Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
File: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (raw, json)
Hash identifier: q6Apz8HIr1UqWZVDLQvz2cGC+ZcmsDdaf3ILRW+g4X8=
Subject key identifier: 90:5A:6C:24:67:D7:83:2C:EC:55:90:37:6F:01:95:22:51:8B:CF:A1
Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662
Certificate serial: 1E3E9DA1C54007CF49FBFA6775189FE3E11148DF
Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
Signing time: Tue 17 Dec 2024 11:50:19 +0000
ROA not before: Tue 17 Dec 2024 11:45:19 +0000
ROA not after: Tue 16 Dec 2025 11:50:19 +0000
asID: 135465
IP address blocks: 103.146.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3e:9d:a1:c5:40:07:cf:49:fb:fa:67:75:18:9f:e3:e1:11:48:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662
Validity
Not Before: Dec 17 11:45:19 2024 GMT
Not After : Dec 16 11:50:19 2025 GMT
Subject: CN=905A6C2467D7832CEC5590376F019522518BCFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:22:1c:30:9d:98:bc:c7:de:b7:f2:05:d1:
3e:29:b0:80:a5:65:b4:92:44:e5:bd:fe:74:2c:93:
2a:43:00:68:ce:8c:8f:e7:d5:00:38:6d:d0:c6:c1:
77:6e:e7:0f:0e:a0:88:46:00:c7:cb:df:35:2f:3c:
2a:a4:70:41:df:81:4a:61:bc:26:1f:50:f0:26:e2:
b9:35:85:cc:63:34:c3:07:56:85:52:85:9b:76:8f:
8b:97:5b:ac:c0:f5:01:d7:03:0c:c5:25:02:23:2c:
10:d1:9d:65:36:5f:03:40:5c:52:8a:94:b5:c6:85:
30:59:77:09:8f:98:b0:8a:c9:a7:5c:87:2a:52:d0:
f6:6a:5b:bc:50:ba:d2:96:db:53:4d:f8:1b:b9:47:
8c:07:a6:b5:57:02:8d:3a:c7:be:64:8f:44:ed:7a:
86:72:58:a0:dd:e4:0c:9f:f7:14:68:b5:8c:ba:0e:
de:41:f1:4c:08:58:b1:33:35:eb:ee:4d:f0:91:bf:
d5:3e:76:84:9c:f2:38:d3:57:10:d1:e9:eb:b8:2a:
51:90:00:86:2e:47:42:e4:c2:3a:a2:25:b0:e8:67:
95:6c:53:91:41:11:78:47:a9:f5:be:9b:2a:5a:e9:
00:d2:f0:f3:f1:39:7a:c5:52:20:13:fd:dc:2b:e5:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5A:6C:24:67:D7:83:2C:EC:55:90:37:6F:01:95:22:51:8B:CF:A1
X509v3 Authority Key Identifier:
keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.182.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:dc:03:9a:af:2e:84:32:65:45:fb:24:d5:c2:13:cf:05:
18:03:03:c4:89:15:29:49:a2:23:62:dd:72:e2:76:6d:92:ed:
98:ca:35:61:fe:86:da:43:01:21:b7:ce:37:df:5b:c6:0b:48:
b9:e0:2a:03:33:62:04:9b:a0:d9:06:a8:14:f0:f2:e7:8f:a7:
ae:b1:d7:47:c0:67:02:fd:4a:1e:f6:d4:44:71:0a:94:01:93:
36:42:6d:eb:c3:45:a2:5f:3c:ef:5e:c3:29:d4:4f:60:1d:a4:
cb:10:f9:e8:3e:91:12:51:20:10:19:3e:75:91:3d:41:9a:7a:
2b:53:26:19:4a:db:13:b6:2c:09:21:af:5f:63:0b:8f:1a:38:
01:9b:fd:a8:a4:6b:5a:44:e2:86:19:db:69:a2:18:ca:86:31:
d0:9f:82:52:41:57:36:da:58:ff:71:c6:f4:02:3c:98:cf:70:
c7:52:90:ea:ea:9b:f2:cf:be:0b:6a:56:fa:03:e9:46:a3:75:
52:f3:20:36:74:cf:fe:c2:f5:12:2e:3a:3d:da:fa:36:e2:59:
1e:d0:63:c7:c3:8e:76:db:79:1d:83:d9:b2:c4:ba:b4:53:e3:
fd:a7:55:0a:c5:de:43:cb:ae:80:58:ec:93:ac:0a:8f:38:25:
60:ec:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:15 2025 by rpki-client