Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
File: 3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: G7QIrCKRIUlqXEl61L9epSh7C36U4iMgxoSGXqN0p6M=
Subject key identifier: 32:9A:74:C6:6F:E9:9A:B7:92:B6:6E:E9:05:03:6D:68:39:FB:65:99
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 2F144D3F8A67BA606F89C431265A40A1C7ADF07F
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 61138
IP address blocks: 103.230.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:14:4d:3f:8a:67:ba:60:6f:89:c4:31:26:5a:40:a1:c7:ad:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=329A74C66FE99AB792B66EE905036D6839FB6599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:97:77:8b:99:cc:d0:ce:83:47:a2:bd:4b:
cc:d1:8b:1c:d9:2a:c0:a6:2c:96:9a:3b:83:41:fa:
41:2a:b7:e1:03:be:60:46:e7:06:9d:ad:f9:01:15:
9d:14:0c:28:6d:4b:7d:a7:57:9d:22:3e:e0:ff:01:
c3:37:86:53:95:3d:aa:4d:70:60:5f:47:8b:b5:47:
e2:33:05:01:14:13:83:1d:ef:92:a7:3e:50:cd:59:
d0:5f:8b:d3:d7:fd:88:e2:a0:f0:46:15:29:35:8f:
31:44:17:39:3f:a3:8b:1a:ba:39:59:82:3d:b3:34:
7f:54:76:d3:3b:cb:0f:30:b8:0e:1e:0e:78:f0:f9:
9e:00:a2:65:c4:81:f9:77:0f:ef:53:9d:b1:31:af:
86:08:f2:d6:c5:0b:50:84:20:4e:31:31:f2:8f:c5:
e2:81:f9:23:28:61:84:94:de:ba:cd:b4:54:47:54:
8f:09:5a:0d:94:f4:2c:a6:ec:a4:40:54:5b:a4:8d:
f6:8b:89:f4:99:a6:c1:b5:eb:15:4f:e2:02:f6:a7:
45:dd:f2:85:96:32:c8:5e:f6:9d:be:0d:23:d4:52:
76:2a:5b:ae:26:db:bb:94:cd:96:82:bd:ea:09:c0:
59:dd:fa:0c:a9:7d:32:d7:4d:96:5a:d4:10:f7:7c:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:74:C6:6F:E9:9A:B7:92:B6:6E:E9:05:03:6D:68:39:FB:65:99
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a0:00:6c:44:cd:37:22:1d:6e:fa:03:35:84:d2:24:4c:b3:
88:d7:c8:f7:b7:7d:57:41:75:41:b7:5a:f6:b0:24:47:b7:85:
3d:fa:1d:a8:f8:e9:a4:fd:77:30:31:2a:fe:b7:da:08:26:b3:
cf:99:51:8a:0c:7a:03:e3:d3:f3:d3:76:c7:1f:f5:29:08:40:
e1:e9:b7:36:c1:80:e2:04:80:88:81:85:01:b8:91:b9:7a:0d:
27:48:ee:89:dc:83:3d:1b:1f:85:bc:0f:f5:56:66:8f:52:64:
6b:81:9f:ef:39:56:68:36:3d:5a:e5:09:e6:9d:c2:81:a1:3e:
6d:e4:69:61:0e:b8:55:4f:e8:e8:58:00:b9:33:da:7e:0c:ac:
4b:5b:f3:0d:e3:59:6f:48:1a:bd:47:55:4d:83:1b:fd:3b:10:
d4:1e:c9:50:19:ee:e2:cb:83:c6:69:19:3d:30:42:71:df:58:
d1:d6:64:11:6b:f6:33:a2:40:ca:fe:41:58:1e:ce:d6:70:56:
f7:33:ac:08:23:fd:51:18:a5:9a:09:0a:5a:a4:80:90:2d:91:
7f:b4:b0:82:da:87:7a:b8:ed:48:f1:9d:cb:1e:dd:c4:fb:9e:
84:a4:88:00:31:90:35:a6:f6:5a:41:06:fb:f5:26:55:5f:5d:
9a:78:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org