Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134332e302f32342d3234203d3e20323033303938.roa
File: 3130332e3233302e3134332e302f32342d3234203d3e20323033303938.roa (raw, json)
Hash identifier: l1iiDtoMdg0HX37rAf6vqQoR8GGnWM4FRP9t8PYxk7Q=
Subject key identifier: 1F:80:58:93:6D:8F:3C:B6:0B:69:37:54:94:0E:F5:06:12:6D:50:A7
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 063C57B53AA59853DA934CA95E9C2F0319577B38
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134332e302f32342d3234203d3e20323033303938.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 203098
IP address blocks: 103.230.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3c:57:b5:3a:a5:98:53:da:93:4c:a9:5e:9c:2f:03:19:57:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=1F8058936D8F3CB60B693754940EF506126D50A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:17:c1:4f:57:86:46:51:55:a7:cc:b0:e1:
dc:36:5b:17:92:0d:35:88:9b:cf:7f:25:b0:f0:9c:
40:72:bc:c9:22:60:ee:4f:b6:f0:c8:2c:83:e7:68:
34:9b:10:bb:05:be:30:95:c7:47:5f:aa:3c:bd:71:
58:c9:fd:c3:cb:40:3b:e1:58:66:f6:8c:59:2a:0b:
55:33:7a:ce:ba:86:8b:33:3c:17:ac:d5:07:db:1e:
94:9e:58:cb:a1:45:f2:0a:0c:ad:9b:2f:bd:bb:4c:
c8:e7:37:c3:43:c2:1e:fb:d1:36:74:6d:42:f0:11:
c7:e9:dd:fc:ab:1d:71:20:50:06:ce:2e:58:6f:e1:
9d:26:41:ab:79:65:a3:5f:32:0c:ee:98:ba:f7:49:
b3:ad:97:50:08:be:6d:db:85:d4:45:b3:06:78:a4:
b1:dd:b4:6e:ca:04:31:54:af:28:0f:e0:7c:d1:30:
7c:2d:74:e1:84:21:98:f4:17:35:46:50:c0:6a:6e:
ae:02:ed:61:10:89:d0:18:c1:6a:09:aa:62:57:32:
49:9b:7b:74:8b:af:0c:3b:32:cc:55:e8:c4:74:9e:
0e:0a:fc:f2:5b:88:26:b5:2b:b2:ee:c3:22:72:c3:
0c:c2:a5:d5:73:45:f6:67:06:bf:60:33:69:43:06:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:58:93:6D:8F:3C:B6:0B:69:37:54:94:0E:F5:06:12:6D:50:A7
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3233302e3134332e302f32342d3234203d3e20323033303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e4:6f:fa:52:6a:55:eb:e2:31:b8:81:13:01:67:d5:a3:89:
6d:c4:eb:cd:9c:12:0d:a9:e8:61:d7:1b:6c:0b:3b:cd:0e:74:
07:d0:24:e1:51:da:33:60:d6:c3:72:05:7e:de:5b:81:b2:f9:
94:df:89:b7:b5:f4:c0:f6:93:25:f4:80:f8:2c:92:2c:3a:b3:
c9:48:32:dd:c0:50:7d:0d:e9:cc:44:7c:17:f5:41:37:4a:58:
12:14:24:ce:99:dd:4a:4a:30:34:8d:ae:19:9f:53:4f:b7:cc:
aa:56:54:65:09:ab:23:fd:af:80:58:2a:a8:2c:40:d6:6e:42:
06:9d:3e:68:e5:07:20:29:6d:c8:2e:e5:8b:23:89:01:bd:19:
a5:e6:25:18:7b:97:70:18:41:cc:4e:7c:19:25:76:a5:a3:33:
7c:f4:56:6b:dc:53:37:c1:65:f4:47:31:fa:05:03:a3:52:ac:
7e:b1:36:ba:2c:0a:8e:72:19:e0:2a:a7:11:90:d8:be:ff:96:
3f:a5:fe:70:df:e1:ce:14:ab:7d:5e:f9:27:4a:88:dc:9f:5e:
41:28:28:07:14:08:a6:c7:e3:c0:f8:01:6d:89:a5:ea:24:60:
ac:46:a5:d4:29:3f:13:84:1e:08:0a:d9:67:1b:67:9d:90:d7:
ea:92:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org