Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3233203d3e203538333831.roa
File: 3130332e32302e39302e302f32332d3233203d3e203538333831.roa (raw, json)
Hash identifier: 9AU/iTBWkmvTHdydkpN78mXc2neVi/vx9xf62+vNnIY=
Subject key identifier: F0:7D:56:02:2C:11:89:E7:1B:4F:A7:1C:62:DF:77:DD:9D:B3:0B:68
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 7CE9B392C06B2E99CF048666855378A68E345684
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3233203d3e203538333831.roa
Signing time: Wed 31 May 2023 15:57:44 +0000
ROA not before: Wed 31 May 2023 15:52:44 +0000
ROA not after: Wed 29 May 2024 15:57:44 +0000
asID: 58381
IP address blocks: 103.20.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e9:b3:92:c0:6b:2e:99:cf:04:86:66:85:53:78:a6:8e:34:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: May 31 15:52:44 2023 GMT
Not After : May 29 15:57:44 2024 GMT
Subject: CN=F07D56022C1189E71B4FA71C62DF77DD9DB30B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:d2:35:ff:d9:7c:29:6b:88:e9:4d:40:ac:
ad:70:d9:e0:79:87:3d:ae:52:ee:59:8e:43:77:f4:
94:93:b6:2e:43:f8:76:96:0c:c3:2a:80:8c:c5:c4:
38:91:ab:a4:e3:a1:81:58:9b:4f:b6:4d:37:40:05:
00:9b:e1:6b:19:71:90:e8:64:e1:55:40:d3:f9:19:
ab:a6:15:43:f4:fa:40:65:e1:d5:97:e8:c6:22:a1:
16:f3:51:b3:a5:43:0a:54:7a:75:51:08:05:d7:ea:
85:c8:37:e0:0c:03:63:bb:eb:f2:22:dc:76:4b:5f:
a7:16:3e:b6:1d:8e:5f:bf:9c:66:e6:41:c0:ce:1d:
b5:ff:74:6f:54:0f:e5:3f:a6:60:3c:88:11:9f:c5:
ab:c4:79:35:9d:82:1f:de:e1:b3:52:f4:ac:1d:0e:
f9:d5:48:1f:71:7c:f4:d2:c0:24:67:e3:b4:7a:19:
19:14:dd:31:f0:2b:2c:79:b5:a3:a1:82:1f:44:9f:
7d:87:cc:d8:ea:ff:50:90:34:db:d5:94:95:a6:29:
fa:92:56:9d:77:da:1f:e2:4c:e7:b5:fe:1f:b2:ba:
25:5e:02:b9:7b:04:9d:c3:f2:54:0a:48:d2:a8:ec:
b1:50:b2:83:67:f3:7d:fd:a9:81:26:42:e4:21:ee:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7D:56:02:2C:11:89:E7:1B:4F:A7:1C:62:DF:77:DD:9D:B3:0B:68
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3233203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.90.0/23
Signature Algorithm: sha256WithRSAEncryption
49:97:d9:1c:4b:52:16:58:a0:5d:e2:4b:90:67:c5:42:67:f8:
19:6c:bf:dd:f2:25:55:93:03:03:75:d7:e0:9f:98:16:31:40:
6d:2f:7b:c1:fb:23:db:b7:e9:18:e5:db:cf:ff:d4:2f:55:89:
17:18:5b:d0:c5:4b:75:08:d9:28:78:49:68:52:5b:3d:8e:5c:
9f:b0:85:8e:0f:6e:f0:64:43:2b:77:93:ce:cf:b4:91:77:14:
6f:d0:cc:20:c5:d2:ea:76:be:71:7d:a7:1b:84:15:e1:e7:9a:
6e:85:e2:48:b0:4a:a5:a2:a2:7e:d5:b5:67:9c:8c:7e:ca:73:
49:c6:c2:07:37:6a:c5:c3:5f:c5:9b:52:9a:4d:9d:5c:f0:22:
b8:28:1d:1e:67:41:5d:03:45:ec:bc:d3:0b:6f:c1:a9:2a:65:
8a:e3:af:dd:b2:5c:13:60:42:6d:f4:da:23:67:93:17:44:65:
5f:04:e8:c4:e5:4e:0a:b2:0c:94:0b:f2:44:6d:e9:9c:58:ad:
bb:f9:e1:b3:1c:ff:ff:99:0c:9f:73:f9:d3:d4:c0:cb:2d:77:
cd:b7:66:55:71:76:7c:b6:39:b6:1c:d8:d6:10:9f:b7:75:26:
59:a6:54:db:49:49:d2:67:2b:04:09:c6:0c:e6:cd:57:01:49:
3d:10:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:23 2025 by rpki-client