Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
File: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (raw, json)
Hash identifier: 90EbYJF0CwQ0ioDu8Lhy6M+Vc8eDu52r4V+l5s70WMI=
Subject key identifier: D5:FF:A9:35:BB:8F:6A:CC:FB:B8:DA:B1:84:DB:B6:5D:86:6D:8D:C3
Certificate issuer: /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial: 240B48A249497234154A855D5100483FAD079519
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
Signing time: Tue 06 Aug 2024 08:00:01 +0000
ROA not before: Tue 06 Aug 2024 07:55:01 +0000
ROA not after: Tue 05 Aug 2025 08:00:01 +0000
asID: 139971
IP address blocks: 103.147.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0b:48:a2:49:49:72:34:15:4a:85:5d:51:00:48:3f:ad:07:95:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
Validity
Not Before: Aug 6 07:55:01 2024 GMT
Not After : Aug 5 08:00:01 2025 GMT
Subject: CN=D5FFA935BB8F6ACCFBB8DAB184DBB65D866D8DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:ad:6e:0a:bb:65:ea:12:a8:18:ef:87:bf:
84:ad:39:e2:99:05:f1:48:18:bd:77:31:f9:c7:e9:
91:a2:13:6c:a0:03:22:10:41:c9:72:f1:2e:1f:6a:
67:c8:0a:81:e6:32:e3:33:8c:d7:68:0a:21:ea:b6:
67:fa:60:73:1c:a4:ea:a2:99:ee:e2:8d:0e:18:06:
5f:4c:20:95:3c:2b:20:49:40:27:af:4d:9c:16:a6:
35:5e:7f:11:56:b4:41:8e:30:4d:0a:f8:4b:e8:ed:
ec:dd:d3:95:6c:37:61:f2:1a:9b:cb:32:77:31:9f:
ec:b0:7a:7c:2b:2e:c7:2f:2c:a9:30:a8:53:0c:4f:
27:22:99:fb:77:22:97:74:81:30:60:b5:6d:a1:22:
18:a0:0b:1f:b6:59:66:88:c6:c7:1b:a2:5a:58:15:
52:f2:79:a8:ec:b7:5b:79:8e:8d:54:3f:fd:b6:40:
c0:f1:79:9d:a4:a4:f1:57:86:f8:cf:8b:0a:a7:00:
a4:ad:cd:24:54:42:80:f9:70:b6:ec:81:47:09:cd:
99:30:d8:51:f2:75:be:2a:f8:a2:a2:1c:5e:74:8e:
03:e4:54:ef:e3:bc:d9:e2:bb:37:41:d3:bb:2c:47:
91:1f:b9:d2:1f:90:5e:27:d2:91:65:40:97:cd:11:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:A9:35:BB:8F:6A:CC:FB:B8:DA:B1:84:DB:B6:5D:86:6D:8D:C3
X509v3 Authority Key Identifier:
keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.236.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a7:11:d7:24:37:ac:8c:53:d0:3c:b2:39:2a:fb:52:c7:a9:
d5:48:81:72:dc:05:2d:b1:da:01:9d:f7:87:a2:61:41:0c:9d:
1c:96:e0:e2:ed:ce:ef:d9:67:4e:af:92:bd:be:af:ac:33:e3:
21:3d:8b:ed:fc:6d:d1:06:1d:e8:e1:d3:8e:3e:24:4b:b6:ad:
56:ac:b2:8f:4d:45:a1:00:35:19:bd:12:d4:13:b9:2e:f2:a1:
13:76:27:ad:42:83:80:9d:63:5c:20:71:c3:9c:8e:e6:2b:77:
3d:bd:06:22:b9:c5:4d:e5:89:47:b6:90:30:4a:3b:0e:6e:c3:
d5:20:57:34:c3:35:ef:32:bb:a7:14:32:f0:13:2e:dd:a0:42:
3f:57:d3:0b:85:15:37:10:1f:ff:a1:f7:31:56:99:a0:1c:14:
7a:f0:b3:ba:49:7e:25:13:bc:d4:b8:40:28:ef:6e:62:b6:47:
71:90:84:e8:18:aa:60:9d:75:4e:28:bb:f0:81:45:3a:b1:ee:
84:28:1f:ed:47:1f:4a:95:f3:b6:e3:54:60:f5:df:09:5e:60:
7b:ba:3c:73:99:b5:be:72:3d:ce:04:a9:12:33:61:77:28:74:
e6:8f:a3:3a:4e:14:d6:cf:65:07:42:8c:6f:4d:16:1d:10:37:
bc:2b:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:09 2025 by rpki-client