Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa
File: 3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: wIBkUMqoP24DN4DF3W5NdnNZXKdEIPHpNx3Avk0l5gk=
Subject key identifier: 3F:D9:42:EC:8D:92:36:ED:F9:2A:8A:98:DF:6B:63:15:B8:9F:B6:61
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 708BE746C0A729A470DF9965897A62C2FAE15F79
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 138995
IP address blocks: 103.214.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8b:e7:46:c0:a7:29:a4:70:df:99:65:89:7a:62:c2:fa:e1:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=3FD942EC8D9236EDF92A8A98DF6B6315B89FB661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:b2:f0:1f:7c:7b:b1:54:51:e5:88:2c:cd:
f0:21:8c:bb:8b:94:18:dc:0b:32:36:30:3f:b5:dd:
be:52:5a:95:6b:44:ff:d2:0e:fa:2a:48:64:6e:3b:
6f:93:5d:53:52:a5:38:92:df:65:3a:68:e8:4a:f0:
16:2f:e9:d1:3b:d9:b9:f2:70:e0:e0:be:d8:cf:f9:
cd:f5:c1:45:56:33:ca:28:b4:71:32:d5:ec:bd:31:
9a:c5:73:21:aa:22:58:65:ab:56:9c:fb:ff:fe:88:
16:07:90:c1:df:7b:a6:5d:19:d8:5d:c4:43:10:90:
c1:8a:27:45:ed:17:bc:de:2a:b4:4f:a4:95:ae:29:
8c:65:4c:09:03:c4:f1:19:5e:52:98:91:d2:04:fc:
92:a0:ba:ec:55:4e:48:43:df:5b:f2:2c:f8:94:b0:
06:f3:7c:d8:ce:fe:47:44:12:39:4d:a2:e6:91:02:
57:df:75:0b:8c:0e:74:df:5a:6a:c6:cf:cb:f6:c1:
13:2e:8a:79:bf:4c:b5:20:88:22:60:c9:42:76:ad:
4d:a1:9f:dd:81:05:e0:29:b1:ad:0a:b0:28:c7:ee:
d1:22:cb:a1:09:05:a8:95:40:75:31:60:b9:57:ee:
74:77:ce:68:3b:e4:03:0d:43:4d:66:d0:5f:c5:80:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:42:EC:8D:92:36:ED:F9:2A:8A:98:DF:6B:63:15:B8:9F:B6:61
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.70.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5f:26:1c:68:ff:84:7a:0c:ce:88:bc:94:f5:15:34:99:e0:
f3:06:13:22:00:6a:df:47:04:e8:ef:d1:90:a4:79:3b:64:34:
9d:aa:f4:e1:f0:73:7b:7a:fe:85:87:80:8f:a9:bd:2a:08:fd:
9c:fc:da:db:8f:11:ff:3b:41:39:f0:42:90:60:7a:c1:d3:0e:
45:cc:36:5b:6e:c8:10:fd:63:0c:32:4f:b1:85:04:07:73:c6:
17:ba:8e:de:4f:9e:ae:a6:f9:81:b3:74:13:55:06:3a:81:13:
37:f0:9c:4c:17:57:3f:05:0d:76:df:ca:ae:b2:d9:f8:c7:70:
8e:f2:97:8b:fe:4f:ce:ce:b3:3d:4a:7a:1e:9b:87:d5:6c:95:
af:a6:f5:6f:06:09:d9:d8:92:6c:53:10:d7:d0:c8:00:bc:f8:
2d:dd:9d:74:aa:82:eb:55:fa:51:9b:e0:1d:66:c5:31:6b:a8:
df:e8:04:7d:01:5e:61:fe:1d:5f:93:bd:58:f9:ef:31:19:dc:
d9:1c:06:a8:55:6e:8e:ef:da:4f:98:17:1e:5b:20:73:e1:68:
f2:00:92:e0:38:43:e0:c8:99:a4:f2:33:26:19:25:61:87:0f:
72:91:56:78:9d:2b:b8:ed:1a:d3:92:67:bd:09:78:07:5a:d7:
d5:56:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org