Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa
File: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (raw, json)
Hash identifier: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=
Subject key identifier: EB:DA:95:CD:70:C3:9F:1C:49:FE:79:E1:8D:6D:94:79:74:47:65:C6
Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Certificate serial: 570A8899E3D101193E02E4BAC2856A57FEB04B16
Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa
Signing time: Wed 04 Dec 2024 15:00:00 +0000
ROA not before: Wed 04 Dec 2024 14:55:00 +0000
ROA not after: Wed 03 Dec 2025 15:00:00 +0000
asID: 149949
IP address blocks: 103.187.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0a:88:99:e3:d1:01:19:3e:02:e4:ba:c2:85:6a:57:fe:b0:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Validity
Not Before: Dec 4 14:55:00 2024 GMT
Not After : Dec 3 15:00:00 2025 GMT
Subject: CN=EBDA95CD70C39F1C49FE79E18D6D9479744765C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:ec:97:9d:cb:ce:62:1c:a2:e0:85:81:d7:
9b:dc:28:20:48:d0:e3:39:28:3e:f7:6f:a7:ab:32:
f7:55:29:92:81:d9:a3:e3:52:0e:7d:d8:e9:fa:88:
0f:81:c6:36:d7:56:d3:1f:a3:8c:b6:95:af:7e:83:
98:91:25:0a:f4:33:0a:02:f6:7f:91:19:bc:f1:87:
ae:ed:e5:97:b1:ba:eb:4f:70:f2:36:13:76:50:55:
b1:17:0c:b6:cf:3e:96:21:66:a4:f6:42:33:7b:36:
e6:be:86:e6:45:9c:3a:42:1d:81:1b:ca:a3:33:d2:
48:bf:a2:a2:56:17:d3:71:f5:6f:ea:02:10:67:19:
82:af:7f:c3:18:d6:4b:2f:d9:2a:0e:8c:21:63:a0:
c7:3b:b0:6d:1a:9a:ec:53:a8:be:9b:29:34:87:b7:
26:3d:0f:3f:df:92:2c:e2:ff:1a:8b:50:c8:24:24:
c4:89:68:6c:18:6a:8a:05:07:6d:0d:9f:c2:e1:51:
f2:67:7f:37:26:b3:37:1e:af:c2:7c:8a:44:64:d5:
52:2a:18:91:40:15:57:60:e8:e8:15:bc:aa:6a:70:
ed:3a:40:2e:b4:ad:b0:44:75:7c:05:81:ce:d7:48:
12:c8:0c:cb:e0:c8:13:4b:40:0b:a7:c0:0b:d4:9d:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:95:CD:70:C3:9F:1C:49:FE:79:E1:8D:6D:94:79:74:47:65:C6
X509v3 Authority Key Identifier:
keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.88.0/23
Signature Algorithm: sha256WithRSAEncryption
47:5d:95:14:36:98:28:80:81:95:ef:91:32:46:8e:59:9f:3c:
84:b7:37:bc:5f:b7:00:7c:8a:46:c2:93:20:27:94:21:6b:93:
fc:49:49:67:90:48:18:3c:23:c4:7f:84:c4:c8:7c:28:b7:a7:
e6:34:58:d6:c0:ba:d9:54:0a:81:5f:ba:6f:ab:bb:30:11:85:
f5:03:ec:55:60:8e:4c:70:f9:a4:e4:e3:3f:ac:21:34:10:5f:
2f:69:48:70:d9:2b:e6:71:51:e6:38:06:cc:5b:11:ad:c8:b6:
b0:a3:62:1c:7a:fc:72:d5:9b:38:3c:b0:34:63:89:9f:fc:66:
d2:9e:29:95:e1:40:f7:6c:56:24:02:58:d5:87:f9:70:72:b3:
04:e8:2d:88:aa:63:86:7a:b5:a6:8a:f1:ce:26:14:aa:ce:fb:
c0:ea:90:20:a7:85:f6:b5:70:db:f3:01:09:f5:48:0a:88:10:
27:bf:3d:50:9e:78:93:b2:b5:14:f6:57:43:ca:94:fd:6e:42:
90:78:bd:55:69:6a:23:65:b9:7f:e3:9d:3f:41:a8:09:26:46:
97:8b:61:52:5a:dd:0f:f0:12:0d:6f:d6:31:97:99:fe:c3:8e:
09:84:fb:8a:bc:9f:bc:d5:ba:b1:39:2f:c1:09:0c:5d:f8:b1:
57:f0:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:19:49 2025 by rpki-client