Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa
File: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (raw, json)
Hash identifier: 6c26JZWNMMIKbz8QiOgDDGQqpXGJuiNocLMDMSpKyVk=
Subject key identifier: 5E:40:7C:40:39:32:FA:05:E6:82:6C:E7:CF:B5:81:88:0D:D0:93:C6
Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B
Certificate serial: 0958E6AEE1F94B9124FF2D511392284497008F19
Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa
Signing time: Thu 19 Dec 2024 11:00:01 +0000
ROA not before: Thu 19 Dec 2024 10:55:01 +0000
ROA not after: Thu 18 Dec 2025 11:00:01 +0000
asID: 147154
IP address blocks: 103.176.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:58:e6:ae:e1:f9:4b:91:24:ff:2d:51:13:92:28:44:97:00:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B
Validity
Not Before: Dec 19 10:55:01 2024 GMT
Not After : Dec 18 11:00:01 2025 GMT
Subject: CN=5E407C403932FA05E6826CE7CFB581880DD093C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4a:b4:3d:1b:36:76:aa:d9:6a:f7:ff:45:b6:
9a:a9:64:2f:b6:1e:f4:f1:9f:d3:d9:8f:73:b2:eb:
ac:a2:83:2a:e8:19:f5:37:57:3e:50:e8:7e:16:ef:
f2:02:7e:aa:2a:5a:8f:30:a3:a1:a9:cf:e1:4c:f0:
50:a0:a1:50:5b:0e:22:38:2d:c3:a1:7d:f3:41:e3:
b2:91:d1:3b:ec:d2:17:b9:ee:c1:c8:85:a7:ea:2b:
de:5e:3a:38:20:3c:b1:2b:e0:51:a3:1a:54:ee:32:
aa:e2:6d:2f:18:fb:71:bd:f1:12:93:4d:33:09:5b:
88:c6:c2:17:f5:65:7f:d9:51:3a:e3:f9:4a:7d:4d:
4e:13:4b:94:a8:1f:fb:ee:c3:24:07:b7:33:ab:27:
7d:d4:d7:2b:de:93:03:d4:49:48:da:39:0c:45:83:
08:e5:d8:96:7f:ee:4d:19:76:11:ca:24:9c:fb:49:
7c:8e:91:d0:b5:2f:6e:dc:af:75:ce:a0:f0:5c:3b:
92:e6:f4:60:d7:a6:99:5c:36:c0:83:21:17:0f:3a:
ee:43:7b:c8:fc:b8:27:39:2e:9b:8b:e2:6a:64:db:
23:14:45:0b:95:14:01:bf:4e:6d:4c:6f:d6:46:4f:
8b:16:47:64:a8:29:3e:04:44:eb:9c:64:51:db:ad:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:7C:40:39:32:FA:05:E6:82:6C:E7:CF:B5:81:88:0D:D0:93:C6
X509v3 Authority Key Identifier:
keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fe:f5:df:83:c0:c1:dd:4f:9a:94:9a:89:c6:e6:f6:80:9f:
b6:6f:70:ee:1b:a8:3e:ab:8d:7e:c2:42:05:2d:c9:4f:3e:82:
0a:c6:e7:c1:db:9b:c1:6a:52:76:55:cb:d5:84:94:0b:eb:2a:
53:1d:25:aa:9c:6d:c7:2c:fd:84:36:be:ca:b3:d9:bd:f6:06:
f9:cb:a7:40:cc:06:f5:85:e2:37:58:3a:42:63:e5:64:13:12:
17:88:d7:ad:3f:48:00:84:2a:dc:8e:e5:79:d1:d2:5a:1c:9c:
a5:fd:97:16:26:b4:f6:f6:58:d6:d7:e9:b0:0f:15:79:9b:b2:
e5:0e:43:db:1a:0a:0f:49:35:a6:7a:c1:c5:1f:92:6b:1b:d5:
3c:19:51:d3:d8:06:c7:c1:2a:fe:f7:76:cf:38:5b:cc:e9:54:
40:10:c2:04:da:2e:25:33:cc:9b:65:f2:2c:51:b8:43:83:77:
74:f5:d0:b3:46:53:69:17:90:d7:fd:65:d2:7d:2a:21:b6:06:
f7:40:d6:96:ca:5b:b3:96:a2:fb:8a:4e:36:b3:a0:c1:27:a6:
7d:0d:c9:e9:09:c2:f4:2d:f6:ad:71:74:d9:a7:1d:70:2c:8b:
90:aa:cc:b5:58:55:83:99:45:9f:4a:b4:5f:0a:f2:7e:6c:1f:
ba:08:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:10 2025 by rpki-client