Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa
File: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (raw, json)
Hash identifier: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=
Subject key identifier: 53:FD:38:75:BF:5D:1F:9A:2C:43:1C:A7:A8:94:F8:52:9C:2E:ED:E4
Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
Certificate serial: 52325F3F754F05BBC00DC1A022B24A6327E25591
Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa
Signing time: Tue 28 Jan 2025 09:00:00 +0000
ROA not before: Tue 28 Jan 2025 08:55:00 +0000
ROA not after: Tue 27 Jan 2026 09:00:00 +0000
asID: 150945
IP address blocks: 103.105.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:32:5f:3f:75:4f:05:bb:c0:0d:c1:a0:22:b2:4a:63:27:e2:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
Validity
Not Before: Jan 28 08:55:00 2025 GMT
Not After : Jan 27 09:00:00 2026 GMT
Subject: CN=53FD3875BF5D1F9A2C431CA7A894F8529C2EEDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:bc:a8:b1:05:f3:71:40:fa:39:09:cc:1d:
b6:52:87:f1:08:0c:f7:e1:c8:4d:30:db:69:72:e4:
a3:dd:e8:de:ed:24:fc:1b:a7:6b:01:90:1a:15:9c:
a3:ff:01:8f:5b:ab:1c:94:9d:e4:3c:2b:a9:01:3d:
3b:27:67:4b:99:2c:e3:25:a4:e0:37:a5:0c:01:ef:
35:0e:dc:d6:cf:d0:2a:ca:45:57:06:2b:af:5b:17:
83:cc:b7:7b:92:e1:4b:e8:a9:15:46:fd:73:a2:5e:
3f:39:c4:78:5a:30:ef:96:43:d2:81:e9:32:9a:2c:
48:ae:d9:ed:70:ab:82:ab:d1:4d:c7:6c:9a:d7:e3:
16:6c:2c:51:4b:82:0d:09:fa:62:f8:8c:27:86:0f:
a0:52:22:14:e8:d1:54:de:47:e1:48:f6:76:de:d2:
e9:bf:ec:1f:a6:60:09:7f:bd:5f:f9:fe:50:8a:49:
af:ff:2d:be:75:0e:34:20:f9:a8:b6:00:87:5d:3c:
66:48:0f:62:0b:0a:0b:9e:1a:9b:26:df:94:a0:27:
6b:d1:10:cc:43:ec:1f:52:44:79:f0:3c:2d:f0:8a:
0e:ad:db:1d:7b:e6:40:77:e6:3f:f3:17:fc:d6:66:
3c:63:75:6c:da:cc:24:93:c0:30:94:67:3f:82:bb:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:38:75:BF:5D:1F:9A:2C:43:1C:A7:A8:94:F8:52:9C:2E:ED:E4
X509v3 Authority Key Identifier:
keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.92.0/23
Signature Algorithm: sha256WithRSAEncryption
74:df:de:b4:c6:8d:5f:c0:63:fa:d5:83:db:3d:2f:08:ec:b0:
c8:23:6a:75:8f:b3:5f:fd:04:c4:2c:af:9e:da:3a:c8:b0:0a:
1b:9f:d3:19:ab:37:18:f9:a5:72:76:f9:3a:90:a3:b8:dd:5c:
be:66:ea:bd:8f:c9:52:3b:08:cb:7f:7d:4d:5a:0a:02:28:58:
4a:cf:ba:3c:23:86:4e:0d:15:69:8e:77:95:74:da:8b:75:d5:
7e:ac:9e:e1:0a:79:fb:54:2a:fd:2a:a7:c6:b5:b6:7b:79:19:
39:9d:68:3d:fc:45:dc:1c:0d:7b:fb:3f:e7:ae:b2:f1:cf:9e:
51:99:c7:5f:a5:4e:34:26:29:00:bd:08:c5:38:6d:05:ba:ce:
9d:92:54:1d:c6:55:05:a9:10:b7:3f:17:e9:9e:2c:49:c6:ce:
96:d6:85:02:53:3e:07:26:e7:fe:80:e7:aa:12:3c:1f:eb:a6:
ea:62:dd:b9:05:63:e1:fa:6b:09:c7:33:1d:00:a4:21:a7:dc:
0c:97:71:4c:3d:55:33:c8:ce:36:9f:51:13:65:2e:93:17:0d:
45:77:43:5e:64:98:91:16:95:f0:67:20:bd:e6:b0:ad:d9:eb:
fd:68:fc:26:23:a3:f3:de:1c:33:a5:f4:b0:3f:41:db:49:d4:
37:f2:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:54:44 2025 by rpki-client