Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
File: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier: N5SE9OOCuoneVQ/bLDmk2qRdc0AgenP5t1IGsQjklp4=
Subject key identifier: 49:A0:B3:18:AF:2B:E1:95:13:0D:45:95:8F:6D:EE:54:18:51:D9:E3
Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial: 6E4F9DFF3E891A087DA2BE03D1DE9FCD79392092
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
Signing time: Thu 21 Mar 2024 04:02:27 +0000
ROA not before: Thu 21 Mar 2024 03:57:27 +0000
ROA not after: Thu 20 Mar 2025 04:02:27 +0000
asID: 150274
IP address blocks: 103.39.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4f:9d:ff:3e:89:1a:08:7d:a2:be:03:d1:de:9f:cd:79:39:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Validity
Not Before: Mar 21 03:57:27 2024 GMT
Not After : Mar 20 04:02:27 2025 GMT
Subject: CN=49A0B318AF2BE195130D45958F6DEE541851D9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:2e:fe:48:f9:c6:7d:c4:ca:d5:51:cf:f1:
e0:71:7c:e2:4e:a5:dd:da:7f:9f:49:5c:4b:5a:63:
14:f8:ea:15:8d:ef:a6:4b:61:63:f6:68:a7:69:3e:
fb:72:52:00:59:ca:bd:5e:63:05:68:e5:63:b9:8c:
46:96:22:29:7c:4e:6b:f1:48:0e:93:33:5c:35:1d:
f3:fb:24:df:4e:fc:ca:99:84:7d:c3:f4:ba:98:31:
28:42:59:1a:3d:f4:d8:5d:36:ac:25:31:22:6f:4d:
9b:31:b9:3f:5b:a4:97:d4:bc:e3:5e:ff:87:2b:2a:
42:7c:aa:ff:aa:98:c9:08:58:3c:90:d1:b8:47:b8:
c5:7d:05:48:7d:2e:89:3c:aa:10:88:b6:46:7c:52:
01:68:53:80:dc:15:8f:95:66:9d:43:ce:76:87:d1:
7c:3e:72:66:dd:ab:02:28:73:0c:a5:4a:7b:3b:5c:
2f:4f:f4:ff:84:d8:8e:98:fc:af:64:1b:81:ac:e8:
ce:f1:4d:49:94:b6:8a:06:7d:87:60:d5:8a:10:9c:
88:bb:3a:92:11:c2:5a:7b:c8:eb:fe:d9:4e:01:f3:
ae:36:b3:01:e2:a0:46:6f:e2:b9:81:20:9a:45:0a:
01:1b:36:e9:11:9e:69:ad:b0:22:ce:66:1d:56:4c:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:B3:18:AF:2B:E1:95:13:0D:45:95:8F:6D:EE:54:18:51:D9:E3
X509v3 Authority Key Identifier:
keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.70.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e0:6f:8e:f9:23:f3:bf:2b:b6:cf:28:1a:57:62:27:c5:88:
86:9e:c3:82:49:84:be:ae:fc:17:5b:68:f2:ab:b0:05:f9:fc:
4f:6e:d5:fa:b1:9f:5b:65:85:97:37:ef:32:5d:5c:d8:88:b1:
bc:2d:37:42:9d:dd:e7:b4:2b:3a:f2:7e:ae:cb:4e:7a:b0:c3:
00:7b:3b:57:cb:4d:fb:7c:00:57:43:08:62:ef:9c:69:1b:fb:
72:c3:ef:89:12:5b:94:81:de:ae:34:60:2e:39:6e:ff:8e:26:
40:62:7d:b1:e7:8f:83:29:39:19:90:ab:44:be:37:58:e3:68:
c9:48:e8:df:6a:db:5b:31:d9:87:5a:a9:38:24:2b:7b:e2:33:
1e:0b:f1:b0:9b:57:6e:a8:61:7b:6d:e5:d7:dc:5a:58:7e:97:
9a:4b:90:98:fc:c9:00:f5:f5:ba:ac:46:92:2e:8b:ba:d8:15:
f5:1b:53:ff:88:48:e3:d1:25:41:6a:35:5a:b3:dc:b5:44:69:
5f:0e:c5:49:0c:2a:c2:48:ca:c7:66:ca:a5:86:8c:db:8d:f8:
9a:88:07:ff:c2:b6:78:41:39:35:49:94:5b:d9:7a:28:55:f9:
66:21:89:70:ac:32:cd:71:61:47:27:46:ed:48:1d:9a:f7:35:
a9:0b:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:48 2025 by rpki-client