Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa
File: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (raw, json)
Hash identifier: g9jFrOfBeKGOtAqjJ9uVuWkc/5vTF7nGD5l4sFSL5w4=
Subject key identifier: 1A:E2:50:E9:21:FA:EC:B6:BC:D5:12:38:35:E6:2A:B3:32:DC:33:CF
Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
Certificate serial: 1EFDBD9863B4FC2CD8D94D120C29B9DF1B95F166
Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa
Signing time: Thu 28 Nov 2024 09:15:44 +0000
ROA not before: Thu 28 Nov 2024 09:10:44 +0000
ROA not after: Thu 27 Nov 2025 09:15:44 +0000
asID: 142385
IP address blocks: 103.172.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fd:bd:98:63:b4:fc:2c:d8:d9:4d:12:0c:29:b9:df:1b:95:f1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
Validity
Not Before: Nov 28 09:10:44 2024 GMT
Not After : Nov 27 09:15:44 2025 GMT
Subject: CN=1AE250E921FAECB6BCD5123835E62AB332DC33CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:d0:1a:78:24:ce:2b:dc:e4:3c:8f:ac:5a:
20:de:ed:95:0d:20:a1:c8:22:55:fc:40:b0:e4:54:
81:67:98:7d:33:1a:85:dd:e6:be:15:9e:4f:60:af:
d4:73:a8:f5:64:ff:75:a8:a4:5a:18:98:fc:0e:11:
f4:ed:0d:45:4d:c5:a1:2b:44:a4:43:0e:22:6e:97:
1e:35:8f:a3:d0:7c:52:b5:6e:a0:c8:2d:95:95:71:
5e:d3:44:5e:71:55:bf:18:43:5b:fc:5c:e3:fb:80:
16:09:16:52:67:f2:5b:7c:b6:65:48:e2:a0:64:81:
52:8d:9a:c2:67:01:64:58:c8:cd:87:a1:04:65:9f:
aa:5d:17:7b:83:39:5a:e6:fe:8f:c9:da:f3:79:77:
31:21:b1:8a:6e:8a:7d:11:2a:6f:85:92:b0:e4:46:
44:9c:e0:c4:dc:90:e4:bd:ad:2d:ef:b6:c4:8b:3a:
93:1b:1e:4e:60:a6:3b:6f:b1:ae:c4:9b:6a:0c:46:
84:a6:7e:12:e4:e7:73:30:8f:9e:be:32:cb:b9:b4:
a0:c0:ea:e6:e3:73:a1:a5:87:0c:84:43:04:f0:02:
7d:02:b3:e5:77:ee:a5:a8:cc:2e:ef:81:ec:3e:15:
1a:3a:47:f9:8b:87:97:18:f4:87:0a:de:b1:61:a4:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:50:E9:21:FA:EC:B6:BC:D5:12:38:35:E6:2A:B3:32:DC:33:CF
X509v3 Authority Key Identifier:
keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:36:f6:55:36:86:bf:3e:e2:36:3f:9d:22:41:3c:62:aa:85:
74:bb:66:c2:42:dc:f7:58:41:88:da:a1:41:cc:8b:75:78:65:
e2:d8:73:f7:78:84:36:50:ec:7e:82:88:bf:e0:b1:bc:53:c9:
08:5f:1c:43:d3:83:28:5f:86:b1:fa:53:46:26:bc:9d:65:bd:
90:94:57:f7:3b:28:6c:86:e9:b7:b1:b5:03:60:51:71:aa:28:
90:c8:12:f9:2e:2e:6d:84:a6:75:61:14:fe:64:3b:97:46:f3:
20:f7:e2:d5:bc:68:4f:ab:38:d3:40:7a:a1:07:e1:9e:9c:91:
d3:b9:40:01:b1:f0:06:34:4f:25:f6:11:8e:08:65:40:be:75:
25:96:c1:37:c5:ac:81:ef:2a:93:07:57:d7:6e:00:37:b5:23:
21:a5:83:b0:82:a1:05:d4:f1:4c:27:4c:a1:fa:84:68:5b:01:
0a:21:14:d0:f6:3e:65:eb:92:3b:f2:7d:16:19:32:16:27:c6:
fa:43:17:85:f9:42:55:46:cd:1b:0b:4f:26:40:da:50:0d:88:
ff:79:f3:c9:34:fe:ad:9b:8f:10:72:d6:8d:ec:38:43:21:6f:
3c:7e:ab:a8:ea:e1:3b:1d:bb:03:1a:9a:b9:e2:3c:01:8a:45:
1a:db:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:53:47 2025 by rpki-client