Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32322d3234203d3e203631313338.roa
File: 3130332e3231342e36382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: akiBBlO6DYuEjZH5CFWteifoeGNsuwl6diWnhIX1MCY=
Subject key identifier: 82:0B:16:D3:5A:2A:9E:D4:D3:4C:39:35:96:34:7A:CB:39:9A:6E:B1
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 6377BD438661264539C76291BD5B03966DFA63E2
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 61138
IP address blocks: 103.214.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:77:bd:43:86:61:26:45:39:c7:62:91:bd:5b:03:96:6d:fa:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=820B16D35A2A9ED4D34C393596347ACB399A6EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:e2:da:b0:0d:09:c4:d5:c8:ac:5e:13:c9:
9c:84:0d:4a:a9:c4:68:e8:5a:5a:b1:62:69:22:77:
79:ce:4a:54:5a:fa:80:f6:3f:05:37:01:1c:9f:d5:
e9:20:b8:3a:ef:9b:98:bd:d7:3c:7a:3e:10:b4:18:
8f:c7:0c:95:7e:a8:1b:1c:e8:3c:39:83:41:09:32:
fa:a1:90:84:b6:3f:4f:87:3f:ca:0c:2d:da:2f:64:
e0:0a:1c:e3:4c:5c:6c:e1:81:d5:32:85:ce:d3:ad:
62:bd:f9:28:18:9a:20:b9:cc:7c:be:5e:27:d9:ba:
4c:b9:6e:94:2b:37:5e:be:3f:45:74:88:04:77:cc:
d7:46:97:79:44:13:f8:ee:4a:f7:1c:ae:92:eb:8a:
31:db:f6:a0:07:d1:05:ec:1c:ba:75:dc:d9:6d:90:
5c:71:56:87:6e:b0:a9:b1:78:94:4a:37:88:a8:e6:
da:9b:61:09:21:3b:b6:c0:1c:f4:fb:d3:81:3a:40:
83:82:44:0a:b9:50:f2:a5:84:b5:47:a2:5e:f2:cf:
d5:c6:b7:af:01:cd:d4:c0:18:1d:3f:14:85:54:65:
87:7d:18:45:93:7c:50:2e:ef:60:54:a9:04:d7:b7:
fe:7e:b6:35:43:88:49:a0:a9:ba:38:81:6f:e2:34:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0B:16:D3:5A:2A:9E:D4:D3:4C:39:35:96:34:7A:CB:39:9A:6E:B1
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:e2:16:d5:cd:51:a5:8c:aa:e3:82:2b:d9:63:46:81:65:07:
82:10:24:d8:53:e6:c8:f4:1c:85:38:34:18:3f:54:59:5c:2d:
e5:7d:89:23:f0:7d:09:2e:26:1e:41:f3:b7:bb:bc:a6:be:2d:
da:7c:42:ef:eb:d0:d1:7d:8d:69:49:2c:da:4d:54:09:93:c7:
47:bc:f6:58:05:24:d4:e5:9f:25:9e:9f:df:a6:d9:56:4a:16:
38:74:cc:e7:37:b6:6f:85:7f:72:e7:3a:32:99:51:56:51:7c:
24:33:61:80:e5:00:33:e0:2b:1d:36:31:62:cb:31:c3:56:91:
7b:a2:16:52:99:55:7c:30:b7:83:86:c3:66:05:71:63:0a:d4:
1d:d1:30:2d:b4:b4:80:3b:ce:2f:4a:fd:7d:98:09:99:84:14:
f8:b4:70:bf:b8:cb:fd:3f:d3:0b:c6:c1:d0:f8:d5:6d:9b:29:
c6:81:a5:cb:cf:3e:1d:2c:68:5c:b2:e7:c2:a5:33:0c:17:2d:
1b:f9:20:b0:64:32:3d:b2:15:c9:3a:9c:79:1f:83:ab:ae:7c:
97:b6:36:c3:ea:3a:e6:a6:45:88:9d:09:2b:8d:cd:51:0e:29:
b1:37:55:5a:e0:a4:1f:ac:41:38:8c:9e:7f:cc:3e:fa:b6:42:
df:52:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org