Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa
File: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (raw, json)
Hash identifier: 7c0oxWUcWrc0bY5Y4LEP80Omnz/N3eepsbAvQpH2nOc=
Subject key identifier: F0:39:09:DA:49:19:CB:48:CD:A8:57:18:A7:4B:34:3A:2C:83:09:0B
Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
Certificate serial: 1CA5677D9041AE101B5AE6ECC6CAF84980B96285
Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa
Signing time: Mon 01 Jul 2024 01:06:03 +0000
ROA not before: Mon 01 Jul 2024 01:01:03 +0000
ROA not after: Mon 30 Jun 2025 01:06:03 +0000
asID: 46056
IP address blocks: 103.245.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a5:67:7d:90:41:ae:10:1b:5a:e6:ec:c6:ca:f8:49:80:b9:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
Validity
Not Before: Jul 1 01:01:03 2024 GMT
Not After : Jun 30 01:06:03 2025 GMT
Subject: CN=F03909DA4919CB48CDA85718A74B343A2C83090B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:b4:a8:8d:e4:57:c5:5a:45:53:95:0e:59:
7a:2b:ee:95:d7:ef:8b:0a:58:d9:c6:bd:ac:2c:d0:
aa:bf:1b:34:fe:96:31:1a:b5:d1:5c:8a:9d:8e:a1:
5a:a7:24:0f:97:17:62:dd:86:83:8b:3b:a4:af:19:
89:43:47:ba:4d:0f:7c:2d:da:e0:5f:39:8e:8c:aa:
bd:4c:18:29:92:cb:f7:41:35:87:6a:42:a3:69:34:
34:ac:ef:c0:6b:83:13:c2:1f:5a:60:eb:db:e4:13:
6d:62:bd:e4:c6:27:8e:2d:99:ce:b4:fc:79:bc:82:
1b:c9:e1:fc:ef:d1:07:b8:5b:ce:52:89:2c:62:f2:
0e:e6:1a:01:6b:85:99:34:d4:0e:07:c8:e0:b5:82:
98:13:5e:84:17:18:52:87:1d:f5:fa:69:ff:1a:72:
47:a2:9d:1b:f9:0d:cd:68:0f:fc:e7:8b:89:68:40:
b3:a6:c2:bc:ea:64:95:51:1b:60:f4:d8:10:0f:9a:
6b:99:d2:d5:d8:84:72:fb:49:c0:95:3b:97:7c:21:
3a:60:07:e5:ee:06:01:a6:24:0c:60:70:10:b9:b9:
77:95:69:c4:07:0b:9e:62:e1:84:3e:8b:50:c4:f0:
ff:0b:ba:ef:7a:e4:c7:fa:46:f7:16:7b:23:2e:55:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:09:DA:49:19:CB:48:CD:A8:57:18:A7:4B:34:3A:2C:83:09:0B
X509v3 Authority Key Identifier:
keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.122.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b7:05:bb:86:58:6d:e0:da:81:9a:d1:94:69:78:ad:a5:2c:
f7:a8:c0:d4:ea:15:08:f2:cb:85:25:3d:9b:2e:8f:39:bc:dc:
41:db:09:e0:d7:28:1a:6f:cd:9f:a3:f4:a5:86:09:ad:fe:2a:
08:1e:e9:a9:72:83:d9:fa:b2:76:93:95:1e:a1:12:e9:fb:6e:
f4:1e:8d:2b:8f:3f:d2:f9:a5:d5:b8:cc:4b:bb:7e:09:67:91:
04:6b:26:39:3c:0a:63:c5:b4:b0:ec:93:0f:a7:c4:9a:11:21:
5a:52:b4:62:44:5a:17:3c:67:73:2b:8a:71:ed:68:ac:ea:82:
42:e1:6c:c2:c7:e8:7c:16:b0:bf:be:03:cb:cd:ba:15:59:83:
98:3e:93:9b:dc:e7:63:0c:f9:58:77:d9:14:73:05:7c:88:5a:
7f:a3:17:ca:b2:37:71:16:e6:24:01:9a:55:b3:10:91:c9:a9:
19:85:5b:26:1c:0a:ba:45:d5:33:02:ab:8d:c0:c9:fa:2d:15:
e7:b2:c2:1d:07:05:97:59:69:6f:b1:43:52:51:e6:ab:31:47:
b7:2c:e9:d0:14:26:b1:98:f2:85:8d:6f:c9:c6:77:13:5c:62:
0b:b1:e8:90:fc:77:0b:f7:22:d9:31:01:db:ad:48:33:3d:e3:
91:8c:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:27 2025 by rpki-client