Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa
File: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=
Subject key identifier: B4:A0:07:95:71:75:D7:EB:27:A1:01:E5:B6:54:C4:5B:2D:E5:56:6E
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 0A134A96631DA9AE2F7236E061EC66444462BA0F
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa
Signing time: Mon 01 Jul 2024 01:02:28 +0000
ROA not before: Mon 01 Jul 2024 00:57:28 +0000
ROA not after: Mon 30 Jun 2025 01:02:28 +0000
asID: 46026
IP address blocks: 103.135.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:13:4a:96:63:1d:a9:ae:2f:72:36:e0:61:ec:66:44:44:62:ba:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Jul 1 00:57:28 2024 GMT
Not After : Jun 30 01:02:28 2025 GMT
Subject: CN=B4A007957175D7EB27A101E5B654C45B2DE5566E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:f2:91:45:52:9f:2b:eb:1d:d9:b3:20:79:
aa:d9:41:13:85:53:2f:8c:ca:dd:1e:f4:9d:d0:39:
fa:f1:cf:f3:82:d0:d5:c1:24:73:4d:e6:0e:62:81:
bb:eb:88:ca:4f:5f:77:94:80:a7:89:87:c4:62:f1:
5a:8d:61:d4:a1:5e:35:ae:42:0c:be:26:19:43:2a:
f3:ea:61:97:bf:4d:14:d4:17:22:33:0f:14:2e:d2:
66:db:c6:f7:78:69:84:ea:bc:ff:a7:da:69:e7:71:
f7:28:de:1c:58:d9:06:65:74:92:03:3d:b6:70:0d:
49:68:d0:88:40:f4:c4:7e:cf:51:e4:85:4f:e5:9a:
55:ed:e2:d6:ae:0a:fa:f8:fe:fc:31:ac:12:b6:00:
0f:94:b9:fa:3b:b0:ac:2e:f9:15:81:57:e2:7f:29:
79:07:43:a9:be:48:f7:36:c5:52:af:18:3c:52:cc:
03:22:f9:22:81:c4:c6:c3:b1:9d:42:4b:b4:76:7b:
4c:da:03:02:d6:9c:6a:cf:07:30:95:62:bf:67:be:
e3:e6:c0:b2:d2:f1:f6:fc:25:f1:13:37:0a:77:ff:
bd:7f:67:d2:88:a7:29:eb:ee:f5:7a:8a:24:7e:ee:
a6:52:f9:c5:7e:17:48:89:9f:0c:08:74:c6:d1:0e:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:07:95:71:75:D7:EB:27:A1:01:E5:B6:54:C4:5B:2D:E5:56:6E
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:b2:fa:09:ee:4b:44:5a:ad:79:c3:5c:a7:d1:16:20:d0:
ac:81:ab:a2:f1:f6:66:d3:39:99:59:45:85:bb:eb:74:2b:c6:
11:61:f2:9d:0e:7c:cc:49:01:65:96:36:7e:89:4a:8c:99:41:
46:0c:6a:75:e8:4b:45:be:06:88:7f:c9:2d:18:87:43:c5:d8:
54:08:c8:76:9a:f0:3e:d8:5e:6f:5b:a3:79:cd:4c:42:a4:b8:
35:32:fb:14:36:01:6a:5c:63:08:ae:cb:2a:f4:4b:65:9d:ea:
ce:49:6e:3b:f3:2d:63:ea:ac:3e:a8:af:c2:eb:e8:2d:a0:1f:
37:66:a8:dd:df:57:39:dd:df:76:8e:f2:02:bd:fc:37:1d:c8:
e1:2d:96:d3:17:f1:72:b6:02:1b:9c:bf:1c:a4:5c:e7:2f:19:
7e:84:7e:4b:dc:61:ad:24:51:5f:43:2b:4a:d0:7f:52:b7:b3:
70:ee:18:7e:3a:13:6f:73:fa:5d:2d:19:71:7b:78:a7:9c:ac:
08:70:11:f3:2e:8d:de:ab:e2:64:1a:07:c1:46:c9:a1:55:50:
81:2a:d0:3b:99:22:75:99:54:26:c8:a9:55:a7:65:13:b9:0d:
1c:fc:e1:f4:bc:1f:b5:59:14:ec:c0:71:9c:d3:73:a4:e5:f0:
42:47:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:13 2025 by rpki-client