Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa
File: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (raw, json)
Hash identifier: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=
Subject key identifier: E9:39:FF:61:39:CA:11:9A:BE:AF:F3:B9:20:6B:64:43:68:89:F5:36
Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Certificate serial: 4E603F4900323D75410E48927D77F965CAB64D14
Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa
Signing time: Sat 16 Nov 2024 04:00:01 +0000
ROA not before: Sat 16 Nov 2024 03:55:01 +0000
ROA not after: Sat 15 Nov 2025 04:00:01 +0000
asID: 138077
IP address blocks: 103.130.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:3f:49:00:32:3d:75:41:0e:48:92:7d:77:f9:65:ca:b6:4d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Validity
Not Before: Nov 16 03:55:01 2024 GMT
Not After : Nov 15 04:00:01 2025 GMT
Subject: CN=E939FF6139CA119ABEAFF3B9206B64436889F536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:b1:2c:71:db:0f:1d:d2:b3:13:0a:50:4a:
bc:8e:84:8c:8d:ee:db:fb:c3:8a:cf:3b:a6:c6:f3:
93:ae:66:97:bb:7e:ce:da:17:cd:b3:85:7c:0e:82:
04:b0:3c:f9:c9:88:d2:ee:a1:f7:b1:10:51:de:31:
c9:1d:0c:36:7d:12:4f:67:70:40:d7:ba:93:a2:b8:
56:53:39:d7:e6:d0:5d:40:7b:bb:5c:15:7a:f7:07:
14:a7:8b:35:e1:95:2f:85:1d:6c:6a:13:2b:8d:c6:
6d:05:d5:a1:97:60:23:df:94:10:23:af:e9:69:b4:
f4:32:13:09:67:19:05:26:b2:b8:78:4d:19:95:7a:
d6:a0:b9:bc:86:1c:2a:99:ee:85:81:de:4c:4e:ca:
be:42:89:09:6f:ed:16:a1:b5:0e:db:00:96:f4:b7:
67:d2:22:91:33:2b:78:3c:b3:e0:7c:6b:5d:22:db:
ba:ae:17:ba:e8:50:70:de:53:26:87:89:b8:3d:79:
c9:20:fd:5c:29:e5:91:dd:5a:24:44:87:58:78:25:
ff:dc:70:8b:3a:99:6e:98:46:56:94:7d:c4:30:93:
dc:64:3b:71:67:e4:f7:16:1a:72:6f:34:43:33:37:
88:77:de:01:5a:88:83:42:ce:73:01:a1:c6:d4:d1:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:FF:61:39:CA:11:9A:BE:AF:F3:B9:20:6B:64:43:68:89:F5:36
X509v3 Authority Key Identifier:
keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.198.0/23
Signature Algorithm: sha256WithRSAEncryption
02:32:92:0d:2d:a8:b2:99:4f:6a:bc:53:c8:51:ef:b8:c5:48:
87:45:0b:79:2a:c4:dd:45:e6:6a:78:b8:35:87:de:f8:62:24:
ca:65:7c:b4:86:b6:7f:95:e0:11:4a:0b:9e:94:6a:35:17:34:
dc:5c:a7:ac:cb:0b:27:15:e3:01:38:51:2d:6c:de:7f:42:ac:
8c:93:4c:5a:70:04:27:ae:eb:9d:35:e2:b1:5c:dc:36:8c:3a:
ed:d0:80:e6:8e:3f:d5:14:5f:ca:34:da:9a:55:a4:4c:47:a6:
bf:ba:eb:2d:73:58:42:df:e3:07:59:e3:22:26:9a:64:50:08:
32:4c:3d:9e:d1:ea:2c:25:f3:ba:1d:83:4d:e0:0b:b4:cc:28:
cd:4a:e3:01:c2:cb:3e:8d:a5:4a:5f:c4:09:78:8a:2c:40:8a:
5e:0c:e3:04:b4:de:a1:8e:fe:70:f7:b4:44:18:35:fb:95:48:
7b:a9:8a:7b:49:8a:a0:48:51:2f:f3:51:1d:57:3a:43:5c:ce:
ad:f5:d2:ae:4d:e1:fd:f2:6a:2d:55:f3:00:41:5a:35:64:33:
e6:99:76:a4:7c:14:5d:a5:a9:b2:6d:02:42:8d:c0:d8:65:c6:
ff:26:50:ff:28:2c:7c:c0:78:1f:1c:a8:47:0f:90:53:10:9f:
dd:14:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:32:15 2025 by rpki-client