Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
File: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (raw, json)
Hash identifier: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=
Subject key identifier: A9:C9:C8:A1:F1:30:43:04:0B:8A:4C:A2:45:20:35:C0:29:8F:3F:54
Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial: 1955A54DC6AAE363546D2898C69E03F82A96BC8E
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
Signing time: Fri 06 Sep 2024 15:00:00 +0000
ROA not before: Fri 06 Sep 2024 14:55:00 +0000
ROA not after: Fri 05 Sep 2025 15:00:00 +0000
asID: 149401
IP address blocks: 103.182.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:55:a5:4d:c6:aa:e3:63:54:6d:28:98:c6:9e:03:f8:2a:96:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Validity
Not Before: Sep 6 14:55:00 2024 GMT
Not After : Sep 5 15:00:00 2025 GMT
Subject: CN=A9C9C8A1F13043040B8A4CA2452035C0298F3F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:96:94:d3:ac:6c:26:a7:41:62:a7:5b:88:
7f:d8:a2:b4:b7:08:6a:82:07:f6:fe:9a:53:65:d1:
8e:6f:47:88:d2:d5:e6:75:21:10:ab:fa:f7:a2:fd:
e9:94:71:b6:8f:0e:57:9b:de:2d:75:b0:72:72:ac:
1e:f1:5f:41:78:27:a9:f8:36:26:5e:e8:53:6e:70:
e9:7b:2e:d0:78:b9:73:de:3b:32:9f:6b:e8:94:4d:
7b:72:e9:a9:53:bb:17:a6:86:01:66:7d:37:01:3a:
1f:1c:99:76:2c:a1:4a:88:97:cd:35:ae:1a:7e:4d:
29:18:68:de:54:a2:eb:1e:5b:75:a9:36:f2:08:a4:
1c:bb:fb:c8:1c:2d:77:76:12:13:fe:f4:e1:b0:6f:
5e:0f:8a:bf:43:30:0e:3d:d7:83:d2:ef:93:bb:20:
e9:43:ee:5e:38:75:f9:ec:6e:08:55:01:06:15:8d:
d1:a8:b6:4b:3c:53:05:81:93:81:3a:b9:18:24:66:
98:a8:fb:21:fb:1b:b7:eb:c9:41:83:85:b0:6f:64:
f6:c0:0a:41:3a:f2:ad:ca:53:08:4f:30:0b:bf:a1:
4d:93:31:a5:43:76:0b:d7:89:cc:de:a4:ba:45:80:
44:9e:7e:46:80:3b:3e:b8:33:53:1d:9e:8a:f2:56:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:C8:A1:F1:30:43:04:0B:8A:4C:A2:45:20:35:C0:29:8F:3F:54
X509v3 Authority Key Identifier:
keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c1:7b:04:c8:a7:b1:08:d7:02:97:16:74:24:e1:a1:00:ec:
46:bb:80:00:6d:d6:9e:72:65:0c:66:cb:ca:0b:6d:fe:eb:c7:
79:c3:e1:22:e5:3c:00:b6:03:76:4f:e9:91:0e:2c:45:a7:be:
41:0b:b2:11:ee:f6:78:a5:0d:66:8b:e3:71:1a:4c:f7:20:75:
bb:7a:d4:77:6e:33:ad:00:29:e5:46:67:a0:a7:0e:bb:e4:9c:
05:ec:bd:70:af:98:54:9f:30:df:5c:ac:2d:4c:ac:1d:53:7c:
a3:dc:d1:95:95:f7:1c:45:fb:9e:d3:7a:90:53:63:9e:37:5f:
08:98:8d:49:fd:0f:51:ce:f1:ef:5e:99:82:f8:8b:67:61:54:
a5:81:ef:df:91:f3:39:94:c9:40:2a:20:f1:b5:be:bc:79:b9:
2f:57:31:f3:aa:10:7c:61:f0:92:9e:18:83:66:78:d8:05:c4:
42:45:61:f1:44:b1:11:aa:51:7f:6f:dc:bc:d0:90:b2:85:38:
03:86:d8:11:d7:06:c5:76:55:9d:9a:d2:1a:ce:98:dd:c5:80:
fb:e9:86:c5:15:79:74:f7:2b:20:be:3e:ff:74:e7:ce:67:77:
9d:c2:6f:18:2b:7c:f2:0d:8f:d9:9f:e3:b0:df:1b:e0:bf:06:
64:9b:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:10 2025 by rpki-client