Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
File: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (raw, json)
Hash identifier: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=
Subject key identifier: 55:B4:10:CA:E6:A3:5B:5C:E2:50:92:75:E3:6F:83:BA:79:70:A4:0A
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 17A964DB77B8B40F79873772B2587448882E674F
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
Signing time: Mon 30 Dec 2024 03:00:04 +0000
ROA not before: Mon 30 Dec 2024 02:55:04 +0000
ROA not after: Mon 29 Dec 2025 03:00:04 +0000
asID: 58381
IP address blocks: 103.20.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a9:64:db:77:b8:b4:0f:79:87:37:72:b2:58:74:48:88:2e:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: Dec 30 02:55:04 2024 GMT
Not After : Dec 29 03:00:04 2025 GMT
Subject: CN=55B410CAE6A35B5CE2509275E36F83BA7970A40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:74:28:29:db:c4:c9:06:74:01:f0:d4:99:
59:38:5f:f1:6f:9d:9c:67:fe:50:e4:73:83:c3:74:
a3:fc:e7:52:3d:98:fa:36:56:bf:97:d0:7e:45:45:
46:cd:7a:a0:de:ac:b0:de:2e:2a:49:5f:96:91:7a:
3f:79:ba:3d:7d:c2:93:93:54:a8:05:96:7a:c1:f5:
06:9c:82:88:85:52:50:65:a8:1f:2e:1d:db:9c:30:
b8:eb:37:95:70:cb:98:55:09:c7:bf:10:fe:58:42:
7e:57:46:58:24:a6:66:ed:43:4f:80:2f:e2:e3:1f:
bd:63:1c:d8:a8:ef:50:72:d2:77:e4:10:3c:37:99:
ea:f4:6d:a7:7c:93:9f:bb:01:8c:34:be:89:00:dc:
3c:24:55:be:4e:ab:1c:33:52:1c:48:86:d2:24:48:
45:ca:ff:e6:43:75:2b:29:10:d7:8a:24:8c:ac:53:
9e:c3:c9:ef:6d:6f:47:01:71:eb:bb:c8:66:fb:ab:
b8:35:97:5d:f4:b6:be:b1:8d:e6:60:61:69:82:d0:
f9:38:23:8f:ff:03:8e:59:c4:f3:d8:54:ee:99:e2:
8d:26:fb:f8:ba:79:76:57:ff:e0:94:fb:e2:ab:9a:
4e:af:51:42:b7:2a:27:a9:a2:78:f1:23:fb:00:1d:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:10:CA:E6:A3:5B:5C:E2:50:92:75:E3:6F:83:BA:79:70:A4:0A
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32332d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.90.0/23
Signature Algorithm: sha256WithRSAEncryption
88:77:72:f4:9c:76:e8:96:09:42:be:73:32:0f:1a:bb:4a:ef:
41:9a:79:05:d2:7e:d7:16:27:df:a9:b6:ad:57:50:0b:cf:89:
7a:c0:57:95:25:24:12:f2:8f:ce:3d:d5:2f:74:a5:37:22:60:
67:f8:70:88:f8:46:1a:08:07:b1:4d:09:79:05:21:58:74:09:
d1:52:ed:63:c7:78:ea:23:64:4b:23:a1:92:b0:0d:04:3c:84:
bd:98:04:0b:6a:3a:a4:6d:aa:cc:20:b9:b2:5b:02:0b:08:60:
b3:5f:92:44:39:b1:7b:b0:02:86:31:cc:25:e7:2c:9d:d8:c3:
e8:55:0f:f2:63:03:c0:62:61:eb:31:44:c6:b5:9e:89:c7:03:
9c:2b:3d:91:76:82:d6:7a:37:37:fa:41:fc:be:40:08:c7:7c:
45:72:d7:63:13:38:d7:33:11:77:f0:49:eb:c1:d3:53:3a:c8:
8d:82:09:49:27:de:29:da:3e:b5:4c:f2:70:e4:c7:7c:1a:36:
67:85:ec:bf:44:10:30:6f:83:8b:b3:65:12:29:f0:2a:fe:70:
e1:f8:22:31:7a:26:6b:69:f1:ca:64:3f:8b:fa:08:f1:2c:88:
57:8e:3c:03:79:23:94:96:31:6f:0d:20:3a:aa:f3:fd:b9:cc:
14:ea:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:09 2025 by rpki-client