Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130352e302f32342d3234203d3e20313333383334.roa
File: 3130332e35382e3130352e302f32342d3234203d3e20313333383334.roa (raw, json)
Hash identifier: LS8Yj1lxs0MVVMKraqPXX93mHEPhtns59WSlD6oKLGM=
Subject key identifier: A4:89:D2:CC:DD:24:B2:6E:76:C1:F8:1A:5C:4D:92:C9:08:A8:95:CC
Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Certificate serial: 133449F2D332A866AB52D3A87CF9CA55EAD631F0
Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130352e302f32342d3234203d3e20313333383334.roa
Signing time: Mon 06 Nov 2023 06:23:26 +0000
ROA not before: Mon 06 Nov 2023 06:18:26 +0000
ROA not after: Mon 04 Nov 2024 06:23:26 +0000
asID: 133834
IP address blocks: 103.58.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:34:49:f2:d3:32:a8:66:ab:52:d3:a8:7c:f9:ca:55:ea:d6:31:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Validity
Not Before: Nov 6 06:18:26 2023 GMT
Not After : Nov 4 06:23:26 2024 GMT
Subject: CN=A489D2CCDD24B26E76C1F81A5C4D92C908A895CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:9b:72:2b:14:7c:b3:69:fc:34:e0:f6:33:
3f:46:eb:ea:42:80:4e:2d:82:3d:dc:69:9f:98:a7:
a0:ac:53:8a:df:42:79:76:ad:8a:e5:45:84:aa:d2:
c5:13:2b:58:39:98:e8:bd:10:3c:12:4c:b7:fb:fc:
36:6f:25:2b:69:5d:4f:db:1c:54:94:a2:40:b8:48:
77:6a:18:1e:2d:33:cc:49:5a:80:7b:c6:43:49:25:
6f:7b:a0:4a:90:a6:39:15:01:92:4c:22:cd:37:c4:
1b:3f:79:36:6e:e0:3d:73:db:ba:40:c2:20:f0:72:
68:8c:85:ad:68:7f:33:5c:e1:f4:81:f7:10:86:03:
bb:07:d6:9e:f9:89:00:43:6b:d9:65:f4:b8:91:85:
5a:db:98:b1:32:a2:59:53:55:37:77:cc:21:23:3f:
d5:71:61:99:6e:97:e2:38:e5:00:6c:22:42:d1:dc:
64:4d:d4:5a:b5:44:27:89:88:17:e5:36:2d:ee:a3:
fb:74:9a:de:a0:02:eb:6b:99:85:63:25:5f:c6:3b:
21:84:c0:b5:07:a9:5d:da:17:96:7e:39:8d:ee:81:
0a:94:ff:c5:92:32:e2:64:1f:ec:11:66:fc:50:68:
1e:84:8e:59:e9:4c:81:a0:fe:df:70:ac:45:f3:2d:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:D2:CC:DD:24:B2:6E:76:C1:F8:1A:5C:4D:92:C9:08:A8:95:CC
X509v3 Authority Key Identifier:
keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130352e302f32342d3234203d3e20313333383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.105.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0f:cd:c8:ff:d7:d5:74:d6:f3:75:97:1f:ca:88:70:e2:1c:
f8:04:61:13:0a:8e:71:44:1c:7c:08:9e:31:dc:81:74:47:ab:
b0:44:0e:ad:7f:f7:ac:d0:39:cc:de:94:7b:ce:35:28:91:97:
e6:75:40:95:fa:d2:b2:10:b8:f3:79:4b:81:33:9c:63:97:e6:
dc:b4:86:92:2c:df:fd:db:48:b4:78:93:af:03:ae:29:08:87:
ee:6a:fc:47:a6:ee:bd:da:ea:a7:d0:7b:66:c7:5b:0e:6a:9b:
47:25:a2:8d:7e:49:27:34:8e:66:ff:58:d5:cf:1b:14:5a:40:
f8:da:b8:7e:0d:be:3b:b9:ad:9c:3c:05:8c:e7:bf:11:3e:c5:
7d:00:fe:a4:49:99:b7:b9:c1:01:2e:37:40:06:56:67:09:29:
a7:f9:3c:63:86:35:c1:88:de:be:48:37:f3:ff:75:39:7b:a3:
b0:90:64:25:c3:6c:a3:65:66:90:d9:89:c5:7d:b8:bc:18:ff:
2e:45:8a:c8:e9:38:ff:8e:b3:f5:58:b5:43:2e:24:d1:89:7e:
76:97:b6:c5:dc:d4:70:29:72:c2:9e:89:aa:b0:2f:7c:d7:47:
78:d6:2e:ba:3b:4f:a5:16:de:37:9b:ff:a7:e8:67:9f:50:02:
76:a1:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:57 2025 by rpki-client