Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa
File: 3130332e3231342e37312e302f32342d3234203d3e203230333236.roa (raw, json)
Hash identifier: 3hExPdnpcolp+FT8SPu8F+mBrtU0arKAL/9UgVQfQ9I=
Subject key identifier: 2B:8B:6F:F3:F4:78:2F:6F:B5:F2:3B:34:15:19:E8:32:0A:4A:EE:1A
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 3A577A05F79466BA704FEEA1ACB3401B4B3144CD
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 20326
IP address blocks: 103.214.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:57:7a:05:f7:94:66:ba:70:4f:ee:a1:ac:b3:40:1b:4b:31:44:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=2B8B6FF3F4782F6FB5F23B341519E8320A4AEE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:bb:26:df:1c:3f:eb:ea:73:e3:c8:81:4d:
db:b3:b3:63:58:ca:3d:a0:83:5f:82:b6:2a:a2:d2:
31:fb:f8:6c:40:af:c6:b1:29:79:b9:1b:03:1b:3e:
98:f8:f8:a4:6f:01:92:3d:fb:60:d5:0a:01:d0:b2:
f9:4e:8e:bf:ee:a2:b3:c4:ff:41:b8:30:44:25:be:
45:9d:94:f1:ee:74:36:f1:8a:57:7d:dd:b1:50:00:
66:ef:90:56:f4:10:05:0f:66:e3:b9:e5:53:64:00:
5d:b8:df:27:11:30:81:ce:43:c6:f6:10:00:af:06:
4c:9c:13:bb:cc:5a:21:df:fa:ca:f8:2e:af:c1:0b:
5d:bc:08:c0:35:1a:4c:2d:32:1a:82:c4:31:59:f8:
10:7f:c3:98:c0:1d:7f:7b:a1:99:8f:77:e5:c1:ce:
cc:81:ba:27:22:0d:69:9a:ca:09:64:86:48:59:27:
a0:4e:6c:93:cc:c2:09:bd:f9:d7:9f:3d:b4:27:e9:
6f:b6:2e:70:25:f4:d9:4c:15:8b:69:26:f7:cd:96:
65:09:67:4f:85:c6:3f:68:64:fd:a2:86:e7:7b:17:
62:7d:08:5b:4e:63:87:af:4c:75:dd:01:e8:93:3b:
d2:e0:33:1b:2a:53:16:66:2b:6f:3f:13:d9:0c:09:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8B:6F:F3:F4:78:2F:6F:B5:F2:3B:34:15:19:E8:32:0A:4A:EE:1A
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.71.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:41:6e:96:85:70:14:e7:ab:72:b6:c8:f1:d4:6f:a9:b8:
ca:5e:76:f3:4b:99:14:fe:35:03:eb:c2:ae:32:73:4e:54:4b:
ce:45:9c:dc:6f:4a:64:aa:4e:e2:59:6e:ff:ac:72:c8:74:31:
72:3d:4f:2a:6f:1a:2f:ad:61:06:af:60:25:b0:70:6d:3e:cb:
da:18:77:46:3e:03:7e:ba:32:dc:0a:b9:49:17:5d:75:f0:35:
d8:4f:f0:3e:fa:9c:fa:76:dd:78:d6:b8:91:a9:cd:5d:bd:30:
5b:79:67:8a:e7:8c:aa:9d:1e:97:75:85:a3:f0:26:c8:46:c1:
35:e6:97:24:b0:19:8a:7a:f0:a7:34:b8:da:17:6d:29:1a:24:
12:d6:a6:bb:e8:79:82:ad:f9:49:dd:50:f4:8d:87:1a:f7:66:
1f:a1:5b:1f:9c:66:32:e0:b5:67:be:f5:47:fa:98:96:5a:ec:
0f:17:55:c8:79:0e:93:48:0b:65:4a:e7:e2:7a:0f:5c:f6:8a:
8c:5c:3c:0d:ce:1d:71:d0:b8:f9:e7:2b:7f:b4:43:be:ea:85:
27:eb:0a:a3:c4:b6:4d:58:78:d6:8a:9d:8b:eb:95:20:82:2a:
c5:41:b6:76:d3:62:a7:bd:0a:fd:b9:f0:85:fc:a0:97:c8:03:
7a:6e:41:ce
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUOld6BfeUZrpwT+6hrLNAG0sxRM0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOFoX
DTIzMTIzMTIzNTkwOFowMzExMC8GA1UEAxMoMkI4QjZGRjNGNDc4MkY2RkI1RjIz
QjM0MTUxOUU4MzIwQTRBRUUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANDbuybfHD/r6nPjyIFN27OzY1jKPaCDX4K2KqLSMfv4bECvxrEpebkbAxs+
mPj4pG8Bkj37YNUKAdCy+U6Ov+6is8T/QbgwRCW+RZ2U8e50NvGKV33dsVAAZu+Q
VvQQBQ9m47nlU2QAXbjfJxEwgc5DxvYQAK8GTJwTu8xaId/6yvgur8ELXbwIwDUa
TC0yGoLEMVn4EH/DmMAdf3uhmY935cHOzIG6JyINaZrKCWSGSFknoE5sk8zCCb35
1589tCfpb7YucCX02UwVi2km982WZQlnT4XGP2hk/aKG53sXYn0IW05jh69Mdd0B
6JM70uAzGypTFmYrbz8T2QwJ9XECAwEAAaOCAlcwggJTMB0GA1UdDgQWBBQri2/z
9Hgvb7XyOzQVGegyCkruGjAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMxMzAzMzJlMzIzMTM0MmUz
NzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMzMzIzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGfWRzANBgkqhkiG9w0BAQsFAAOCAQEAkrRBbpaFcBTnq3K2yPHUb6m4yl5280uZ
FP41A+vCrjJzTlRLzkWc3G9KZKpO4llu/6xyyHQxcj1PKm8aL61hBq9gJbBwbT7L
2hh3Rj4Dfroy3Aq5SRdddfA12E/wPvqc+nbdeNa4kanNXb0wW3lniueMqp0el3WF
o/AmyEbBNeaXJLAZinrwpzS42hdtKRokEtamu+h5gq35Sd1Q9I2HGvdmH6FbH5xm
MuC1Z771R/qYllrsDxdVyHkOk0gLZUrn4noPXPaKjFw8Dc4dcdC4+ecrf7RDvuqF
J+sKo8S2TVh41oqdi+uVIIIqxUG2dtNip70K/bnwhfygl8gDem5Bzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org