Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: CydGhUn3p1u4xZfx9Zchiu6R6+AqYD6N5mTo135Iu7E=
Subject key identifier: CC:BF:FE:BB:51:08:DA:E7:65:79:3A:9B:4D:C4:15:31:89:D0:DB:E4
Certificate issuer: /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial: 4FED256640D3A1D4A15AA80BF3DB6258E1B5A9A5
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 05:00:00 +0000
ROA not before: Wed 04 Dec 2024 04:55:00 +0000
ROA not after: Wed 03 Dec 2025 05:00:00 +0000
asID: 135478
IP address blocks: 103.121.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ed:25:66:40:d3:a1:d4:a1:5a:a8:0b:f3:db:62:58:e1:b5:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Validity
Not Before: Dec 4 04:55:00 2024 GMT
Not After : Dec 3 05:00:00 2025 GMT
Subject: CN=CCBFFEBB5108DAE765793A9B4DC4153189D0DBE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:37:3b:7d:6f:7d:14:c9:9b:57:6c:73:4e:
52:e6:43:20:ab:0b:15:e7:f7:bf:18:6c:bd:50:a2:
26:b2:2a:d9:40:b3:4b:12:40:e4:5b:b9:d5:c0:8f:
b1:97:40:a2:65:3d:3a:71:9d:ab:5d:47:2b:bb:08:
f3:91:34:b7:c2:1d:d4:21:ff:2f:f9:f4:00:9e:96:
76:eb:71:97:c4:8d:26:d3:8d:a8:5e:1c:78:94:98:
57:eb:22:4a:4c:86:02:27:87:fd:c7:06:56:aa:ee:
42:a4:1f:ee:b7:b0:e6:61:6b:dc:40:b9:66:0d:76:
e7:ca:64:a8:c0:55:27:e9:0c:70:5f:10:3d:00:e1:
b4:5c:75:1d:cf:4f:c4:f1:84:be:62:03:66:8a:ec:
e1:98:66:ca:bb:99:31:27:b0:dd:64:25:53:b6:04:
eb:c5:4d:5b:49:86:5a:4a:35:87:f4:11:91:bf:e6:
29:a7:2d:0b:a1:42:be:d5:cb:97:7d:76:a1:e7:a3:
46:c7:5f:0a:29:63:8b:8f:fa:60:a8:0f:38:65:27:
13:e7:06:52:3a:58:d3:17:a9:c2:21:cc:ca:16:54:
96:f4:c3:0a:0d:d1:c6:68:f8:c9:aa:77:b1:57:b0:
7a:10:cb:f8:e8:4f:07:33:df:d3:d4:b2:db:8a:76:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:FE:BB:51:08:DA:E7:65:79:3A:9B:4D:C4:15:31:89:D0:DB:E4
X509v3 Authority Key Identifier:
keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.110.0/23
Signature Algorithm: sha256WithRSAEncryption
15:98:37:e7:88:ba:a1:9f:26:b5:1d:7c:51:30:cd:c4:a6:7b:
15:e6:eb:3a:9b:66:58:58:18:2c:0d:d3:9c:e5:8f:17:b8:51:
a9:44:9b:66:d0:81:40:cd:b5:e4:5b:43:64:d3:77:02:91:98:
73:6a:24:5f:85:ba:11:42:40:22:a6:8a:dd:fd:82:24:a9:98:
0b:1d:3c:90:8d:09:98:da:94:dd:29:b4:c1:45:44:f6:d9:50:
d6:7d:64:bd:8f:ac:74:1d:2f:48:bf:a7:36:a0:73:34:78:73:
a0:dd:c6:0a:83:ea:55:6d:80:c7:63:dc:e7:e5:f3:c9:da:04:
20:49:0e:33:a5:53:36:f1:4f:0b:56:7a:40:c2:1c:d5:0b:99:
80:df:ef:1b:19:1a:9d:51:e4:a4:47:71:2d:74:e6:46:15:04:
ad:9e:98:fe:44:30:85:7c:93:33:db:5f:93:45:2f:2e:f5:4d:
b1:fd:e5:f9:e9:05:2f:e2:c5:8b:a2:db:c9:82:8e:e1:79:bc:
bd:f1:e2:35:79:77:ce:ac:4e:43:c3:d0:c3:5f:a9:bf:04:a5:
a2:c2:0a:71:4d:6d:44:a7:5f:37:16:fc:29:e3:1c:47:c5:4c:
2b:45:65:dd:26:8a:7e:14:d3:12:39:db:a0:3d:be:22:bf:9c:
3a:8b:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:45:18 2025 by rpki-client