Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
File: 3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: NYg3E4Dkhtq0Aiuog72D8yCItIzCXAjp8inEG5UuQhM=
Subject key identifier: 35:18:68:15:27:92:75:64:8F:6B:79:CC:D4:26:D8:71:52:36:4E:3D
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 143C60B5D0116408F3345D4375936F6CADB22E41
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 138995
IP address blocks: 103.68.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3c:60:b5:d0:11:64:08:f3:34:5d:43:75:93:6f:6c:ad:b2:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=35186815279275648F6B79CCD426D87152364E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:4d:61:47:8f:22:ea:f7:3d:95:dd:e0:4a:
20:6d:8e:ea:2e:f1:4e:1e:ed:ec:85:81:87:c3:9c:
ac:17:d1:4c:e1:8f:7e:51:58:7d:3f:08:66:b1:6a:
87:93:83:33:75:1b:fb:b4:ad:44:cf:e4:e5:c0:41:
c6:ef:db:1b:df:e9:25:2b:33:58:84:40:a4:75:8d:
f0:d0:06:a2:ae:8d:52:dc:a3:34:ee:c4:4c:b1:89:
e5:a5:5d:d5:20:01:5b:6c:ce:fc:2c:7c:48:a4:9b:
6a:c3:28:f7:dd:83:99:5f:72:96:89:55:51:b7:6d:
df:6c:dd:f3:96:90:38:05:9b:6c:87:b1:42:12:89:
a4:35:c1:66:5f:a6:18:e3:16:df:ce:a6:a9:91:ab:
79:e5:4a:0d:8b:35:4b:85:65:21:2d:9d:59:61:b3:
47:5a:5c:88:ca:ae:f4:87:ac:9c:0b:a4:87:10:11:
06:81:e2:e9:cb:67:d5:68:7d:fa:9d:66:c5:fa:19:
ee:19:19:63:92:fd:6d:53:12:e2:90:05:98:ab:a6:
f2:bc:6e:08:b7:37:0a:ed:80:00:89:fc:df:bc:3f:
a9:1b:c4:cd:fe:c1:1f:8b:64:0b:b8:9d:1c:9c:be:
d2:e6:74:80:bc:2a:d1:a2:a0:71:90:6a:d3:8e:a8:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:68:15:27:92:75:64:8F:6B:79:CC:D4:26:D8:71:52:36:4E:3D
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:65:de:63:cb:b9:6b:8c:a0:78:18:15:4d:d6:66:b0:5c:54:
48:7f:90:78:72:2b:1c:7a:28:61:29:eb:94:bf:8f:f1:ef:64:
fe:1b:f2:ec:c4:48:98:e4:b7:b0:c8:7b:41:15:50:52:50:8e:
05:f6:59:21:8e:e8:66:9a:51:34:70:ea:98:0d:78:a5:1c:4c:
df:b7:08:fb:10:94:9d:e3:0f:b3:72:10:77:f2:bb:fa:34:2b:
23:c1:e4:f8:89:e5:a6:5e:12:ab:6c:8e:c4:f3:f7:39:05:e9:
f3:9d:7d:ac:11:30:35:eb:2e:5d:33:7c:af:32:1a:38:be:64:
e2:50:61:1b:dc:dc:96:1c:7d:93:78:42:a4:92:53:f6:1d:67:
e3:cf:59:ae:20:6d:0a:ad:09:79:63:85:fe:7a:2b:15:b9:bd:
61:77:12:0e:b0:68:4d:26:23:03:53:d7:b7:be:15:3c:0b:3e:
d9:4d:9e:99:03:74:e9:76:ba:91:54:e0:79:31:56:84:0f:86:
3f:8a:e0:82:f6:a3:d1:64:ff:9b:22:27:9d:5d:07:ab:4e:ae:
d2:60:e6:71:43:69:1d:05:10:6f:1a:2d:4f:22:7b:8c:ad:ca:
5f:fe:e9:a3:6e:9a:21:e2:cf:11:38:cf:34:fc:57:da:6a:86:
80:f2:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org