:f8:
d7:88:d7:d4:d3:6c:97:ff:bf:e1:7c:30:bd:ad:86:
71:fb:da:bc:ea:e2:b5:67:05:8e:33:bf:9d:5f:66:
2a:61:e1:3f:af:1f:4b:6b:a2:7e:60:d0:b7:0b:38:
3a:ca:d5:7f:53:e5:c0:ec:47:de:99:6a:f3:aa:35:
e3:31:69:1a:ba:81:c6:64:fe:b6:b4:04:f0:e8:58:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:EE:EA:E5:C0:1E:C4:68:09:0D:46:EC:20:07:11:0C:04:66:6E
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b9:31:e6:74:8b:b3:68:5b:b7:a6:0c:4d:83:c0:1a:8a:83:
59:33:f0:b4:3d:7b:50:ba:73:60:7f:be:6e:28:60:38:eb:d3:
ab:65:47:f8:6e:c0:48:13:9a:73:a6:a1:41:d7:12:2f:93:ff:
80:44:2d:56:e0:f6:fc:cd:0b:8a:71:7b:aa:06:dd:4a:c3:32:
80:af:0f:9f:c5:51:fc:f9:28:54:24:2e:9c:88:3d:71:6c:10:
98:ce:a1:93:cc:fe:49:77:05:95:7a:e7:40:ad:de:7d:ab:08:
ec:53:f0:ad:65:cb:0b:5d:55:f7:54:4b:d1:c9:c6:7e:e5:04:
7e:e9:22:78:1e:6a:c3:2b:27:e4:cb:53:41:c3:7e:a2:c7:f5:
0a:e4:9f:0a:d2:62:71:1a:98:f4:30:74:81:22:b3:bb:86:2a:
b1:40:cc:fc:8c:5e:59:18:6e:79:63:ec:25:e5:5f:db:f1:d3:
25:cb:b6:1f:59:70:ca:99:d4:d2:df:aa:5f:58:1b:25:c8:d0:
e3:2a:a0:82:26:70:fd:9f:d4:73:53:49:90:bd:4e:39:ec:11:
3a:a8:6f:67:49:53:bc:be:c0:ec:d2:6e:f8:12:f1:d1:26:bf:
7f:06:46:b8:e1:c0:8e:00:7d:8c:f0:3b:50:5a:21:2a:b1:1e:
7c:85:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:57 2025 by rpki-client