Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa
File: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (raw, json)
Hash identifier: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=
Subject key identifier: EF:FC:D2:18:EC:A8:19:37:3F:68:6B:D4:4A:25:3C:A1:F1:08:1E:48
Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial: 4D266417C414705E6DE93E4DBDAFC8D24B36E346
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa
Signing time: Mon 16 Dec 2024 10:01:35 +0000
ROA not before: Mon 16 Dec 2024 09:56:35 +0000
ROA not after: Mon 15 Dec 2025 10:01:35 +0000
asID: 56286
IP address blocks: 103.26.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:26:64:17:c4:14:70:5e:6d:e9:3e:4d:bd:af:c8:d2:4b:36:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Validity
Not Before: Dec 16 09:56:35 2024 GMT
Not After : Dec 15 10:01:35 2025 GMT
Subject: CN=EFFCD218ECA819373F686BD44A253CA1F1081E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:0f:a4:b3:57:bd:c3:4e:fe:aa:f7:23:59:
20:5d:99:ed:ca:74:cd:98:2c:35:b8:6c:d0:93:fe:
dd:c6:e4:b8:a3:02:a7:71:3c:ea:96:e5:c8:e4:62:
0d:7d:f6:ae:b7:59:98:c3:cf:fc:4a:34:e7:72:1b:
70:0d:ab:cf:ef:b6:94:2c:e3:8f:d7:50:ff:34:48:
6a:0e:0c:59:38:b2:19:3e:7e:7a:c9:b2:9a:89:91:
b8:a4:85:59:a7:2e:1f:0d:e5:29:ad:4b:a9:a8:1b:
87:70:36:4a:93:ae:a1:db:bb:b6:9f:76:a1:08:0a:
f1:08:d8:62:0a:fd:ae:8f:2f:9c:7a:e1:5e:d3:55:
fe:48:19:df:4b:89:48:33:dd:3f:44:6c:d2:94:11:
c0:42:2a:fe:18:52:ac:cf:c3:fe:55:74:63:e6:e2:
f3:a2:4c:5a:08:dd:05:30:96:30:b8:8c:7f:2b:04:
d9:23:c6:34:58:c9:7f:16:2f:b3:57:84:fb:77:2a:
cd:7f:38:74:62:de:b4:59:d8:ed:8a:36:20:e6:13:
2e:17:b6:21:b4:ee:71:25:87:07:de:e3:07:a7:20:
ae:39:6a:e0:b2:45:52:fd:43:a0:52:dd:3e:84:0d:
76:51:5d:7e:ce:96:14:7e:f5:63:1e:a9:f8:82:87:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:D2:18:EC:A8:19:37:3F:68:6B:D4:4A:25:3C:A1:F1:08:1E:48
X509v3 Authority Key Identifier:
keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:91:15:88:1d:a3:fd:df:67:27:5c:69:dd:33:ba:03:a5:6a:
e0:ad:33:0d:15:03:06:7e:29:40:f5:54:7d:13:8f:26:b4:99:
79:2a:a0:83:dd:b5:45:82:e7:33:b9:a9:1c:0e:4b:27:7f:51:
e3:4a:24:95:bd:9f:13:6a:a3:a9:0d:8d:a5:25:c1:84:69:12:
64:96:57:e0:95:5c:21:5b:13:63:4d:21:f7:96:27:18:a4:21:
8c:62:b9:64:f8:de:2b:dc:67:2e:8b:f4:b9:99:9f:66:e7:b9:
4a:4a:eb:f3:8a:f3:fd:07:81:13:7b:ad:25:8c:76:9c:1d:83:
0f:33:20:a9:b1:5c:a6:d6:5d:46:30:c0:df:03:76:e9:af:c1:
a7:a5:16:b1:fd:40:49:07:c1:c7:41:9e:55:91:a7:ee:b0:3e:
f4:fc:c0:96:64:da:8c:7f:c5:74:52:ff:33:1a:9d:17:3f:99:
b1:99:54:50:b7:ee:d8:83:db:27:6a:60:26:89:fb:09:88:99:
07:10:6d:81:ee:b8:ae:5f:86:85:4a:94:79:ea:0a:61:62:73:
d1:5b:07:65:10:13:8a:1f:4f:0c:1b:21:37:db:7b:94:58:30:
03:31:7a:17:34:2a:52:74:32:c9:71:f1:ab:50:f6:02:ea:2e:
9d:42:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:43 2025 by rpki-client