Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa
File: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: STe7OT88PHJHnz531m1I5MVHYJjriMNPu+KdDXd+zTA=
Subject key identifier: 42:69:1A:C0:52:A9:F9:70:40:A7:4F:56:91:71:86:3C:55:9C:E4:AA
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 209439A4C280ECFE3C0DB185F08AC3E167274614
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa
Signing time: Thu 02 May 2024 01:00:00 +0000
ROA not before: Thu 02 May 2024 00:55:00 +0000
ROA not after: Thu 01 May 2025 01:00:00 +0000
asID: 138090
IP address blocks: 103.124.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:94:39:a4:c2:80:ec:fe:3c:0d:b1:85:f0:8a:c3:e1:67:27:46:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: May 2 00:55:00 2024 GMT
Not After : May 1 01:00:00 2025 GMT
Subject: CN=42691AC052A9F97040A74F569171863C559CE4AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:03:df:50:30:7b:2f:d4:ea:4c:8f:6a:49:
9a:42:f7:2b:a1:40:6d:fc:36:5f:a1:ef:a4:7b:02:
f2:43:f8:79:16:62:49:43:31:83:78:ab:84:7b:11:
03:42:c0:dc:36:c6:6c:f2:11:65:32:f7:3d:53:0b:
39:09:81:19:4b:ba:22:ee:9c:d3:69:36:db:46:f3:
69:c3:a8:d2:b7:14:48:57:4c:fb:20:32:9d:fa:93:
d7:94:65:5d:ad:04:9f:d0:00:25:65:6c:e7:88:35:
5a:bf:df:95:9f:35:f3:1b:e8:72:85:45:51:19:42:
84:23:ac:ab:61:1a:76:0a:f9:89:3d:bb:b0:44:51:
96:53:05:95:d5:0f:43:a6:9e:77:11:b5:28:f8:a9:
59:89:e4:a2:a1:5a:a3:89:c4:9b:78:db:31:8f:75:
68:13:fb:fa:ea:19:57:57:98:88:ae:24:82:a6:0a:
00:26:0a:1f:ee:e8:c5:33:4c:7a:c2:35:0b:6b:c4:
e2:49:f1:e2:b8:15:54:99:0e:fc:56:1d:7a:b3:0c:
3f:05:d9:ee:16:be:bf:db:b1:f3:b5:15:cd:3a:4e:
36:4d:00:31:59:db:cf:b5:4b:94:ba:59:0e:f9:21:
c7:d2:ef:5c:5c:a6:04:05:d9:9a:d6:52:c6:a7:fa:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:1A:C0:52:A9:F9:70:40:A7:4F:56:91:71:86:3C:55:9C:E4:AA
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.245.0/24
Signature Algorithm: sha256WithRSAEncryption
91:37:29:91:e5:11:46:cb:f7:61:6b:a5:45:b5:e3:d3:d2:15:
9c:c6:86:0d:90:46:16:86:cf:36:fc:b3:85:02:e6:5e:51:50:
52:c1:6d:69:8e:d8:4e:70:68:b7:65:a6:cd:09:6c:dd:56:72:
d2:12:ab:6b:c4:f4:08:f8:ce:7e:ef:e8:7d:fa:48:90:17:20:
b8:36:98:00:be:9a:66:a6:0f:22:ff:9c:f6:7b:e9:af:c5:33:
a9:e9:94:3b:06:77:c6:05:8b:ec:9b:5f:ad:a5:e3:99:b9:55:
63:e5:f6:24:a2:0e:9b:23:6f:dc:ac:34:60:62:74:cd:15:df:
39:14:71:70:ca:bf:3d:6b:02:8a:2d:56:a6:10:0f:f5:da:90:
b7:d6:24:1f:dd:3b:be:23:2a:4c:b6:2c:2f:e2:99:de:4d:8a:
72:e5:0d:8f:27:54:5c:25:68:ec:d0:11:b4:12:3c:67:ab:a5:
6b:63:77:35:27:9a:3b:ae:0b:dd:ed:59:96:53:f3:ad:9a:45:
dc:27:9a:9f:89:1c:21:2c:4e:af:4c:39:7d:5c:0e:ba:57:c4:
8c:da:f1:17:4c:79:62:cc:9c:3e:42:c9:22:6a:83:d5:11:5c:
b0:fa:b1:78:18:ff:da:23:60:72:9c:bc:7f:a0:2c:47:8b:9a:
c2:8a:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:24 2025 by rpki-client