Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa
File: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (raw, json)
Hash identifier: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=
Subject key identifier: EC:89:19:76:6A:0A:80:0F:6F:17:C5:7E:49:B5:6A:46:00:E3:17:0C
Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Certificate serial: 4DA03C60B26AA882E23768098C15FE195C5AC2DE
Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa
Signing time: Fri 20 Dec 2024 12:00:01 +0000
ROA not before: Fri 20 Dec 2024 11:55:01 +0000
ROA not after: Fri 19 Dec 2025 12:00:01 +0000
asID: 141055
IP address blocks: 103.149.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a0:3c:60:b2:6a:a8:82:e2:37:68:09:8c:15:fe:19:5c:5a:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Validity
Not Before: Dec 20 11:55:01 2024 GMT
Not After : Dec 19 12:00:01 2025 GMT
Subject: CN=EC8919766A0A800F6F17C57E49B56A4600E3170C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d5:84:4e:f2:42:82:08:e9:af:1c:aa:95:54:
5f:da:90:50:ac:5c:db:b8:b5:1d:7a:83:d8:b2:77:
2a:d5:3c:09:f1:a1:ed:43:be:aa:b7:94:e4:9e:94:
63:d1:b3:10:9a:1b:62:0e:af:65:f2:6c:f4:69:0e:
53:38:71:99:21:bb:79:65:0e:dd:a2:49:18:a4:0b:
3b:38:5b:91:64:70:32:cd:4e:81:86:08:8b:e5:b5:
9d:4c:d8:10:c3:67:5e:ff:21:9c:ef:75:83:31:8e:
f3:c4:a6:88:63:8c:a3:35:ba:03:90:85:86:ff:20:
b2:5d:eb:6f:2e:ca:f3:85:b3:9d:8f:4d:ff:fc:b2:
ab:79:67:c4:f3:20:4c:88:7a:63:ab:7b:8f:e3:53:
1c:d0:d5:c5:56:c2:42:a2:f9:75:45:2e:7a:e2:ff:
07:db:1a:44:41:85:e0:21:f3:e8:55:47:c9:a3:c6:
90:a1:69:fd:eb:38:7a:b3:4d:b2:17:56:a6:7a:a1:
13:14:5d:c1:b9:43:c2:4a:12:ee:32:09:f1:a1:53:
d5:ec:f9:98:b8:af:94:b8:a3:8a:13:d1:28:61:33:
ee:06:36:90:97:33:e3:b3:80:06:dc:7c:d5:73:74:
e7:a0:4e:59:a2:4c:c0:7f:d9:1a:27:38:7f:2e:68:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:19:76:6A:0A:80:0F:6F:17:C5:7E:49:B5:6A:46:00:E3:17:0C
X509v3 Authority Key Identifier:
keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:cf:9e:c5:53:cb:4a:e7:17:8b:72:96:46:bc:07:50:3c:4f:
34:52:3d:00:79:9d:7f:ea:9a:aa:3a:ff:10:0b:ba:a0:9c:07:
65:f2:e8:72:de:72:b8:b0:fc:f3:c7:5a:58:19:fe:c7:8e:9e:
23:f4:a7:7e:bd:91:20:c9:12:5c:7e:ee:ea:05:33:20:eb:65:
6c:de:c3:eb:66:ab:5a:b5:e1:ac:17:4d:a7:4e:42:97:d3:d5:
af:db:f6:56:c4:78:00:21:0c:ce:54:b0:73:19:29:83:8d:70:
da:dd:46:a1:40:e0:e2:c4:ff:d7:d6:e2:85:18:48:87:91:6a:
3f:6a:c6:24:3e:ba:dc:98:70:94:db:91:a5:93:44:91:17:4d:
7a:d1:5e:e5:c2:ee:39:41:24:e8:65:d3:ea:e5:3a:6b:df:ea:
f3:ee:e8:4d:87:76:27:38:5a:4e:6c:c0:ec:98:ec:d4:dc:12:
d7:5d:ef:cf:2a:13:56:02:83:59:84:65:2a:3e:1a:0e:c5:55:
8e:1b:98:7c:99:d9:bb:49:e4:92:a1:96:dd:e6:bc:1a:95:82:
e4:a2:67:2a:46:7b:d5:e9:09:be:cc:db:29:da:99:a5:e4:74:
d0:ea:15:96:40:76:8c:cc:38:e9:31:d6:bc:d5:71:90:16:4a:
db:cc:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:17 2025 by rpki-client