Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
File: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (raw, json)
Hash identifier: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=
Subject key identifier: E3:8F:A4:C3:04:8D:5C:9A:96:D8:C1:32:FB:1A:DA:60:AC:70:75:EA
Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial: 07113E5970E8513F05006EF0CE11D4F0F2DB578C
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
Signing time: Sat 11 Jan 2025 06:00:00 +0000
ROA not before: Sat 11 Jan 2025 05:55:00 +0000
ROA not after: Sat 10 Jan 2026 06:00:00 +0000
asID: 17670
IP address blocks: 103.213.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:11:3e:59:70:e8:51:3f:05:00:6e:f0:ce:11:d4:f0:f2:db:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
Validity
Not Before: Jan 11 05:55:00 2025 GMT
Not After : Jan 10 06:00:00 2026 GMT
Subject: CN=E38FA4C3048D5C9A96D8C132FB1ADA60AC7075EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:a6:bc:2d:a4:42:12:3a:a4:dd:13:fe:40:
04:9d:3f:20:65:5c:16:ce:e4:bc:08:18:76:78:b6:
50:de:c9:2c:27:bc:a7:25:dd:a7:6e:3d:3e:88:f2:
b9:60:e2:b3:5b:e9:f2:b0:1e:bb:97:65:71:65:61:
76:08:59:7b:94:9f:97:a4:90:53:c0:5a:b9:2f:a6:
56:12:1e:21:95:dd:c9:72:2b:7e:fd:87:27:0a:d3:
73:d2:56:d7:95:05:8a:87:dc:81:66:b0:0a:f9:a0:
7d:0c:7d:51:29:81:77:a1:42:c2:f5:d5:f7:29:f2:
e1:f8:f4:10:6c:58:3d:bc:95:f1:34:49:6a:2e:c3:
c8:e7:ee:fc:a5:4a:1f:4d:36:01:a3:71:3a:3c:01:
7d:8e:5c:bb:ac:dd:a9:24:00:9c:70:90:fe:6a:59:
0e:8e:d0:8f:04:d8:0a:10:fd:3c:0b:d3:4b:df:1e:
20:68:e4:dd:23:9b:0f:f5:79:38:9b:41:7e:ba:17:
28:f4:9c:bd:fa:e2:0c:f9:29:6d:90:ca:98:a8:9b:
14:e0:d8:a8:7a:41:8e:58:ef:ed:cc:9e:20:6b:5a:
99:b8:22:3e:71:50:72:ca:37:4b:89:60:e0:04:df:
67:4e:89:93:ff:7d:ef:f1:54:67:f6:da:89:f5:f3:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:A4:C3:04:8D:5C:9A:96:D8:C1:32:FB:1A:DA:60:AC:70:75:EA
X509v3 Authority Key Identifier:
keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.128.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:2f:78:e5:0a:58:6c:fc:f4:fe:18:f4:6c:af:45:67:f1:31:
c3:fc:a7:e9:8d:26:5b:bc:56:19:03:73:e9:26:eb:97:83:22:
e1:a9:c6:18:3a:4c:73:03:83:97:4d:5f:3b:6a:16:26:66:19:
c1:e1:3b:4c:9a:8b:cf:9d:41:a8:33:59:a5:25:0e:5e:60:bd:
8e:0b:2d:ad:fa:57:14:53:8e:ff:bb:41:ab:c9:6b:68:26:79:
44:38:20:6c:a9:b3:be:93:63:fb:15:ac:7e:4f:bb:95:4a:3b:
8e:2a:f1:3a:fc:f5:a1:a7:a5:74:b4:46:7c:f2:81:22:e0:fb:
7b:27:be:09:df:9e:10:93:25:41:cf:ef:bd:98:2d:f2:52:9b:
db:2e:6f:78:e4:d6:3c:9d:f4:30:ac:d5:d0:b8:38:bd:72:86:
6d:be:95:c9:11:59:6c:f5:a2:55:c4:2f:6c:cb:10:4a:65:30:
39:02:dc:ef:c6:6f:4a:37:28:d2:08:5f:be:33:da:56:b7:9d:
c0:f5:4f:6a:75:e2:c4:96:8a:b5:16:4d:a2:f2:95:a2:27:99:
c8:28:9b:bd:5a:0d:6a:f6:8f:33:79:b0:04:90:21:8a:da:30:
0d:75:02:0b:4e:ee:69:a8:20:2b:13:5f:63:a0:04:1f:8f:71:
f2:50:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:09 2025 by rpki-client