Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
File: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (raw, json)
Hash identifier: PlUQuGrph6ozxAfOZbVVs0CGGRj4aYxErmFtS7Skvdg=
Subject key identifier: 9A:AB:FF:B2:72:9E:35:12:8B:56:70:8E:93:30:39:1A:B0:8C:1B:ED
Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Certificate serial: 02EE2863312583DF47509845F7095DDE2FBAF9FC
Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
Signing time: Fri 29 Nov 2024 03:00:01 +0000
ROA not before: Fri 29 Nov 2024 02:55:01 +0000
ROA not after: Fri 28 Nov 2025 03:00:01 +0000
asID: 149913
IP address blocks: 103.191.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ee:28:63:31:25:83:df:47:50:98:45:f7:09:5d:de:2f:ba:f9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Validity
Not Before: Nov 29 02:55:01 2024 GMT
Not After : Nov 28 03:00:01 2025 GMT
Subject: CN=9AABFFB2729E35128B56708E9330391AB08C1BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:fd:56:2a:75:83:9d:1a:24:6e:2d:3c:ed:
e4:2b:11:73:f4:57:64:a6:c7:e0:31:c2:42:e5:a2:
92:80:b5:d5:d5:81:35:41:fb:e3:ac:b0:86:84:4c:
fa:f9:f6:fd:ff:53:a2:82:66:0e:c5:26:8e:99:67:
ee:a3:9d:f9:95:4b:b9:63:ac:54:39:1f:ac:ac:75:
3a:1d:c7:5c:85:9f:8c:d9:72:39:ef:83:17:84:38:
34:1b:9c:0a:d9:ba:9c:f7:63:18:fa:27:45:4e:81:
53:36:b1:2e:af:f0:f3:46:15:39:74:fe:de:c9:46:
b4:8d:3b:a9:3a:90:fc:69:97:1b:ba:a4:e6:9b:0a:
4f:05:46:63:e9:b0:17:b8:f1:65:9a:95:78:0d:dc:
ac:7c:43:76:65:99:6b:fe:e7:79:8e:60:59:86:69:
8b:f0:61:fc:28:6a:e1:f6:86:47:6a:c3:25:85:0b:
fe:eb:58:2e:1a:6c:66:c1:32:5c:bd:42:37:79:58:
c5:86:4f:fa:7e:e7:cd:ff:7a:95:5b:0e:d9:86:50:
3e:99:d1:88:fd:a2:df:32:0f:fa:11:11:a9:42:cb:
b1:b3:84:f7:71:a0:46:60:a6:95:96:d6:64:24:50:
56:83:8f:d4:f3:e0:52:a4:7d:81:e6:4b:ad:1a:7b:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:FF:B2:72:9E:35:12:8B:56:70:8E:93:30:39:1A:B0:8C:1B:ED
X509v3 Authority Key Identifier:
keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.54.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ed:68:0e:73:24:43:ee:97:9b:64:69:30:c7:aa:36:14:a3:
36:48:2e:5e:a1:fd:90:4a:27:14:e5:7a:bc:25:ba:b6:04:db:
a2:9f:09:56:aa:a9:7b:dc:a1:0e:aa:5f:18:ea:46:f9:81:6a:
b3:10:59:6d:b6:bc:50:88:98:ae:78:3b:47:e9:fd:8c:28:28:
ae:95:2a:18:2e:ac:ce:d2:6d:92:ec:a2:58:30:93:21:48:d4:
36:64:1a:37:f1:18:68:a4:77:98:f2:6d:e1:41:9c:0e:dc:93:
c4:c8:f6:81:1b:53:51:b4:4f:df:19:3b:88:ac:19:c2:5c:d3:
ba:94:d4:06:b6:62:f3:1c:44:02:6b:a9:64:43:31:13:52:95:
22:fc:e7:a7:fb:91:ff:d1:65:95:0a:6b:b2:51:ae:26:1d:86:
e2:e8:ae:96:7e:fa:59:ab:d5:1d:45:65:a5:8c:54:7d:84:82:
12:19:3f:1c:57:3e:bf:bc:b4:72:d5:50:9c:b9:4d:84:97:6f:
1f:2c:d0:d4:2b:2f:fc:e9:d3:e6:b4:e4:33:77:13:f7:fe:70:
eb:b3:21:3a:95:fd:81:fa:e1:7f:8c:32:b6:21:71:4c:ad:df:
f4:00:2d:73:c2:b3:f1:9c:05:7b:54:0e:67:86:b8:99:8b:db:
d3:b0:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:33 2025 by rpki-client