Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
File: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (raw, json)
Hash identifier: PclkaQEExnEq6Plp0ETJpHDW+UGjqsl26yjUnKIcI7k=
Subject key identifier: 0E:29:15:E1:50:96:1C:BA:4B:40:35:8B:C5:C2:33:29:0B:1F:45:BA
Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial: 39F6919EFE87A4F531074C9768D29F26D4B9B5AE
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Thu 05 Dec 2024 23:55:00 +0000
ROA not after: Fri 05 Dec 2025 00:00:00 +0000
asID: 147120
IP address blocks: 103.175.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f6:91:9e:fe:87:a4:f5:31:07:4c:97:68:d2:9f:26:d4:b9:b5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Validity
Not Before: Dec 5 23:55:00 2024 GMT
Not After : Dec 5 00:00:00 2025 GMT
Subject: CN=0E2915E150961CBA4B40358BC5C233290B1F45BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:e3:5f:4e:2a:7d:aa:e8:97:90:8e:04:48:
53:ca:30:74:82:da:dc:09:93:94:ac:b9:f3:ce:c7:
fd:b4:03:48:77:95:a5:de:0a:fd:68:f2:0e:8a:c1:
f1:96:db:9a:a5:be:6c:25:04:62:20:90:a2:ec:c7:
5a:19:dc:f9:f5:ee:4d:ae:eb:5d:b6:a3:45:d1:db:
96:40:d3:13:09:5d:be:a0:29:3f:f3:27:47:70:6f:
f2:dd:39:33:44:55:06:ba:82:b2:87:43:26:0e:47:
c3:24:45:0d:f8:9f:12:01:f7:1f:00:a4:a8:f9:17:
9b:5b:4d:e6:4e:f3:56:2d:7e:99:ec:9e:0f:a5:74:
4c:fe:93:8b:7b:e5:4e:54:67:cf:75:91:3a:83:0f:
3f:9f:2b:79:3f:d7:ee:67:39:0a:19:90:78:31:29:
04:61:fa:19:c5:52:eb:68:66:43:d8:90:fa:fe:51:
bd:f4:39:f6:4d:84:6c:92:61:06:a7:79:ca:b9:f7:
39:ad:eb:f1:5d:e3:56:9b:61:33:89:6f:a4:f5:dd:
0e:41:49:97:4d:c5:af:f3:ef:ec:e2:c9:1f:7e:cb:
a3:a5:12:87:b0:9d:51:c4:5d:5a:19:f4:fc:8d:fb:
4a:2d:d8:fa:f8:db:db:31:a3:5f:ef:00:0d:76:62:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:15:E1:50:96:1C:BA:4B:40:35:8B:C5:C2:33:29:0B:1F:45:BA
X509v3 Authority Key Identifier:
keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:77:cb:54:c7:ea:62:9d:bd:6d:a7:60:25:d5:38:47:5b:bb:
9a:cc:62:1d:0e:75:4d:c1:61:db:3e:e0:08:a5:89:31:d9:c9:
c7:8a:29:91:9b:52:26:ec:16:e2:65:55:96:e9:e3:bd:c1:6f:
0c:87:74:39:fd:5d:9e:dd:a3:e6:44:a9:6d:4c:27:c1:58:fc:
5b:87:39:3e:61:e1:3b:d9:cb:32:e9:47:f6:13:fe:da:97:08:
8a:67:e3:68:91:89:e0:0f:ef:c0:7d:5b:a5:8e:92:07:70:20:
37:1b:45:a1:ee:7e:ec:28:7c:41:f1:87:1f:5e:58:58:9b:73:
c4:96:ce:14:c1:e2:c2:59:d1:bc:23:c2:87:8a:d0:a5:09:cd:
a1:c3:c2:97:10:00:96:75:d8:11:58:d2:73:49:7f:56:4b:22:
f1:1d:c8:ee:9f:7b:5e:be:a1:4b:f7:f4:de:b3:5b:af:ef:af:
5c:ab:25:55:b6:e9:67:0b:0e:99:82:5f:b3:4d:f1:a3:22:db:
2e:b5:c3:cb:6e:5a:a6:f8:53:38:ac:f3:d8:60:8f:fb:75:af:
cd:aa:b2:7a:8b:14:a8:77:fd:65:c3:dc:50:f4:63:cd:f4:2e:
fe:ce:5d:bd:0e:d8:98:1b:5b:e2:18:95:08:0b:de:2e:57:cf:
aa:29:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:19 2025 by rpki-client