Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
File: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (raw, json)
Hash identifier: iXlr6ynCJTWhRXgxuJ3jQPCoK8YD+Mi69YQAcWlh+5g=
Subject key identifier: 98:07:DE:08:80:DE:B7:09:F2:BB:38:3C:B5:0B:30:A4:6E:5A:D7:89
Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
Certificate serial: 5AA9EE1F6A80F7921AC2016F63DA04DEEC7DB824
Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
Signing time: Tue 17 Dec 2024 12:36:51 +0000
ROA not before: Tue 17 Dec 2024 12:31:51 +0000
ROA not after: Tue 16 Dec 2025 12:36:51 +0000
asID: 142309
IP address blocks: 103.152.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a9:ee:1f:6a:80:f7:92:1a:c2:01:6f:63:da:04:de:ec:7d:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
Validity
Not Before: Dec 17 12:31:51 2024 GMT
Not After : Dec 16 12:36:51 2025 GMT
Subject: CN=9807DE0880DEB709F2BB383CB50B30A46E5AD789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:49:8d:51:a9:d2:49:f2:a5:ee:c0:4f:61:
04:0c:de:88:ba:c7:f6:20:cc:5e:15:78:4d:d7:8d:
fe:44:9b:85:cd:20:52:9c:37:67:70:3b:8c:8b:7a:
fe:da:d8:a1:f7:ba:7c:22:89:3b:ec:b1:de:a0:3d:
e8:0b:d7:d5:84:01:2a:22:af:44:71:c1:d3:87:65:
bc:3e:6d:ec:91:26:21:4b:bf:27:98:e1:d3:22:91:
64:f3:fb:23:02:0a:85:61:b8:e4:73:37:a8:dd:9c:
2f:f5:72:93:f9:bf:e2:64:51:4a:7e:26:0d:23:26:
ad:2b:e2:99:c8:7d:08:3f:41:48:a6:26:30:84:31:
8c:36:83:93:97:4a:c5:a5:66:4b:8d:6a:66:96:41:
d6:dd:44:02:c6:f5:c6:1c:a2:7b:fe:14:d0:c2:fb:
e7:1d:0a:a7:23:79:1c:f2:34:56:95:d4:1a:15:a2:
2a:85:f2:17:18:69:96:0f:76:08:54:25:35:7b:6d:
ab:43:08:62:a0:f1:82:3e:dd:ef:18:4d:df:aa:61:
69:de:70:97:ab:2f:cb:08:39:c4:63:25:84:0b:90:
94:ae:90:5e:a6:b1:1b:a9:34:db:19:76:13:d3:a0:
82:ba:9c:14:0b:61:cf:63:54:11:d3:6b:0f:7a:04:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:DE:08:80:DE:B7:09:F2:BB:38:3C:B5:0B:30:A4:6E:5A:D7:89
X509v3 Authority Key Identifier:
keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5b:56:19:d8:b1:fe:f5:de:7f:45:4a:c7:87:9a:ed:74:11:
d8:ab:45:83:e8:1a:ca:40:96:c2:00:b8:dc:05:6b:57:ed:08:
0c:ae:b3:a7:b0:6d:dc:40:79:63:85:92:88:a8:4c:5a:90:57:
82:08:d5:ef:7b:e6:cb:a8:1f:e5:d0:f8:14:f8:4c:60:f6:06:
f1:9c:63:86:b4:e4:02:63:06:f4:81:30:f9:a0:09:f8:de:50:
25:29:0f:7e:f0:7e:13:73:08:cd:05:c8:15:fe:77:ac:30:1b:
2f:49:58:c5:22:a3:05:32:4d:18:3a:a4:23:45:e0:08:78:bf:
20:3b:ae:77:99:9b:03:1a:07:25:a6:bc:3d:a2:4c:29:93:09:
c9:56:aa:e8:2d:38:85:5b:b6:69:11:ec:0e:64:51:97:57:8a:
0f:a3:26:fe:c2:9d:67:4a:db:6e:10:22:1a:d0:42:2b:c0:9e:
fe:de:40:39:39:41:8d:ca:e1:55:14:3f:80:46:e0:bb:7d:27:
6e:36:d1:9b:01:58:ef:67:66:6b:c3:b7:0b:95:3d:b5:ba:7a:
91:d9:94:67:19:d6:ba:01:19:57:04:f8:ed:57:02:85:08:aa:
4e:b0:ae:fe:2c:f0:ee:0d:79:c5:a5:37:01:b3:4e:e0:f6:df:
07:4a:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:26 2025 by rpki-client