Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
File: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 3/nSMtM1U6uqaBvfwgATNcYAZEncj8YTEymI1GiHtvk=
Subject key identifier: E6:C7:68:37:6E:2E:85:9D:16:92:BF:78:7B:B6:18:BD:0D:5B:17:C3
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 2FE7E4E1BD63E2A3B65F5C8E0CDE13CCABE89865
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 61138
IP address blocks: 103.208.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e7:e4:e1:bd:63:e2:a3:b6:5f:5c:8e:0c:de:13:cc:ab:e8:98:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=E6C768376E2E859D1692BF787BB618BD0D5B17C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:2c:5d:83:fe:9c:77:e1:ac:64:84:43:4b:
b8:dc:b2:8a:3c:a3:14:fa:90:cd:58:36:95:08:92:
c2:37:8e:9c:92:7a:2e:e9:b3:e6:f6:14:1f:1b:92:
5c:41:f0:59:65:ea:08:19:b7:03:4d:3d:d2:43:b4:
60:5e:b8:35:ce:8a:3b:10:5c:bf:81:b7:44:85:17:
cf:c2:1d:8a:3a:f3:71:b8:22:10:7f:77:9b:44:4d:
48:70:16:61:28:67:e4:8b:b3:8d:51:2f:85:fa:84:
57:81:69:1f:e2:d4:db:4d:06:70:6e:32:7f:8f:49:
78:30:60:58:42:63:d2:cf:27:2e:e1:af:44:5f:85:
0b:a2:bb:5b:1f:d1:a1:36:8a:8c:b2:88:5a:b4:1f:
f4:b2:03:36:51:28:e6:24:91:5e:ac:9f:8a:93:d3:
84:77:35:03:7c:70:49:66:a5:0e:14:ef:62:f2:3b:
1d:be:35:fe:70:11:45:bb:b6:4f:64:1b:60:ec:06:
15:aa:9e:16:14:87:dd:3f:77:a4:f1:dc:20:ca:d4:
a6:e3:a3:db:3a:7c:88:d4:eb:63:88:46:ed:29:5b:
19:78:33:af:b5:3d:c5:19:59:95:37:36:23:a9:82:
87:a5:02:5e:88:19:a3:0f:6a:d5:63:63:eb:c2:ff:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:68:37:6E:2E:85:9D:16:92:BF:78:7B:B6:18:BD:0D:5B:17:C3
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:95:27:0d:14:fc:33:e8:12:aa:4c:49:d2:80:9f:2f:e7:4a:
20:60:85:96:de:89:ae:11:b5:9c:cb:4d:61:56:39:2f:8c:67:
fd:f7:e1:71:3b:cb:5b:b8:79:33:9c:9c:11:22:8a:34:e5:0e:
70:4b:73:ff:9b:60:a2:6d:2f:d6:0c:83:fe:b9:90:e3:e0:ca:
7c:bc:c5:1a:0a:da:00:76:10:e3:09:62:54:ef:9e:e6:62:8f:
81:0a:16:95:bd:be:d9:33:2d:d5:c4:95:d6:36:de:24:3a:78:
82:d4:87:b6:87:c8:65:0e:db:78:d5:64:6c:e2:95:e1:58:eb:
90:2c:15:1b:58:03:f9:e5:cc:89:2c:b1:57:9d:e0:73:4b:d6:
ec:c7:11:c1:55:fe:ae:f3:75:18:5a:95:04:de:37:ed:32:99:
34:2e:0b:75:d0:52:15:91:67:56:1a:5e:ea:8f:c9:3d:c3:3a:
f1:4b:45:45:2e:66:10:f2:8e:ce:1d:57:31:8c:1f:72:1f:33:
55:f9:fd:e4:08:c6:f6:c9:69:4d:d1:0a:6d:45:bb:23:08:1f:
35:bf:77:6b:f5:a6:82:24:01:58:34:76:f6:a2:af:ff:19:da:
a6:38:f5:d5:91:89:8e:62:71:5f:d6:26:ac:e9:c2:4b:de:4a:
11:ec:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:59 2025 by rpki-client