Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa
File: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=
Subject key identifier: 30:1A:2D:92:F7:3E:5F:EB:71:77:3D:13:06:46:49:4F:A7:6B:06:1A
Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial: 55A5723580C0B6693272A079ACE0D61C9C895965
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa
Signing time: Wed 27 Nov 2024 12:00:02 +0000
ROA not before: Wed 27 Nov 2024 11:55:02 +0000
ROA not after: Wed 26 Nov 2025 12:00:02 +0000
asID: 136064
IP address blocks: 103.83.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a5:72:35:80:c0:b6:69:32:72:a0:79:ac:e0:d6:1c:9c:89:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
Validity
Not Before: Nov 27 11:55:02 2024 GMT
Not After : Nov 26 12:00:02 2025 GMT
Subject: CN=301A2D92F73E5FEB71773D130646494FA76B061A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:77:56:0f:62:5b:bc:3d:b2:d8:64:53:b8:66:
e7:7d:3d:d3:9f:56:2b:a8:6d:6e:50:a0:6c:c7:83:
d6:94:5a:54:d1:47:1f:2a:f7:c5:e3:97:fc:13:52:
bc:2f:06:07:54:f0:db:d9:4e:21:de:e9:9b:6a:28:
23:f0:f3:64:14:5e:4a:4b:38:c6:d1:e1:99:03:ed:
44:47:47:0d:02:cf:9b:e5:47:97:19:df:a6:d3:65:
68:85:86:12:6b:16:d6:d6:8b:92:9b:73:c6:25:79:
ad:be:cb:d7:e6:14:c1:9c:c7:24:fb:f7:fe:b2:73:
7a:6a:cd:c5:87:48:fc:e2:30:f9:d7:d4:9f:ae:b2:
93:d9:d8:fe:1b:76:ee:d3:fc:fa:38:16:51:0b:bf:
20:04:b6:37:50:05:1b:5d:0f:cd:68:f9:7b:53:f4:
87:15:aa:e2:70:2d:5e:9e:65:39:d1:b7:fa:5f:ee:
a5:27:d1:23:7e:2d:c6:79:0f:d8:c9:8b:9c:dc:c5:
bd:6e:2a:77:ed:f2:2c:91:91:44:aa:34:74:ee:fa:
c1:b5:5d:dc:01:0a:49:3e:14:ed:fc:e6:77:18:17:
dd:fc:bb:c3:00:49:b7:d1:3d:5f:22:51:68:d3:33:
48:0b:06:a0:b2:7f:31:6c:d4:f8:10:4b:70:e1:ab:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:2D:92:F7:3E:5F:EB:71:77:3D:13:06:46:49:4F:A7:6B:06:1A
X509v3 Authority Key Identifier:
keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f4:79:0d:0e:91:6e:69:da:53:b7:05:0e:15:be:f2:ea:56:
8c:a7:98:a1:4f:87:5a:72:5f:cf:6f:5b:e1:eb:e6:de:da:bc:
e8:24:45:2e:1f:a6:3b:ed:bd:fb:97:34:06:49:11:46:69:67:
26:9e:a9:d3:d8:d2:95:a6:82:94:46:e5:9f:fe:49:09:a3:f1:
dd:8f:ef:04:08:56:ea:99:da:cb:2f:80:a4:ce:66:b6:f6:ab:
73:8c:f1:74:df:81:88:1b:5a:4d:5c:25:87:da:50:9b:c9:39:
b7:2c:b8:8b:8b:dd:14:e8:65:f9:d0:0d:34:71:a7:59:3b:d7:
f2:2f:af:f1:d2:18:34:88:ac:86:d6:db:9c:48:04:33:0f:2d:
30:a9:e2:61:5a:b9:a0:f7:a8:01:c7:38:c6:c6:c3:a5:43:bc:
f8:18:fe:35:e0:0b:4f:32:77:69:7c:a0:82:86:8b:74:d1:8e:
dd:26:b9:ee:d6:79:0a:0f:3c:a8:df:a6:8a:8e:2d:3b:0f:65:
56:20:9e:9a:d1:f4:b1:d8:55:06:d1:99:6d:8a:96:11:bc:8e:
b8:25:24:2b:51:42:35:6a:6c:62:68:5a:21:41:75:bb:bb:71:
35:84:d0:27:f1:3b:19:c9:4d:7c:88:ec:e5:37:0a:83:03:8e:
7a:49:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:21 2025 by rpki-client