Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa
File: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=
Subject key identifier: 1D:FA:AB:BB:E8:A5:32:F4:EB:C0:4F:9C:60:DE:C6:D5:44:F6:35:DD
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 1BBBE818E651E39749579D674A1F6CE54A41A1AB
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa
Signing time: Thu 05 Dec 2024 11:00:00 +0000
ROA not before: Thu 05 Dec 2024 10:55:00 +0000
ROA not after: Thu 04 Dec 2025 11:00:00 +0000
asID: 24534
IP address blocks: 103.42.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bb:e8:18:e6:51:e3:97:49:57:9d:67:4a:1f:6c:e5:4a:41:a1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Dec 5 10:55:00 2024 GMT
Not After : Dec 4 11:00:00 2025 GMT
Subject: CN=1DFAABBBE8A532F4EBC04F9C60DEC6D544F635DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:74:a4:4d:ed:5a:04:4e:c2:2f:88:84:b5:
83:36:5b:3a:a9:67:4b:94:1f:c8:82:08:a7:8c:ec:
70:6a:1c:b5:ad:e7:9e:47:be:31:e0:49:31:3f:c9:
a6:27:29:a5:b3:20:37:b7:e5:55:cb:19:c3:c7:9b:
59:47:f2:14:6c:0d:94:b8:82:46:79:95:50:49:d5:
8b:a1:34:dc:b0:a5:3e:96:8b:a3:56:d1:55:69:91:
5c:1d:01:3a:06:86:45:e0:5d:45:ec:4f:6c:35:ac:
db:c1:22:b4:a0:67:68:6d:02:ec:d3:69:08:72:45:
03:8a:59:60:8e:3c:3e:7b:c1:03:1d:c9:b9:c4:e4:
e2:70:f4:02:12:30:8c:03:6f:82:8d:fe:24:6a:34:
0c:cf:a4:ea:57:4d:c5:df:e7:bb:07:00:81:7d:19:
dd:b7:4f:f8:ae:2a:67:9b:09:c8:95:20:a0:dc:ef:
0b:33:86:ed:ee:11:19:5e:25:6f:a6:e8:ca:a2:57:
9b:b0:e4:15:b0:08:47:15:e4:6a:88:cc:1c:6b:a1:
1b:41:b4:a4:b2:ba:93:33:e8:da:a1:0a:03:09:a7:
3a:16:fb:d6:c1:c8:3f:49:f8:df:37:09:ad:1b:2c:
a6:4a:73:69:44:12:2c:ac:c7:c6:6e:12:e2:e8:a1:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FA:AB:BB:E8:A5:32:F4:EB:C0:4F:9C:60:DE:C6:D5:44:F6:35:DD
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:85:a4:18:dc:fa:ed:13:f5:81:84:49:94:3b:a9:ad:ea:f0:
42:91:fa:5e:eb:47:09:ce:97:2d:40:23:2c:dd:47:49:77:05:
55:fd:60:2b:dc:38:03:69:87:92:b1:f5:46:21:2e:93:86:cc:
e9:37:83:01:6d:d6:85:39:90:3c:da:06:60:e7:40:99:53:40:
97:3a:c7:37:d8:a0:9c:c5:24:60:af:90:e4:63:6d:27:1a:b8:
d2:4a:69:cd:90:e9:94:8f:7e:b6:8d:6f:05:ad:97:46:bf:75:
de:86:31:a2:e1:fe:bf:e8:5d:96:29:02:44:86:26:79:75:e4:
73:1a:78:b2:aa:28:f3:41:cd:35:03:cc:34:7a:e1:b5:c4:41:
a2:bf:e0:16:2d:68:2e:0f:27:98:20:1b:c2:8f:01:ce:e9:46:
48:0c:18:3d:07:e2:1e:56:2c:b3:1d:81:35:39:36:cb:62:54:
78:3c:21:60:f0:75:34:61:10:4b:30:1d:8a:4f:e0:ba:60:4a:
7f:83:f3:22:0d:da:a5:64:cf:f5:7c:3b:a3:3f:7f:33:6e:46:
5d:fc:01:cd:5d:45:3b:63:76:c7:e9:d7:83:2d:3c:fd:85:b0:
ee:6c:bc:5a:08:39:ed:4e:f2:9a:96:f9:f2:8f:96:2f:63:d3:
7d:d5:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:38 2025 by rpki-client