Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
File: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: Qzo1olrC1bOWTRcd0ZCsGXudMPN6TofjpDiHrswNL7Q=
Subject key identifier: CC:AA:FD:17:76:FE:9D:0C:ED:E4:7C:02:6A:A7:3B:57:F9:2B:CF:2B
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 5FE0B78E0DDB92EA3A387C156DB8A66214DF5F5D
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 61138
IP address blocks: 103.208.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e0:b7:8e:0d:db:92:ea:3a:38:7c:15:6d:b8:a6:62:14:df:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=CCAAFD1776FE9D0CEDE47C026AA73B57F92BCF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:ae:f5:df:aa:c2:69:6e:11:d0:20:cc:5c:
69:e3:c2:4a:68:be:7e:e6:75:7d:35:68:a3:1d:62:
d0:ee:f8:a8:68:4f:5c:d7:ee:b5:f6:c2:56:7d:c8:
fd:09:49:9c:a7:a7:11:4f:f0:2e:9d:d8:2e:3a:83:
cc:db:07:d7:ff:09:7a:b9:cd:d7:d2:f4:69:d2:36:
ff:35:2f:ed:71:b9:54:05:a1:57:4a:5c:de:11:48:
58:df:ec:ec:a7:1e:c9:a6:67:85:f5:fa:2c:06:1d:
81:d3:0c:8d:0d:d4:a1:77:c0:79:97:42:3b:b1:78:
ef:e1:68:55:51:4e:bb:60:b4:a6:72:22:8c:42:d9:
dc:24:94:f0:f1:d8:46:80:f3:44:23:94:0d:e7:4e:
a0:38:bf:b3:41:2a:cf:0f:2e:24:89:f4:28:3e:0c:
f0:e8:ad:65:36:46:83:27:11:12:ba:e7:92:b2:56:
5d:24:60:9e:c0:44:72:6e:2d:5a:fc:59:68:94:c4:
55:6d:6b:55:96:07:3c:77:88:b8:c6:8f:ac:24:79:
86:b6:38:a0:60:1c:f2:ab:3d:d0:4e:02:9a:6f:2e:
3d:f2:30:ee:24:d9:6e:bc:35:d8:20:9e:e1:c4:49:
98:4a:d7:d8:ed:30:0f:26:46:65:f5:d3:98:6b:63:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:FD:17:76:FE:9D:0C:ED:E4:7C:02:6A:A7:3B:57:F9:2B:CF:2B
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fe:47:7b:56:14:86:3d:c8:54:1c:7f:f4:c0:2d:65:cd:c2:
39:19:be:eb:b1:fb:83:0d:9f:95:0f:8b:aa:40:05:0a:43:92:
88:83:5b:09:c1:ea:8e:f0:1d:f3:0d:6a:fb:ec:38:d6:0d:7c:
ac:eb:bc:0d:ac:68:6a:fa:6d:0d:0f:ea:80:c1:bb:90:88:11:
51:72:5a:f0:71:8f:b1:bd:82:4f:17:b5:68:3b:33:37:61:80:
0d:b4:93:7f:50:85:b9:af:cf:c7:90:02:11:43:b3:6f:00:27:
d6:99:76:80:6b:a4:57:6f:2d:8c:b9:08:0d:0a:27:c3:2f:07:
f9:50:ad:a6:72:a0:34:d6:19:4f:1b:85:27:bd:43:77:82:60:
c8:f7:02:cc:e5:f9:41:30:73:b4:25:54:37:1c:9b:67:99:f0:
c8:03:17:ec:f8:22:d4:fd:e2:37:75:52:35:4e:1b:43:6e:0b:
b2:1a:b6:a7:2d:60:e4:3f:c7:ba:bb:9d:07:1f:53:3c:63:4d:
0c:c2:cb:ea:10:38:1e:29:b0:19:79:01:1c:6f:9d:b9:42:c2:
c7:d9:30:f5:ff:f2:91:45:09:eb:5c:d5:8f:81:f8:0f:34:38:
7b:23:81:aa:9f:cd:70:4c:a3:80:0b:54:90:60:a3:d5:b2:dd:
e1:c2:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org