Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
File: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (raw, json)
Hash identifier: xk/oq0Im59/1PSqJezgmhIR9KNhuRTqxicwm+ExglFA=
Subject key identifier: B5:22:BB:81:A5:F6:8C:3C:79:48:48:DB:FF:4E:98:AB:2A:0F:32:23
Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial: 7559B390EA987E2830B15871D303FFD750762292
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
Signing time: Fri 28 Jun 2024 02:00:00 +0000
ROA not before: Fri 28 Jun 2024 01:55:00 +0000
ROA not after: Fri 27 Jun 2025 02:00:00 +0000
asID: 149891
IP address blocks: 103.190.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:59:b3:90:ea:98:7e:28:30:b1:58:71:d3:03:ff:d7:50:76:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Validity
Not Before: Jun 28 01:55:00 2024 GMT
Not After : Jun 27 02:00:00 2025 GMT
Subject: CN=B522BB81A5F68C3C794848DBFF4E98AB2A0F3223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:85:bc:53:57:5c:3e:f9:cc:39:ea:85:88:
b0:84:b2:ca:1c:7e:da:6a:c6:54:ad:dd:45:25:39:
a5:75:59:5e:15:ad:92:56:c0:5f:d0:c5:f8:3b:72:
6b:de:e0:d8:50:8f:86:b4:2d:83:56:95:10:da:39:
c0:14:0c:89:48:25:a1:4b:2e:4b:8b:6a:aa:cc:f8:
2a:c8:4c:04:57:73:df:75:25:d0:cb:a4:f2:b5:f2:
b5:2d:0d:7f:57:c6:3f:32:78:ab:b6:bc:fc:39:ca:
6a:29:08:7a:24:6d:94:73:47:d8:c1:55:13:f4:bc:
45:6b:03:a5:ed:02:7c:07:34:ae:5e:43:bb:08:73:
31:48:98:69:59:a3:f0:f7:d4:2c:4d:5b:a6:48:c9:
da:98:67:61:af:8f:86:d8:7c:de:df:1c:a1:50:3f:
e2:aa:6a:b8:05:b9:1e:88:d2:36:4a:eb:92:49:39:
f7:96:81:34:a5:a6:f8:ce:98:f5:11:48:fc:19:4d:
a3:b6:3e:77:8d:fb:61:7d:87:44:80:cb:c5:88:c8:
04:b8:46:2a:0e:4e:6c:d8:ae:85:07:f3:1c:82:82:
23:ff:d8:90:b9:6f:57:f4:e9:a1:5e:c4:47:b0:58:
ac:69:fd:a1:af:90:ec:31:73:11:28:bf:05:cf:bb:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:BB:81:A5:F6:8C:3C:79:48:48:DB:FF:4E:98:AB:2A:0F:32:23
X509v3 Authority Key Identifier:
keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5f:75:f4:7e:e1:6a:4b:3f:99:ca:81:23:d1:4e:3d:a1:e0:
7f:6a:b4:06:49:fd:7d:0d:fe:90:23:3f:b8:b1:8d:fc:f7:f4:
41:34:9a:ae:9c:e3:67:cf:29:ca:d4:df:91:c8:72:50:08:e5:
2e:09:6c:15:d2:04:04:33:f3:7d:9e:f4:c9:5d:39:39:2c:0a:
45:cc:c3:04:44:ee:98:7e:dd:48:6b:0d:92:5e:47:a6:2f:14:
d1:f8:61:88:3b:37:cf:b9:85:99:7e:ed:37:9c:d2:ad:82:ae:
cc:38:e5:08:d5:58:44:68:ef:74:7e:de:d2:45:4d:f5:6c:51:
1f:20:35:cc:79:37:01:62:ee:46:47:a0:f3:8c:a6:e6:d8:86:
65:97:07:fe:b3:47:ae:d2:a5:29:05:62:ec:8f:0a:34:06:0f:
72:5b:92:f7:1d:fc:a9:86:ce:54:55:2e:b2:4c:d9:e5:7d:0d:
3d:77:74:8a:90:d2:0d:cb:ac:d6:8d:42:dd:37:cf:a4:83:fc:
d6:f6:bc:9c:e5:78:8c:fe:18:c5:81:d9:ae:c1:aa:6f:18:9e:
69:f7:7a:5a:2d:8d:35:8f:89:e4:27:a6:37:e4:ad:a7:8d:e1:
8d:0c:c1:0b:ed:a0:82:d5:b9:0a:d9:4b:29:95:38:b6:df:87:
68:fb:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:09 2025 by rpki-client