Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
File: 3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa (raw, json)
Hash identifier: 8R49GcvO/U1JtsF3ms+p7JDwKbIXb2NzX+epVJ6SuKQ=
Subject key identifier: 3C:B4:86:05:05:F0:D3:D8:D2:DD:CD:BA:55:40:46:28:F8:14:0C:11
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 43238A49244600E7AA587339F3A69BBB7FCD4738
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 204136
IP address blocks: 103.230.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:23:8a:49:24:46:00:e7:aa:58:73:39:f3:a6:9b:bb:7f:cd:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=3CB4860505F0D3D8D2DDCDBA55404628F8140C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:bd:1f:30:fd:95:ea:3d:bb:7e:40:9e:ac:
7b:f8:fe:e5:f8:0b:59:cd:10:78:7d:24:00:35:1f:
54:c7:dc:71:57:5e:ab:44:d3:7f:52:81:d9:01:9e:
6b:9d:61:87:30:86:00:d5:31:45:13:7e:36:db:2f:
64:4a:15:e6:a8:6d:09:67:20:f3:e2:16:96:e9:03:
ed:f8:4e:e2:86:6b:ab:c9:19:1b:0f:35:6f:4c:66:
2d:28:9c:2f:75:af:e7:fa:80:17:b8:41:f0:03:5c:
de:81:83:3f:79:2c:6e:f2:23:3d:aa:0c:f7:5d:0f:
59:b4:5d:97:87:1d:a7:44:cf:25:71:e9:65:98:75:
f8:68:a2:e4:58:2f:ab:37:15:fc:51:c1:c3:70:ac:
79:b9:96:d8:2c:4b:b4:a0:ff:f5:d5:c9:dc:fc:71:
ce:34:cd:be:14:ed:77:91:0b:83:c8:f1:86:e7:b6:
ac:66:6c:c7:6b:23:e3:a3:32:d2:b3:cb:f4:e6:57:
45:58:64:b5:dd:2c:98:5b:56:87:d8:4f:2b:56:6a:
df:33:bc:9c:c3:d4:11:5c:d0:53:66:bc:92:31:47:
0d:6f:88:dd:8b:15:b5:8b:4b:e9:43:67:aa:fd:96:
41:1c:0c:49:a4:fa:94:63:43:48:fe:5c:1a:ea:4f:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:86:05:05:F0:D3:D8:D2:DD:CD:BA:55:40:46:28:F8:14:0C:11
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:99:94:83:f0:af:14:0d:de:1a:34:5f:73:d7:6e:2a:51:0a:
1a:ba:6f:e4:91:12:fb:09:29:c7:bf:65:40:b1:09:98:41:b2:
9b:0e:6f:d8:a6:91:b9:83:d9:fc:12:bf:f6:a9:9f:84:19:08:
89:8d:07:b0:23:ae:6c:4c:3d:ad:e3:05:09:bc:4f:fd:b8:62:
6d:db:8f:42:9e:32:34:66:9e:ce:02:3b:e3:79:a7:a4:3e:54:
5a:8d:9f:08:6f:35:b8:9c:3e:32:dc:0d:4d:c6:e7:8d:e1:6e:
ef:23:de:4b:77:bc:3d:3c:ea:1b:26:63:93:8f:05:e6:6b:bf:
8f:e8:f7:dc:7c:01:a4:61:a1:cd:47:97:88:56:c6:94:15:a3:
03:cd:c6:cc:ed:be:da:69:ac:f1:d6:59:7a:a1:d6:cd:c1:21:
61:eb:1e:34:22:69:e5:9b:32:80:2b:00:42:3b:06:26:4d:c7:
22:66:dc:ff:50:c9:d9:de:1d:85:e4:06:82:7a:56:af:86:41:
88:7d:8a:56:3d:18:ff:bf:c2:29:ba:b6:91:87:cf:25:9b:99:
ed:00:53:c5:97:90:12:49:f0:e0:a9:35:c5:36:94:0d:df:ba:
f1:12:5f:8f:3b:cb:d2:04:5b:e3:06:24:f9:2d:cb:fb:49:10:
7c:76:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org