Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa
File: 3130332e34332e32342e302f32342d3234203d3e20313530343633.roa (raw, json)
Hash identifier: Wk0pZX2JRd8piWUsdNxkVMQatUeuKvw42A3uwKTN6pA=
Subject key identifier: 45:E6:C3:86:9B:60:C3:9F:0F:68:0F:65:E8:F2:AD:63:4D:9B:10:59
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 15E3829B9778DE63B377F72B8C0DAD8154ADDB5B
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa
Signing time: Sun 24 Nov 2024 14:00:01 +0000
ROA not before: Sun 24 Nov 2024 13:55:01 +0000
ROA not after: Sun 23 Nov 2025 14:00:01 +0000
asID: 150463
IP address blocks: 103.43.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e3:82:9b:97:78:de:63:b3:77:f7:2b:8c:0d:ad:81:54:ad:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Nov 24 13:55:01 2024 GMT
Not After : Nov 23 14:00:01 2025 GMT
Subject: CN=45E6C3869B60C39F0F680F65E8F2AD634D9B1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:7a:7f:89:09:5d:30:9a:2f:2a:63:19:e0:
4f:d7:c3:37:43:9c:a3:52:9c:f8:3a:35:4e:c6:28:
7e:c2:60:d4:b2:c6:c1:f1:ba:e5:cd:bd:10:5d:9b:
50:25:ee:7d:8b:fe:81:5c:07:fe:04:ee:9f:98:8a:
78:2f:d0:97:03:6e:18:ee:ab:6a:95:35:9f:18:96:
7f:cd:5a:13:c2:b4:d5:c6:98:54:67:00:e4:db:fc:
b0:b6:51:3e:6e:b0:3d:26:72:f2:ed:d0:2f:bb:d0:
33:77:37:18:cb:bd:05:d6:2a:0c:3a:a1:af:b3:83:
df:87:b0:23:00:bb:c8:40:5b:1f:0f:67:a0:de:7d:
4d:77:44:88:08:d1:74:14:d1:30:8f:98:5f:1d:1f:
bb:c3:f2:30:6c:9a:7a:00:90:52:b9:5f:55:8a:bb:
a1:b3:76:24:5d:5c:e0:ce:87:d8:ed:f7:1b:c4:d1:
95:d8:fc:db:f9:b2:2d:92:53:c1:70:40:91:8f:df:
76:5e:f5:b9:87:f4:96:6a:5d:7e:1e:e6:1d:bb:96:
55:5d:f3:d1:ee:6c:d8:7d:90:6d:b6:30:5d:ab:0d:
ba:30:b8:00:37:75:66:b6:c5:59:7f:88:5f:5c:54:
6d:7c:c0:de:a7:38:9c:35:c9:70:ed:23:cb:4f:ec:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E6:C3:86:9B:60:C3:9F:0F:68:0F:65:E8:F2:AD:63:4D:9B:10:59
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.24.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c6:d4:d3:fd:65:71:87:d9:bc:27:e6:66:62:36:6b:7e:7f:
53:ea:f7:e6:5a:c0:ce:52:57:8c:14:e0:2b:19:30:16:96:74:
c8:10:b8:0c:cf:89:ee:f9:92:23:06:56:d7:2b:db:da:f1:8c:
59:ca:7c:cc:6c:ec:0f:08:07:13:3d:8f:b0:d6:94:82:4b:60:
a2:74:b8:88:95:02:89:f1:06:6b:0d:ca:5e:21:8b:12:6f:d8:
b8:7f:43:f4:0b:cf:42:ab:db:7e:15:02:dc:68:ed:0a:3c:76:
61:97:cf:07:71:ef:6f:ed:e3:77:43:b7:5b:e4:7a:59:65:b4:
b3:cd:a6:3b:ee:76:d0:af:74:43:f1:e8:e3:13:d4:4a:42:35:
6d:69:c9:ea:2a:0c:1a:f5:24:04:14:97:b5:07:93:83:65:83:
5b:2b:22:71:8b:1d:94:be:3d:59:f0:6c:3e:02:fb:2e:6f:9e:
fa:91:f1:f9:d8:a8:d1:f1:0a:b8:f8:29:37:1a:df:ab:97:52:
7f:8a:88:7f:64:a3:ed:4f:aa:a3:09:42:bc:0b:b8:6a:6c:ec:
b7:f8:41:55:f6:0b:2a:59:f7:0d:87:a8:d6:a4:2f:1e:b6:a5:
84:8a:1e:09:39:78:19:f1:2a:52:19:56:0f:5a:5b:c4:89:08:
0b:ae:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:03 2025 by rpki-client