Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
File: 3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: treM5UFaIxBOOxsP9aHVzcDtopLdnnbomY92Eu7/tkU=
Subject key identifier: A0:15:0A:71:E9:E9:28:07:2C:0C:74:14:F1:38:9B:30:06:13:31:DE
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 48DD74E309D1B5E245A999C8ECF2F3D087B2BD71
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 23470
IP address blocks: 103.230.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:dd:74:e3:09:d1:b5:e2:45:a9:99:c8:ec:f2:f3:d0:87:b2:bd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=A0150A71E9E928072C0C7414F1389B30061331DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:21:98:41:b3:24:09:28:88:50:f9:4c:56:
38:18:48:58:78:5c:22:5b:5f:47:6d:77:19:61:7d:
6b:96:12:20:c4:95:2e:e3:03:37:8e:3e:13:b7:ba:
73:43:ba:d0:06:83:0a:bf:a8:6b:68:11:0c:da:50:
34:f2:ab:5b:d5:58:0b:ca:af:0a:26:67:45:96:c9:
f3:a3:0b:2c:13:44:64:74:bd:90:0e:97:45:36:a8:
bc:4c:8c:3c:03:77:86:34:76:b8:2d:88:69:65:e0:
ab:e9:9c:97:17:96:f4:91:4a:81:58:a4:33:d6:2a:
14:51:40:68:19:de:0f:a7:a9:e7:d4:ea:48:a0:0c:
4e:bf:a5:d8:eb:78:cd:3b:b1:2a:93:f0:bd:21:c6:
36:87:1d:cf:f2:5a:0b:e5:53:9a:ee:54:07:bb:d9:
1b:67:4c:a9:87:85:f9:f6:39:f7:8b:12:78:52:a6:
f9:3e:69:81:25:bc:26:0e:01:a2:5d:82:e1:e9:ef:
de:66:0c:26:6f:52:f4:4b:09:83:0c:d1:34:bb:f5:
ba:af:7c:c9:08:f5:84:b0:15:51:01:0f:d4:89:a5:
dd:66:d5:47:3e:95:8b:1b:ea:61:35:46:53:74:a9:
f1:33:fc:bc:3f:ef:5c:f2:2b:68:16:f0:0f:33:c0:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:15:0A:71:E9:E9:28:07:2C:0C:74:14:F1:38:9B:30:06:13:31:DE
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.140.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3a:18:e6:69:f6:46:1a:14:44:ee:b6:d0:aa:07:81:3b:4f:
26:29:f7:87:ac:62:bc:28:7c:04:55:c8:f4:1c:4d:52:15:37:
42:ef:0c:6f:2e:54:5e:8a:02:f6:77:f2:0e:12:bb:8b:95:f5:
da:82:ae:b6:54:e9:2f:31:70:c8:b3:d8:98:5a:5c:95:d1:97:
31:11:00:ec:15:50:a8:20:62:83:e9:a1:41:4d:c8:51:25:cd:
be:48:6e:92:8c:e8:ad:92:8b:c4:55:4d:50:7b:bb:26:c7:69:
75:ff:1b:8f:57:6d:1f:be:fd:9b:8a:22:4d:0e:25:f0:8c:07:
9b:c0:06:27:79:50:78:91:ba:2a:d6:d9:9c:43:69:b6:1c:b6:
cb:4b:bd:a9:3b:b4:c9:9d:28:38:55:98:40:7c:65:58:c8:94:
ac:56:54:ee:fe:16:b5:6b:b0:3f:65:0f:40:3e:fb:12:bf:1e:
96:92:f1:98:bd:3d:1c:a9:54:c5:8c:f2:1c:5e:47:c3:52:89:
33:0a:83:48:8a:f0:02:2d:1a:fb:9a:e0:55:cd:1a:b8:24:64:
9e:ac:e0:27:1e:bb:1e:4a:74:d3:ed:a1:26:43:cd:29:57:16:
97:a3:90:e6:2d:5a:0b:12:d7:08:19:33:f9:7e:92:ac:1b:f5:
42:e2:38:3e
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUSN104wnRteJFqZnI7PLz0IeyvXEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOVoX
DTIzMTIzMTIzNTkwOVowMzExMC8GA1UEAxMoQTAxNTBBNzFFOUU5MjgwNzJDMEM3
NDE0RjEzODlCMzAwNjEzMzFERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2bIZhBsyQJKIhQ+UxWOBhIWHhcIltfR213GWF9a5YSIMSVLuMDN44+E7e6
c0O60AaDCr+oa2gRDNpQNPKrW9VYC8qvCiZnRZbJ86MLLBNEZHS9kA6XRTaovEyM
PAN3hjR2uC2IaWXgq+mclxeW9JFKgVikM9YqFFFAaBneD6ep59TqSKAMTr+l2Ot4
zTuxKpPwvSHGNocdz/JaC+VTmu5UB7vZG2dMqYeF+fY594sSeFKm+T5pgSW8Jg4B
ol2C4env3mYMJm9S9EsJgwzRNLv1uq98yQj1hLAVUQEP1Iml3WbVRz6VixvqYTVG
U3Sp8TP8vD/vXPIraBbwDzPAb/8CAwEAAaOCAlkwggJVMB0GA1UdDgQWBBSgFQpx
6ekoBywMdBTxOJswBhMx3jAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMxMzAzMzJlMzIzMzMwMmUz
MTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ+aMMA0GCSqGSIb3DQEBCwUAA4IBAQAjOhjmafZGGhRE7rbQqgeBO08mKfeH
rGK8KHwEVcj0HE1SFTdC7wxvLlReigL2d/IOEruLlfXagq62VOkvMXDIs9iYWlyV
0ZcxEQDsFVCoIGKD6aFBTchRJc2+SG6SjOitkovEVU1Qe7smx2l1/xuPV20fvv2b
iiJNDiXwjAebwAYneVB4kboq1tmcQ2m2HLbLS72pO7TJnSg4VZhAfGVYyJSsVlTu
/ha1a7A/ZQ9APvsSvx6WkvGYvT0cqVTFjPIcXkfDUokzCoNIivACLRr7muBVzRq4
JGSerOAnHrseSnTT7aEmQ80pVxaXo5DmLVoLEtcIGTP5fpKsG/VC4jg+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:01 2025 by rpki-client