Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
File: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=
Subject key identifier: 83:B7:38:44:9B:B7:0B:38:4B:76:76:73:2B:31:29:E2:23:A3:E7:CF
Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14
Certificate serial: 28DE90F96CDC4323C1F738A8C90735231F7A2424
Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
Signing time: Mon 29 Jul 2024 05:00:00 +0000
ROA not before: Mon 29 Jul 2024 04:55:00 +0000
ROA not after: Mon 28 Jul 2025 05:00:00 +0000
asID: 4800
IP address blocks: 103.239.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:de:90:f9:6c:dc:43:23:c1:f7:38:a8:c9:07:35:23:1f:7a:24:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14
Validity
Not Before: Jul 29 04:55:00 2024 GMT
Not After : Jul 28 05:00:00 2025 GMT
Subject: CN=83B738449BB70B384B7676732B3129E223A3E7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:01:27:10:1c:b6:ca:f8:6d:4f:54:b0:2c:
fa:17:7a:3a:e2:96:0c:60:0b:50:9e:a2:50:dd:fb:
42:9b:4c:ce:66:08:ab:dd:a2:b6:24:b7:ce:9f:a1:
c5:ac:2a:8f:52:73:df:47:f9:59:4a:02:65:39:fa:
5e:df:9f:36:56:91:6d:41:60:38:ec:4c:67:2f:2f:
32:e8:ae:11:ec:52:40:7b:24:9f:5d:ea:43:24:c0:
01:6c:97:ce:96:dd:2a:04:53:f8:14:9e:f7:6b:61:
84:38:27:bd:a1:fd:86:12:39:fd:5a:06:7a:13:5c:
1c:db:da:02:da:d6:2d:e0:be:6a:d2:23:92:78:35:
22:29:cf:a4:ae:8d:95:46:94:d3:66:1b:2a:c7:8f:
b7:eb:d2:ac:d2:0a:4a:62:b8:71:c2:5a:67:7a:df:
86:95:4c:0a:44:46:53:9c:25:6f:7c:70:09:0f:17:
3e:d2:ec:3e:95:2e:4f:86:f1:cd:21:4c:1d:47:89:
84:c1:ca:c4:e7:63:89:78:a4:10:8f:4e:ad:bf:b0:
5c:f1:85:fe:9b:4b:08:89:fa:00:1c:24:e2:43:52:
c0:16:af:ee:99:f8:e5:ec:a7:f2:1a:a9:31:47:57:
73:c4:03:a0:77:27:de:47:5f:c6:8b:d1:e7:24:4c:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:38:44:9B:B7:0B:38:4B:76:76:73:2B:31:29:E2:23:A3:E7:CF
X509v3 Authority Key Identifier:
keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:28:e3:74:70:39:b6:67:06:b1:e2:0f:99:29:d9:d4:e6:b0:
37:3b:44:02:d4:67:25:03:08:c3:7f:2e:f8:aa:40:f6:fb:08:
93:05:aa:7b:be:81:e3:25:4c:24:1c:1c:6a:76:40:ba:55:d5:
a0:4f:f5:2a:9e:18:4c:19:94:b1:01:da:d3:e7:6b:fa:73:53:
ca:fe:68:12:3f:c2:79:cb:cc:0e:e7:59:27:43:f6:ac:f4:12:
34:70:8e:1b:d0:34:95:51:35:04:05:d0:d1:c7:f6:58:6f:c4:
01:f4:52:6a:aa:c3:30:66:50:e7:f9:b7:48:8a:3a:db:73:4d:
43:ca:24:29:3f:da:54:8d:ca:23:f3:39:68:d4:aa:08:0b:82:
87:90:aa:67:71:f1:81:18:42:f9:12:d7:f8:63:35:08:df:f6:
52:74:a0:60:ae:4e:a2:a5:40:81:d1:e2:78:b7:c8:96:32:07:
d2:5c:4f:ac:ea:65:68:c4:11:b7:78:84:68:bc:f8:ff:e2:d2:
35:ca:c6:01:e5:75:30:91:cf:c0:f0:85:ba:be:69:b6:6e:2d:
5a:8b:f3:5e:4f:b4:ff:da:21:f3:37:3b:52:89:d1:1f:53:90:
34:b5:9f:db:56:fb:fa:4b:91:d1:61:e3:74:c1:6c:a9:c9:cb:
cf:11:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:55 2025 by rpki-client