Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa
File: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (raw, json)
Hash identifier: slhG6aE/lNA4aRVSDQs/dfGcG5yIePIerNTIUaHIm2A=
Subject key identifier: 53:CB:E5:F1:4D:E1:43:9E:B8:37:ED:D2:37:4C:78:70:3D:21:45:CE
Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48
Certificate serial: 1722537B8BBEB158AD20CBFFFC4A9B0C1FD0AC60
Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa
Signing time: Mon 01 Jul 2024 01:02:35 +0000
ROA not before: Mon 01 Jul 2024 00:57:35 +0000
ROA not after: Mon 30 Jun 2025 01:02:35 +0000
asID: 139967
IP address blocks: 103.146.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:22:53:7b:8b:be:b1:58:ad:20:cb:ff:fc:4a:9b:0c:1f:d0:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48
Validity
Not Before: Jul 1 00:57:35 2024 GMT
Not After : Jun 30 01:02:35 2025 GMT
Subject: CN=53CBE5F14DE1439EB837EDD2374C78703D2145CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:32:8a:5a:f5:78:35:df:b8:1d:aa:97:83:
ef:fa:dd:61:3d:00:5a:98:09:4a:31:48:07:41:b0:
bd:2e:55:3c:eb:be:17:2b:a5:09:7c:79:de:de:be:
73:44:0b:6b:8b:54:11:9a:88:d2:c3:0d:28:c7:9a:
7c:b2:8e:4d:09:da:06:57:20:06:1a:44:41:19:76:
1c:44:d2:3a:f2:63:a8:76:83:71:7f:b7:53:cb:c3:
01:c4:94:8a:5f:d3:93:3c:f3:8b:9b:0b:67:20:2b:
4a:cf:81:58:01:a9:3c:39:26:ee:f4:52:40:0a:ee:
d9:4a:4d:5d:84:9c:40:58:84:ca:4c:ca:4e:77:cd:
b4:55:48:5e:1f:ce:6e:2b:87:15:1b:ff:ba:f8:1e:
07:fa:67:64:35:ea:ac:fd:ea:5c:c2:a8:e0:43:d4:
82:2d:0c:a3:9d:6c:b5:65:d0:1b:d9:94:49:a0:7a:
5d:89:eb:85:cb:53:6c:45:f0:48:15:38:8f:ca:aa:
81:d0:bf:f9:77:37:b8:c5:ab:b3:ad:40:28:00:17:
90:86:17:5c:4e:d0:58:32:fc:3a:27:e3:ef:53:23:
a1:d1:97:84:55:fd:03:0b:d8:df:6e:e5:82:18:b9:
ba:10:45:f0:48:bc:d2:71:26:67:26:bf:16:a2:e4:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:E5:F1:4D:E1:43:9E:B8:37:ED:D2:37:4C:78:70:3D:21:45:CE
X509v3 Authority Key Identifier:
keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:6d:b9:49:f4:3e:38:82:21:c9:57:82:ac:05:f9:16:fb:5e:
01:63:41:3a:b9:62:67:0e:54:14:2b:10:8a:90:91:03:12:5a:
a8:66:9f:2e:b1:8d:80:90:73:a3:a1:c5:cb:19:2e:58:46:f3:
d9:e9:ce:0a:97:14:58:67:9c:7e:7b:8a:98:0c:86:16:cd:57:
67:64:e4:71:50:7d:be:ab:34:ca:f6:81:6a:1c:8e:f0:60:f2:
89:74:15:28:2f:69:b6:6f:bb:bc:c8:c0:fb:7a:50:ba:4a:04:
a7:9a:7e:09:84:29:a6:c3:72:e3:f8:b3:8d:02:7f:18:3f:22:
16:5a:b7:86:6d:10:af:01:9a:97:58:78:15:da:7e:00:90:1c:
66:f8:21:d8:29:bc:8a:b2:43:a5:cc:52:4e:19:d8:3c:7a:a1:
25:65:6e:7b:02:bf:91:a9:c3:82:3c:da:30:e7:49:c4:3e:a0:
3b:7c:60:9a:61:0f:b3:43:bc:a7:78:38:95:60:77:30:b9:d0:
43:8a:32:fd:3b:c7:79:8e:03:bd:5c:b5:47:d6:ab:f3:92:6d:
c2:b6:0e:7e:8e:29:11:cf:5a:5a:fb:9f:6f:f4:20:23:85:bf:
6e:d0:7d:31:6f:b7:66:01:e2:30:7d:3c:17:76:b7:02:35:f8:
b6:1b:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:01 2025 by rpki-client