Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
File: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=
Subject key identifier: F9:CF:6A:6A:B5:A0:A7:63:16:05:50:FF:0D:5C:28:5D:81:8A:55:13
Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB
Certificate serial: 7FC5A8E65BED3DC9DAB666497306E973FB6D766D
Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
Signing time: Thu 26 Dec 2024 02:00:02 +0000
ROA not before: Thu 26 Dec 2024 01:55:02 +0000
ROA not after: Thu 25 Dec 2025 02:00:02 +0000
asID: 58820
IP address blocks: 103.185.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c5:a8:e6:5b:ed:3d:c9:da:b6:66:49:73:06:e9:73:fb:6d:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB
Validity
Not Before: Dec 26 01:55:02 2024 GMT
Not After : Dec 25 02:00:02 2025 GMT
Subject: CN=F9CF6A6AB5A0A763160550FF0D5C285D818A5513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:81:ca:ed:ac:cd:a4:56:75:a4:7b:a2:2d:
64:58:e4:64:a2:28:2d:03:85:fd:54:8b:3e:20:de:
4d:32:52:c4:42:eb:74:4c:9b:85:36:0f:95:fe:ec:
48:88:54:5f:5a:63:b7:7c:f0:5c:6a:fd:06:57:4c:
f2:cb:6b:c4:e1:40:b2:bc:20:53:f6:55:18:fd:3b:
b9:f9:8e:a4:69:de:61:f9:4c:69:fc:64:e6:eb:56:
d3:71:d5:2f:69:81:f6:1f:77:8d:e1:0d:f2:e7:f5:
bc:69:03:3f:a0:16:1b:ba:8f:71:6a:26:6e:d2:f9:
ce:06:cd:33:9c:78:39:10:b0:df:1b:df:63:3e:ed:
7e:90:89:22:2c:b8:fe:95:5d:8f:9e:96:9a:e4:c1:
34:66:b0:b7:98:be:eb:b8:be:4e:c4:64:aa:dd:6f:
65:19:52:2c:72:85:f6:38:b4:75:c0:50:5f:2c:59:
2e:c7:3b:d1:4b:79:43:4c:65:52:21:3b:33:31:e7:
9f:0e:3f:00:49:e8:d2:84:93:e3:0f:d5:f4:5a:a4:
18:f3:4c:81:7d:d4:0f:d7:14:c7:f5:23:81:50:18:
7c:d4:fb:09:21:40:c9:da:a2:be:7e:51:ba:64:c8:
7f:fa:06:b5:de:35:81:b2:3c:da:b7:90:16:25:72:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:6A:6A:B5:A0:A7:63:16:05:50:FF:0D:5C:28:5D:81:8A:55:13
X509v3 Authority Key Identifier:
keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.82.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7b:55:65:cb:9c:07:c1:29:34:6d:4a:4d:cc:6f:91:56:e6:
46:bd:7a:48:5b:56:0c:bd:9f:7d:fb:9c:76:92:8e:ea:35:df:
42:f8:5a:f3:46:6a:1d:ca:0e:dd:d2:1b:ee:4a:33:b9:72:9d:
34:4b:b2:8b:7b:20:7a:e0:98:73:7d:bc:b1:78:cc:d6:d3:f2:
7f:a8:21:60:1c:ee:4c:48:46:aa:2d:f6:a4:ab:7b:c4:8c:1b:
7a:6f:cb:b0:9d:ce:5c:3d:18:46:a9:02:d5:ee:7a:75:dd:ef:
45:4c:69:8a:83:8f:b5:08:b0:1d:35:71:58:72:03:89:3d:94:
8c:54:9d:b5:4d:38:4e:3f:25:18:e0:ed:9b:b0:2e:65:26:1b:
6f:e1:15:2d:da:38:23:f5:6d:bd:63:71:2c:34:64:34:dc:12:
e5:e2:bd:9d:78:bc:0d:16:44:ee:c5:b5:e2:0e:52:96:d0:c1:
1c:d9:ce:6f:0d:75:b9:91:43:36:7a:0a:fd:c5:40:19:cd:58:
09:24:e1:ff:4a:7c:dc:ff:06:76:2c:11:33:90:64:eb:9a:71:
d5:a4:6b:2d:23:d0:50:c5:22:26:a6:3f:45:03:ed:a0:bb:4b:
50:89:eb:37:53:3b:31:e1:00:37:33:f8:6f:18:33:86:c9:c7:
6e:60:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:22 2025 by rpki-client