Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
File: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: oGt0LhRD1R4lRfVIGz0FG/v/9od7NqfqZJigOmBC7A4=
Subject key identifier: 8A:A8:E2:36:F2:E3:61:0A:A6:31:9E:0D:16:A6:C0:3A:9D:E8:82:7A
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 7DB3560E299D4EEF93D4EA631802505AD69806D4
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 138995
IP address blocks: 103.208.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b3:56:0e:29:9d:4e:ef:93:d4:ea:63:18:02:50:5a:d6:98:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=8AA8E236F2E3610AA6319E0D16A6C03A9DE8827A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:75:f0:13:a2:72:07:32:1b:26:fe:39:84:
3f:8f:c7:89:d0:3f:d6:77:0a:5e:cb:6b:c6:11:8b:
00:99:6f:79:58:b8:56:47:63:93:04:9f:1c:36:0d:
bc:ac:d9:1d:cb:a8:63:1a:52:61:75:ed:7b:c7:c3:
2d:37:f8:c4:2a:fb:aa:6a:c8:e7:36:47:6c:cf:58:
85:f7:b5:cb:78:36:b4:78:71:a2:3a:4f:e0:04:f6:
0c:69:11:c5:e9:7f:19:36:b6:a5:e1:29:93:8e:03:
73:a4:4e:c5:40:79:29:63:98:a6:96:2e:63:62:d8:
85:82:36:e0:e4:6d:f4:15:0f:e9:cb:e6:d4:d6:52:
d9:16:07:b8:4e:6d:55:fd:ec:cf:31:40:bf:bb:a0:
c2:c2:a6:3b:27:cc:fb:53:d1:e9:d1:7b:17:0f:73:
3b:3c:35:20:67:d8:c9:98:c5:4b:6d:15:9a:80:67:
17:f2:93:be:3f:a2:73:79:0e:88:a1:9c:49:23:9c:
e9:ce:81:62:44:ea:1c:3b:0c:62:67:65:2e:d0:c8:
52:99:57:46:ac:4d:bf:30:15:51:76:09:32:0d:54:
49:2a:66:9e:90:3e:d1:4c:ab:00:b3:6c:95:99:ec:
d0:4b:fb:d6:74:5d:03:c7:01:34:1c:c4:53:27:77:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:E2:36:F2:E3:61:0A:A6:31:9E:0D:16:A6:C0:3A:9D:E8:82:7A
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.87.0/24
Signature Algorithm: sha256WithRSAEncryption
30:06:98:e2:5b:60:ff:eb:cc:c5:81:1a:67:e0:e8:a6:cf:e1:
0c:98:99:41:9c:51:0a:29:7b:ab:71:7a:fc:2b:f1:a6:7e:e9:
4c:c7:03:f8:ef:bc:2f:17:8e:b3:10:90:8b:59:27:35:b0:d7:
bd:a4:36:51:58:8d:24:07:8f:01:8a:94:3f:e5:cb:92:58:99:
2d:8d:77:41:5f:df:fb:c9:0e:39:3c:dd:6d:50:eb:2c:65:5e:
a2:88:1e:2c:ee:71:98:30:4a:0a:d3:cc:e3:e1:0c:f0:51:88:
65:50:73:e4:8c:43:c7:b0:5f:4e:64:59:a3:ae:ac:94:ac:59:
fc:94:b5:33:b7:7e:30:4a:c0:4d:ca:e2:c5:5b:03:0f:e6:c7:
a0:06:54:f5:bc:c2:a3:14:56:9a:32:a4:8a:8f:35:97:95:8e:
01:6d:bf:5b:25:a7:57:db:6b:2d:3c:ab:bd:c9:db:d5:0e:65:
99:8f:85:27:b6:6c:37:86:33:84:78:8d:e0:97:04:fe:63:e2:
32:00:34:e7:e4:d1:b1:ce:19:1c:64:d6:a6:67:02:e0:26:f1:
56:5e:9f:a8:b4:04:a4:88:96:14:f9:c5:f6:6e:15:7c:7a:54:
e6:4b:44:67:99:7e:0e:2d:05:82:58:3d:4b:cb:64:e4:ba:54:
c9:c0:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:55 2025 by rpki-client