Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=
Subject key identifier: D1:1B:1D:A8:0B:A4:65:EA:06:5B:FA:4B:1D:E4:43:5F:1D:AC:B8:E2
Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial: 6841C88A9522FB8F4DFB38AEBD3A6C9A25A71029
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 09:03:04 +0000
ROA not before: Wed 04 Dec 2024 08:58:04 +0000
ROA not after: Wed 03 Dec 2025 09:03:04 +0000
asID: 135478
IP address blocks: 103.129.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:41:c8:8a:95:22:fb:8f:4d:fb:38:ae:bd:3a:6c:9a:25:a7:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Validity
Not Before: Dec 4 08:58:04 2024 GMT
Not After : Dec 3 09:03:04 2025 GMT
Subject: CN=D11B1DA80BA465EA065BFA4B1DE4435F1DACB8E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:8e:03:ab:34:8f:ba:0f:7a:ec:0f:04:82:
b6:c8:2e:6e:8b:3a:59:f7:40:e6:d3:7b:8b:12:fa:
af:59:77:ee:01:65:b3:e7:6b:2c:81:15:12:d8:e4:
5a:9c:d7:20:a8:a8:16:e2:6f:66:66:5a:4f:63:37:
ae:a0:1d:f5:ff:0e:e8:cd:85:98:41:6d:ff:e6:e2:
14:13:7e:8b:c9:89:ec:23:9f:09:a2:79:50:35:2a:
36:10:c8:5e:ea:fb:a8:a4:3e:da:15:2d:97:6c:b5:
df:2e:2c:2f:42:ba:46:1e:77:16:ee:31:c2:6e:a4:
c4:f4:e8:1e:f4:e1:06:6b:72:26:dd:b6:a1:b7:a4:
b2:b0:64:e3:c1:07:e6:dd:b3:39:cb:ad:dd:3b:db:
c9:83:b3:61:d3:bc:5e:d5:19:44:41:9e:29:ff:d9:
59:53:b4:d2:60:c0:8d:c9:b9:93:b9:26:fc:82:08:
8a:86:46:93:80:43:12:ef:59:7a:be:b1:bc:11:89:
e4:8f:14:8b:c7:9e:bb:5c:15:21:20:99:17:34:f0:
44:25:be:de:bf:51:1a:7d:e2:01:6e:be:35:76:27:
69:7a:6a:83:31:58:a2:33:65:4b:bf:50:9b:7a:9d:
6a:44:45:e9:a7:74:29:ea:27:82:0e:ae:ee:f1:26:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:1D:A8:0B:A4:65:EA:06:5B:FA:4B:1D:E4:43:5F:1D:AC:B8:E2
X509v3 Authority Key Identifier:
keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.68.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:49:f6:8b:a2:d2:af:9c:1c:7c:8f:02:44:95:2d:a9:52:58:
de:f0:cc:e7:3e:5c:da:aa:b4:5b:ed:cd:cd:eb:48:11:b8:7c:
f1:59:bc:ae:8b:79:d4:f3:63:42:12:75:fa:64:3d:1a:45:bf:
fc:61:5c:23:9e:fb:a4:9f:41:8f:e2:54:b0:1b:27:34:d9:4b:
5f:32:39:e4:1b:bd:7f:0e:de:be:a2:77:f1:62:8b:eb:ff:d3:
b9:e1:22:85:fe:20:b9:ce:c6:0e:f9:fb:07:25:05:be:e3:5d:
a7:a4:4b:64:61:74:a9:20:ad:49:bd:67:ff:e5:2f:c9:1e:de:
6a:d6:92:89:62:88:d5:4a:13:7c:d5:78:55:f9:7b:ec:af:64:
0f:99:a2:e3:b6:2d:62:38:f4:30:10:8b:ed:65:d3:bb:11:51:
d5:52:f4:9b:b3:23:5f:1c:66:9d:2e:b1:af:15:59:e6:db:73:
41:e9:23:02:19:16:97:eb:f3:ff:e1:01:29:05:61:fd:87:51:
24:05:f1:46:37:80:71:c7:fa:42:ae:3b:65:a6:5b:52:0d:86:
70:22:60:77:6e:cc:cb:c0:62:18:08:d4:55:b8:d9:1b:d4:e1:
b6:37:09:3e:9c:5d:9d:60:9c:29:36:bd:b5:d2:6a:e3:b6:51:
a2:0e:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:01 2025 by rpki-client