Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa
File: 3130332e33312e34372e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier: ZiffExjJdf1Oi7LaO1i5/Mcq9HBR1Bh05aRgjUu/YCg=
Subject key identifier: C8:92:35:FC:64:33:7A:BC:EE:75:4A:9F:FB:75:DB:28:4B:E9:96:91
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 15E01905B3204AD607EDE8070B754AA4524C746E
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa
Signing time: Fri 23 Aug 2024 06:00:04 +0000
ROA not before: Fri 23 Aug 2024 05:55:04 +0000
ROA not after: Fri 22 Aug 2025 06:00:04 +0000
asID: 138841
IP address blocks: 103.31.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:19:05:b3:20:4a:d6:07:ed:e8:07:0b:75:4a:a4:52:4c:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:04 2024 GMT
Not After : Aug 22 06:00:04 2025 GMT
Subject: CN=C89235FC64337ABCEE754A9FFB75DB284BE99691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f4:0b:92:a9:5f:3a:12:79:88:21:12:68:63:
0c:14:07:66:a6:a2:a2:83:44:88:e8:11:b5:80:44:
77:59:6d:b5:ef:de:e3:10:bc:7a:b2:ab:35:e2:fc:
2f:a3:52:d3:14:91:26:45:e9:ab:20:7a:3c:96:05:
9a:cc:71:47:9b:f5:56:13:8d:c2:d0:18:8a:51:99:
4f:b8:85:28:8d:3c:4f:4b:41:32:75:76:df:8f:db:
23:59:71:45:f3:b3:6b:b8:86:02:d0:09:b5:ab:74:
d9:ac:07:75:b3:40:76:ba:d0:a6:44:76:89:b7:d8:
56:8c:59:6c:e6:72:1a:ff:a8:e7:f5:26:61:16:9e:
15:30:90:73:f5:a9:5e:58:12:39:7e:f1:88:d1:f8:
31:03:0b:eb:15:f4:1c:66:5c:81:c0:18:46:f3:0d:
9f:89:72:16:ac:39:19:24:af:12:9b:c6:47:65:13:
6d:42:f7:8a:b2:44:3f:cf:39:f9:a0:cc:b6:39:74:
d4:8e:83:ee:72:3b:fd:eb:03:07:9b:37:be:ba:0f:
12:e2:da:e5:be:f3:da:bd:19:e9:82:dc:21:aa:5b:
8a:36:e5:9e:b7:a5:85:a6:58:c8:59:97:50:df:8b:
f0:ba:fc:41:25:0f:5d:4f:58:26:5d:a4:81:23:c9:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:35:FC:64:33:7A:BC:EE:75:4A:9F:FB:75:DB:28:4B:E9:96:91
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.47.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9c:54:a0:c6:d6:b8:e9:0e:bd:a2:aa:db:42:25:67:32:66:
cc:c9:c7:b6:c2:5f:ba:c9:a9:12:c5:4f:8e:00:87:2f:99:fd:
0a:64:be:e4:37:6b:9c:3d:80:bc:57:1a:bb:31:19:c2:36:3a:
d3:09:b3:56:31:2b:05:0f:c4:3f:b1:0a:59:3d:c9:ef:ff:f4:
c6:17:8c:a9:b4:0f:10:00:e1:cb:d9:0f:6c:f6:ac:e3:ae:ca:
c7:b8:26:c5:13:4a:a6:f7:f8:bf:8a:15:3f:47:de:d6:35:33:
a3:a6:5e:af:83:0e:b4:f9:79:ad:0c:31:82:bd:ce:18:40:64:
2e:af:df:78:86:c3:2e:81:16:be:49:36:d0:7a:2c:fb:b2:c4:
f3:2e:7b:60:11:d6:49:f8:6f:88:a4:a0:79:e0:21:06:cb:bd:
71:fd:5b:7f:c4:a7:e0:07:f6:4f:4e:71:aa:b5:b8:72:f4:ae:
39:f1:10:50:fb:42:0d:28:a8:b4:9d:22:ce:5d:f0:0c:17:db:
2f:1c:cb:36:90:0f:e3:95:76:38:48:ba:1f:5d:12:da:f2:25:
e4:11:ca:f5:23:64:2f:6e:db:d4:20:5f:05:eb:4c:47:09:ff:
e5:2f:03:c5:f7:0c:b3:d6:f6:7d:7d:60:e4:9a:67:f0:68:87:
2b:b2:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:38 2025 by rpki-client