Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa
File: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (raw, json)
Hash identifier: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=
Subject key identifier: E6:1C:72:13:78:30:70:24:0B:01:D4:36:47:5C:02:DE:D9:72:78:DE
Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial: 1E9BAB535CF3F1D9079BA9439F9795468B69DBCD
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa
Signing time: Wed 01 Jan 2025 07:00:00 +0000
ROA not before: Wed 01 Jan 2025 06:55:00 +0000
ROA not after: Wed 31 Dec 2025 07:00:00 +0000
asID: 149401
IP address blocks: 103.182.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9b:ab:53:5c:f3:f1:d9:07:9b:a9:43:9f:97:95:46:8b:69:db:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Validity
Not Before: Jan 1 06:55:00 2025 GMT
Not After : Dec 31 07:00:00 2025 GMT
Subject: CN=E61C7213783070240B01D436475C02DED97278DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:bb:5f:78:10:8b:b9:26:97:ba:26:42:a9:
99:58:bc:8b:e4:53:02:4a:c2:ba:20:1f:21:13:36:
1d:1b:4f:f7:60:87:9f:fb:c7:a5:78:ad:99:75:8f:
9f:d4:fe:4f:ee:4c:ef:3a:4e:37:88:b3:6a:ab:e6:
16:5a:59:d2:71:ba:1d:d2:50:ec:1c:c8:c2:5f:d5:
16:c0:cf:ad:30:3b:b1:4c:82:be:a6:cb:33:b6:e8:
32:28:c7:b6:0f:70:74:fe:e7:28:c8:8f:2d:a5:ec:
35:19:81:ad:1e:c4:41:c6:7b:c3:7b:6a:b3:45:85:
fb:4a:33:96:52:98:64:e5:21:0e:6f:bc:21:66:66:
5c:f8:a8:bf:d2:70:b8:b0:87:49:b5:b1:97:2b:ab:
8f:e5:a5:79:a7:3d:e8:e7:a9:5b:38:59:a9:41:9e:
ed:0c:9d:1c:c3:08:98:c9:5f:6b:00:01:d6:02:46:
79:2c:47:b4:42:f3:e2:96:9b:05:df:08:4e:b1:e0:
66:f6:40:4b:86:47:ce:92:d4:f9:1d:12:5f:d7:98:
2a:f2:3a:ba:a6:ae:55:f3:70:28:ab:97:f2:e5:ef:
5c:ea:9a:e7:75:3c:49:9c:ea:b2:e1:60:3a:86:87:
a6:1a:a0:06:74:4c:44:ed:90:96:ff:a1:5e:4b:d8:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1C:72:13:78:30:70:24:0B:01:D4:36:47:5C:02:DE:D9:72:78:DE
X509v3 Authority Key Identifier:
keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.80.0/23
Signature Algorithm: sha256WithRSAEncryption
77:de:27:9f:fa:f9:69:35:d4:d4:af:c0:c7:da:2a:42:cf:b6:
ad:a6:e4:fc:29:41:30:14:4b:9a:aa:d2:98:ff:ee:fe:a4:5e:
6a:fe:82:b1:f2:54:82:3c:36:8c:11:d1:ba:41:e0:2b:1c:14:
d2:cf:27:da:a4:70:6c:28:0f:29:84:ca:69:21:4b:a6:e4:58:
00:86:04:79:be:6f:33:6a:e6:aa:40:06:7b:ec:ea:1b:17:83:
38:e4:d0:0f:f0:cb:f3:fa:37:9f:4d:a2:47:dc:6c:0b:e3:85:
1b:8f:ee:16:0d:e2:bd:32:4b:60:14:95:6c:36:0c:d6:f0:4d:
a8:1c:3e:71:83:f1:25:35:33:0c:7d:7f:c6:b2:f1:34:7d:40:
2b:f9:bb:05:33:2c:1a:7b:a6:a4:0f:ed:c1:7a:4d:11:cc:76:
3c:f7:49:bb:61:ac:be:ba:0f:98:02:ad:66:94:ea:38:6e:c3:
ff:2a:3a:d1:46:12:56:a5:cf:23:34:f9:27:77:23:36:f9:9f:
99:ab:f7:d6:a3:0f:f2:a8:6c:b1:0b:03:50:e6:6c:46:e4:57:
96:8b:52:5b:5d:f2:88:d8:18:56:7e:2d:79:30:13:26:30:d3:
64:5e:0d:5e:10:7f:37:7d:97:08:c0:90:d4:37:eb:05:3a:56:
8a:55:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:03 2025 by rpki-client