Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
File: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: YAl9IH945cB6nzFZ+Qtu95xtcvqOant2/UNUilOSLzk=
Subject key identifier: 41:86:06:E9:49:39:05:11:4E:55:D8:E1:47:FB:46:31:68:51:AF:58
Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
Certificate serial: 3FB668C42AAB3AA106BD54BCDED41D858EFF57B1
Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
Signing time: Wed 11 Sep 2024 09:00:53 +0000
ROA not before: Wed 11 Sep 2024 08:55:53 +0000
ROA not after: Wed 10 Sep 2025 09:00:53 +0000
asID: 396982
IP address blocks: 103.157.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b6:68:c4:2a:ab:3a:a1:06:bd:54:bc:de:d4:1d:85:8e:ff:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
Validity
Not Before: Sep 11 08:55:53 2024 GMT
Not After : Sep 10 09:00:53 2025 GMT
Subject: CN=418606E9493905114E55D8E147FB46316851AF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:a8:ff:0e:b2:3e:28:1d:47:5f:9e:e8:4e:
25:95:c8:5a:b1:fd:4f:01:20:78:7b:a6:31:fb:d7:
ad:00:ec:05:d1:d0:27:ce:fd:78:31:51:b8:b5:59:
df:bf:80:69:31:6c:76:32:6a:7b:4f:c8:7d:cb:c2:
10:f2:1a:69:1a:4a:f4:80:f6:fc:58:bf:06:f4:f8:
25:0c:75:50:ae:7f:2d:e5:39:14:bf:9f:1e:4c:ec:
60:51:22:01:89:6f:d1:85:ce:44:48:74:a9:88:26:
70:18:13:85:ea:cc:2a:9d:b8:81:4e:23:d2:55:1d:
3d:f3:3a:f3:b7:7b:52:24:13:bd:2c:23:97:41:12:
c4:b3:c7:e4:7b:72:d2:d5:c3:e4:0c:a8:09:e5:e7:
93:ba:c4:f7:2b:61:4c:b8:22:6b:e2:47:a1:f8:2c:
8d:bd:8e:b8:25:bf:0e:fe:32:b3:60:c6:7f:19:8a:
b9:66:c6:9e:8c:58:31:c8:43:34:5a:a8:84:c2:c4:
a6:c7:25:27:62:c2:07:24:03:fe:c7:b2:26:86:fc:
75:d7:87:7f:d8:4e:13:1e:1a:87:9a:df:47:0d:12:
71:93:3b:e8:a2:b8:4f:f8:21:16:e5:dd:0c:ab:e7:
c8:08:2c:36:97:7a:82:36:ab:68:b9:48:04:00:b2:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:06:E9:49:39:05:11:4E:55:D8:E1:47:FB:46:31:68:51:AF:58
X509v3 Authority Key Identifier:
keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
96:bc:b2:f6:67:42:d3:f7:72:43:b2:f1:d7:ae:43:0c:76:9d:
2c:64:1f:f3:9f:1e:db:33:ed:03:7a:17:c7:18:d1:62:a8:7e:
cd:a1:17:48:79:2b:0f:64:03:09:85:d5:2b:29:53:0b:a5:2a:
a4:95:55:a4:bd:1b:46:ed:fa:44:bc:54:ee:67:d8:bb:1e:99:
e3:36:7f:77:eb:1f:01:89:62:d2:1e:6e:15:47:da:f7:32:84:
a0:cb:01:43:c5:78:aa:96:89:94:ed:2c:f1:4c:b3:0d:a0:21:
3a:18:e8:a9:3e:ea:18:77:b9:68:54:a4:da:53:74:92:35:f5:
71:8c:40:dd:7b:a6:f2:b6:9b:5d:64:4a:31:89:40:18:29:ea:
3a:a3:50:13:d1:21:8b:85:eb:60:cb:6d:70:f1:0d:7d:9e:6f:
e6:6d:6f:a5:cc:88:c9:26:c3:82:75:97:69:0b:70:e2:42:bf:
1f:75:9b:4c:7f:a3:5a:57:07:27:ab:61:6c:3d:51:8f:7a:67:
4f:a8:2a:00:c9:e2:f5:81:d8:8a:59:ff:6d:db:b1:67:c9:8c:
3e:87:cd:aa:45:e9:b8:8d:62:02:47:97:6e:f1:47:bc:b1:79:
6b:b1:3d:dd:a0:38:56:73:e5:97:f9:5e:fe:a0:3d:5c:cc:9f:
e6:59:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:35 2025 by rpki-client