Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
File: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=
Subject key identifier: CD:2D:13:C2:5A:72:F3:81:47:43:B7:CB:F8:37:5F:F9:0D:A4:D1:18
Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial: 4944A4326FAB165EA752D67C54C67294C8A7ED66
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
Signing time: Mon 01 Jul 2024 01:04:30 +0000
ROA not before: Mon 01 Jul 2024 00:59:30 +0000
ROA not after: Mon 30 Jun 2025 01:04:30 +0000
asID: 58369
IP address blocks: 103.140.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:44:a4:32:6f:ab:16:5e:a7:52:d6:7c:54:c6:72:94:c8:a7:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Validity
Not Before: Jul 1 00:59:30 2024 GMT
Not After : Jun 30 01:04:30 2025 GMT
Subject: CN=CD2D13C25A72F3814743B7CBF8375FF90DA4D118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:7c:19:ea:f7:04:d6:54:86:57:41:4b:77:
a7:87:5a:00:67:08:19:26:4d:29:18:fc:e3:23:64:
f0:71:9f:15:79:ba:b6:31:96:e4:5d:e2:69:1c:a1:
fe:8c:d3:51:6e:be:23:a2:ab:f7:cb:f9:22:06:a7:
9b:86:8d:1c:fc:ad:c6:d8:2a:98:d6:70:cc:64:d1:
86:17:16:f3:31:95:b5:7f:e2:ef:d3:05:42:5d:05:
93:86:7f:86:fe:0f:b1:bc:cf:c8:b3:e6:aa:49:d3:
3e:67:9d:f3:9c:b8:2c:5a:e0:90:44:11:88:f5:1a:
4b:f8:2d:7e:c2:fc:79:37:e9:0b:67:60:09:29:5a:
a1:1b:2f:53:1b:30:98:fe:14:3c:fa:40:2d:97:0b:
79:27:e0:d7:19:0a:3f:ec:30:0f:6b:b5:55:5c:9b:
d8:ed:6c:a5:47:fa:20:aa:ae:3d:cc:50:d1:8e:86:
ef:01:92:51:61:06:97:9e:a2:69:d8:03:76:be:60:
3b:87:04:ea:dd:e2:e7:3f:c6:dd:11:b1:10:86:29:
a6:79:d1:1f:11:9d:5b:d4:3c:92:76:47:1e:56:65:
9b:e2:a5:a2:c5:88:e4:98:d5:a5:51:f3:17:15:00:
e9:da:32:87:f9:50:62:db:31:1b:0f:e2:d8:09:3e:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:13:C2:5A:72:F3:81:47:43:B7:CB:F8:37:5F:F9:0D:A4:D1:18
X509v3 Authority Key Identifier:
keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e1:8e:69:e0:c3:0e:bd:61:d5:68:35:26:2c:4b:76:19:4a:
fc:61:d0:14:81:a7:9a:09:7a:b0:1a:29:ea:0c:74:85:9d:68:
bb:b8:9e:73:7d:3c:93:2b:23:73:c5:3f:1a:b6:4f:40:ae:77:
91:45:bf:d5:cd:39:b9:b4:8c:86:2a:24:ee:6e:2c:16:c1:8c:
74:b0:f9:10:c8:0f:6c:e7:f9:ef:4b:d9:84:4d:af:48:eb:c6:
39:fe:16:3c:b8:de:3c:b1:c5:eb:e7:11:57:88:99:8e:0d:2c:
6f:1b:22:b5:ae:d8:ec:59:46:a5:a3:0f:17:7d:51:89:a4:61:
3c:d9:47:83:de:56:69:d2:b4:92:b6:9c:4a:80:0f:d5:2c:8b:
b8:c1:9e:c2:ac:18:98:a5:4d:7a:c8:44:1a:99:9c:7f:a4:02:
cf:11:5b:f7:ae:23:b3:e5:5e:b9:60:43:cd:a2:50:94:69:92:
9d:a2:43:55:ef:ff:77:d6:fe:66:f3:cd:d1:b8:08:cb:12:b2:
70:b7:01:a7:94:aa:eb:e8:73:44:52:cb:44:20:bd:2c:85:3e:
ed:00:be:df:42:7f:fa:59:db:6f:34:05:21:3d:cd:be:32:0c:
34:00:d8:93:48:d4:f5:e9:d8:7a:16:24:5c:23:d3:b7:50:ed:
5a:43:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:51 2025 by rpki-client