Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa
File: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (raw, json)
Hash identifier: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=
Subject key identifier: 3A:F2:FF:1E:5D:50:98:87:F6:15:6D:7F:B6:C8:6A:06:56:22:86:C0
Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5
Certificate serial: 63E96A8384446CFF54A7A1DC8AB11870AA50E444
Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa
Signing time: Tue 22 Oct 2024 03:00:00 +0000
ROA not before: Tue 22 Oct 2024 02:55:00 +0000
ROA not after: Tue 21 Oct 2025 03:00:00 +0000
asID: 151542
IP address blocks: 103.244.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e9:6a:83:84:44:6c:ff:54:a7:a1:dc:8a:b1:18:70:aa:50:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5
Validity
Not Before: Oct 22 02:55:00 2024 GMT
Not After : Oct 21 03:00:00 2025 GMT
Subject: CN=3AF2FF1E5D509887F6156D7FB6C86A06562286C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:9b:f7:2c:9d:82:bd:a5:8d:8f:4e:83:93:
7b:07:7e:8e:20:5d:bd:6f:47:bd:2e:5f:ca:b4:c8:
f6:a1:da:01:b1:f9:08:7d:79:7d:48:76:f8:20:51:
81:e5:83:c9:16:1e:a2:04:eb:06:98:b2:98:22:4f:
80:7b:f8:cc:1f:69:71:c2:3f:f1:48:b7:29:0c:ef:
95:e7:ed:9d:59:7f:60:eb:de:b8:e4:db:44:83:ba:
48:d4:94:8a:3b:b3:c3:d1:58:d4:db:86:86:ff:3c:
73:2a:b9:1d:fe:76:5b:a0:90:4d:f2:6f:60:c4:48:
95:25:1e:5d:1d:41:bb:05:0e:e5:ca:ce:d2:75:9f:
ee:63:a8:e1:6a:85:ad:47:99:16:33:0d:a9:61:9b:
c7:cc:d8:31:42:4e:aa:19:bb:88:7e:e6:dd:f9:43:
30:62:15:ac:93:7e:7b:45:e2:c1:ec:70:9f:df:f9:
d9:69:7c:c1:23:50:b8:ec:74:6c:dc:0f:46:b1:2d:
e6:1f:4a:0e:e6:0c:dd:16:cb:14:e6:fc:0c:ee:65:
03:fc:7c:f9:49:b2:c1:f9:70:12:1a:2c:d7:a0:19:
6c:90:bd:7a:1d:af:71:2c:67:8d:70:dd:65:bd:29:
64:2e:95:75:bf:88:e6:57:61:73:6b:66:f9:09:09:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:FF:1E:5D:50:98:87:F6:15:6D:7F:B6:C8:6A:06:56:22:86:C0
X509v3 Authority Key Identifier:
keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.106.0/23
Signature Algorithm: sha256WithRSAEncryption
54:52:a4:43:a4:73:cc:1e:4a:0e:b4:bc:81:35:15:83:9c:4d:
7d:3a:23:31:78:0f:3b:6f:fc:a5:9f:3c:77:94:25:c3:28:38:
27:55:78:ed:fd:2b:40:af:fa:d5:35:d5:75:6f:3a:3f:8d:77:
77:07:13:c7:13:e0:55:10:0e:13:ac:8e:1e:fb:eb:4b:5f:97:
06:28:dd:b5:52:a5:7d:91:8b:38:3a:49:db:f0:66:b5:f6:ec:
b4:0f:10:cb:02:7b:f0:28:33:67:ba:05:76:ac:95:e5:fe:81:
c4:01:10:1b:63:23:73:6e:96:8b:bd:e1:e7:44:16:0e:0d:b2:
73:d9:c1:63:2a:34:2e:9a:09:8c:b6:c6:4e:fd:c7:fe:95:7c:
a9:d7:3a:46:b6:55:e4:e8:02:4f:6c:7e:fb:c4:c6:86:75:b0:
87:1e:7e:37:28:f6:46:59:b4:9a:b5:8e:ab:6f:bd:17:70:76:
16:42:c5:db:82:31:64:62:50:d5:b7:44:b4:e1:ea:0b:32:74:
02:55:d7:4b:b1:94:78:0f:e3:d5:2e:ba:71:e6:73:20:63:5d:
41:f5:74:ed:bc:3b:41:53:02:ae:e9:a1:27:87:a6:49:d6:d1:
3c:7a:b1:95:e7:c8:18:06:9b:c5:42:e5:f6:58:46:88:01:dc:
08:f5:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:43 2025 by rpki-client