Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
File: 3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: gnqMyhaHQSot1GZjaXsVLlVJPcxFfCUb9NbGnut60u8=
Subject key identifier: CA:D0:63:A2:78:FF:84:0C:B9:3F:DE:56:A9:09:86:EA:E9:DD:FB:86
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 447D56FB1EFCFB25C47CB761CF208ABE8A7515BD
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 61138
IP address blocks: 103.68.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7d:56:fb:1e:fc:fb:25:c4:7c:b7:61:cf:20:8a:be:8a:75:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=CAD063A278FF840CB93FDE56A90986EAE9DDFB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:32:28:2f:93:2b:08:55:29:72:3e:15:31:
80:4c:99:c7:92:cc:0c:9a:ed:e1:0f:d8:36:cb:37:
18:dd:63:81:f1:99:e8:de:55:fb:62:fe:7a:80:8e:
49:10:dd:05:97:d4:06:32:46:46:02:d3:82:f0:18:
97:33:e3:e6:4c:7e:87:46:46:06:c5:ca:69:b2:58:
35:ed:fe:27:ad:92:3c:62:c4:df:c9:c1:c0:7e:b9:
c5:26:f9:0b:26:8e:02:45:6a:99:11:0c:ce:09:de:
41:55:82:ff:01:29:5b:56:bf:61:5a:44:fc:f4:2d:
ce:5f:c0:83:11:bf:ed:fc:61:34:ef:bb:6e:3f:6f:
62:6d:11:ec:a0:04:b7:cb:1f:8e:15:70:bf:45:57:
40:b3:1e:4c:57:59:02:93:6c:8d:dc:49:ea:d1:e7:
4f:d4:17:d6:2d:04:6d:18:95:5d:98:d2:b1:1e:fe:
c4:a7:c8:1d:0a:1a:0e:34:6f:b8:0a:89:85:44:db:
0c:8e:09:d4:8f:f8:a5:00:e3:b1:25:39:46:94:9a:
ee:f4:e2:48:97:42:eb:41:a5:44:c4:0b:49:b3:7a:
d5:eb:58:3f:c5:08:e3:4b:56:b8:81:c8:c8:c1:c9:
70:fe:b6:6e:74:ee:7a:77:c6:e8:91:39:99:fe:c0:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:63:A2:78:FF:84:0C:B9:3F:DE:56:A9:09:86:EA:E9:DD:FB:86
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:7f:08:11:e5:75:ed:1c:81:db:3e:e8:74:63:c2:da:44:a0:
da:af:36:81:51:ff:c1:6d:61:3b:48:26:f6:e3:d1:a4:89:0f:
bb:97:1f:a5:fd:1e:46:8b:39:6c:cd:b9:47:a7:ac:35:ae:4a:
f3:ac:dc:41:78:3a:04:02:4e:a4:b9:69:a4:90:a0:dc:de:17:
c3:4c:fe:de:26:37:38:6d:bc:24:22:b9:2e:dc:c7:f7:bb:0b:
0f:1d:61:dc:83:49:cb:66:72:18:dd:2a:4e:d4:99:93:12:28:
df:8a:7d:6f:2c:58:0c:4d:1e:67:9d:60:41:b5:6a:3c:4b:7c:
87:0c:88:0d:cd:f2:22:bb:32:ae:4e:f1:63:53:55:24:be:83:
5b:56:34:dc:ea:e0:aa:1b:d6:8b:0e:2d:1f:50:ac:dd:34:27:
05:69:1f:1d:c8:00:77:a5:1b:bf:b5:bd:5b:06:72:8d:ad:da:
8d:f9:31:46:a2:23:15:99:08:c1:6d:5e:43:ba:43:42:8d:ab:
9f:67:90:d5:f2:66:74:10:03:aa:58:7a:2f:f3:c3:43:3b:10:
35:3d:66:da:54:f2:a3:18:6c:1c:d8:3f:72:56:72:10:80:64:
c9:ca:02:21:e1:1e:77:fc:f0:6e:a2:3f:08:fc:00:16:de:f4:
6a:b2:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:26 2025 by rpki-client