Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
File: 3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: HUSml3JNHZTKBs3s02989/yQodIqzP6HH98YCbskgAU=
Subject key identifier: DA:91:5C:EE:C7:99:92:67:57:9C:87:53:0E:DC:67:96:14:24:D6:E9
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 2D01199505BD714F6885736EAC236C4567475252
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 206804
IP address blocks: 103.230.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:01:19:95:05:bd:71:4f:68:85:73:6e:ac:23:6c:45:67:47:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=DA915CEEC7999267579C87530EDC67961424D6E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4a:29:a1:59:bb:9e:eb:c1:e1:48:34:1a:91:
d0:43:b6:31:5d:20:a6:75:39:79:8c:71:ba:59:b1:
a1:45:95:fc:39:92:e6:ee:a5:3a:88:78:9f:73:98:
93:f1:54:6a:d6:da:f1:eb:7a:cd:36:97:7d:9a:80:
26:cc:b4:7a:90:ff:be:6b:77:d6:53:6b:f7:4c:9b:
17:8b:cf:82:88:9c:80:cd:09:ac:7c:b1:42:1a:d6:
c9:c1:77:0e:e8:f8:b0:43:7c:f9:3f:33:6e:4c:35:
2b:1d:5b:2b:e6:a3:7f:3f:11:97:dc:d2:89:94:db:
c9:e1:f3:df:71:5f:f0:a7:cc:70:3f:a2:c1:45:15:
d1:c4:2f:57:10:fc:79:48:28:08:85:4a:8d:a4:6b:
2f:d4:68:3b:8d:cf:34:c1:b4:bd:a7:8d:ff:e0:ce:
e8:45:a0:53:96:f0:32:ad:19:40:de:b5:4c:08:ab:
1e:85:59:4c:86:3d:28:ba:26:d2:ef:ec:a1:18:e7:
eb:be:19:7c:45:c2:51:13:ca:b3:cd:0f:01:89:9f:
85:ab:3b:3a:c2:27:be:c0:47:c5:5a:c8:66:9b:a3:
d3:58:4d:df:ac:6e:f3:b9:4f:e3:9a:b6:4d:5e:3c:
f1:7a:66:fb:79:21:c2:55:05:0a:0a:90:f1:4c:0e:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:5C:EE:C7:99:92:67:57:9C:87:53:0E:DC:67:96:14:24:D6:E9
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.142.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:58:ec:9d:79:8b:7a:bb:ef:c4:06:b4:da:1c:53:2f:89:3a:
93:5f:21:a0:6e:9c:41:e5:cd:87:e6:3d:55:67:01:47:bb:24:
55:8b:2d:d6:bb:24:06:e9:8d:9e:d9:2b:a7:ba:21:7e:36:73:
d3:2c:f6:85:6d:86:37:73:47:e7:a5:32:dc:19:1a:27:c4:90:
8a:c9:dd:8c:52:9d:ca:af:04:78:e8:d0:ee:e6:f2:37:c6:65:
8c:5e:2e:f9:ac:22:bb:ee:c1:e1:1b:ff:54:d0:34:5f:96:71:
04:06:23:ff:8f:5b:c7:de:43:01:11:2b:f2:d7:7f:09:64:77:
e7:69:36:0b:e7:f1:26:ee:7b:43:f8:99:a9:e2:ff:14:0a:0b:
52:a9:bb:6b:d0:77:65:a6:b7:48:33:2f:94:9b:07:33:a9:aa:
c0:7f:f9:59:14:00:df:65:cf:3a:c7:a9:65:50:df:8b:d5:49:
13:0e:a8:99:c2:03:33:4c:06:2e:e7:3c:62:92:ef:69:f3:de:
f0:09:4b:51:22:d9:fa:8d:f9:2f:65:30:35:d5:af:92:8c:d4:
d5:25:a2:db:7d:32:a4:90:fe:4d:9a:cf:f7:fd:45:93:06:4d:
e0:ae:a7:52:af:3d:99:e8:15:2f:92:65:3c:94:a6:a2:f3:8d:
f7:91:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org