Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa
File: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (raw, json)
Hash identifier: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=
Subject key identifier: 90:27:1B:4B:AD:5B:E6:E8:48:83:67:1C:76:74:16:1C:E5:BA:7B:93
Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial: 1C292D24CAFC606C7B9FADB95E45EA584E777EFC
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa
Signing time: Sun 29 Dec 2024 08:00:47 +0000
ROA not before: Sun 29 Dec 2024 07:55:47 +0000
ROA not after: Sun 28 Dec 2025 08:00:47 +0000
asID: 138102
IP address blocks: 103.125.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:29:2d:24:ca:fc:60:6c:7b:9f:ad:b9:5e:45:ea:58:4e:77:7e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Validity
Not Before: Dec 29 07:55:47 2024 GMT
Not After : Dec 28 08:00:47 2025 GMT
Subject: CN=90271B4BAD5BE6E84883671C7674161CE5BA7B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:06:03:e3:87:d1:5f:5e:f7:cd:cb:9e:77:
69:1e:bd:ac:f2:ab:3c:68:e7:aa:8c:8c:80:a5:b6:
f5:63:c6:2a:26:6a:42:b8:55:97:87:51:73:49:15:
a8:57:af:99:a0:0b:57:0e:cf:f9:e0:6c:14:e3:8f:
93:8f:24:f1:f8:9a:16:9f:1c:ae:7c:0e:39:ca:45:
a6:2e:75:d1:46:a9:bd:95:ca:69:dc:98:13:96:8b:
7b:d6:43:da:38:0f:5a:13:00:d4:09:c7:27:89:7a:
2a:44:9f:53:71:4a:80:40:7c:60:e3:7c:8c:5c:8d:
5c:5f:00:d7:67:9c:ea:5f:b0:62:a7:f3:b3:72:df:
f7:af:37:12:26:1b:1d:fa:d3:7d:67:e1:4d:11:06:
82:68:ad:71:6f:ec:16:16:17:e4:e5:17:fe:c3:08:
c4:2a:c3:20:de:44:44:b0:11:d0:f1:d5:29:c9:ff:
b0:da:f7:a5:e8:6f:50:ae:45:f6:b5:83:02:39:37:
e9:ed:bd:71:47:f8:fc:66:60:0d:f3:f8:84:62:2e:
a3:70:ac:5c:01:cf:95:17:96:86:a4:55:63:c3:05:
0f:d9:ad:38:ad:10:29:cf:da:56:a4:39:4e:bb:4d:
7f:fe:ea:67:79:9e:d0:49:48:b0:88:6b:29:f1:fc:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:27:1B:4B:AD:5B:E6:E8:48:83:67:1C:76:74:16:1C:E5:BA:7B:93
X509v3 Authority Key Identifier:
keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.118.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e9:7f:9b:b1:63:f0:f3:9a:78:b9:03:f0:df:87:f4:39:48:
2f:03:4b:6c:8a:67:a7:9b:67:a0:ba:7a:10:26:cc:94:6c:72:
83:ee:ab:03:4d:0c:61:6a:35:36:0f:cd:3c:06:df:4b:f0:a3:
08:ce:39:fc:10:fe:76:c6:fd:33:a0:07:e6:f2:c3:a5:8b:01:
8b:02:03:7e:a2:f1:f5:13:23:d8:17:26:91:a7:7f:08:49:24:
e6:c0:9e:36:90:21:ca:25:a1:44:ab:cf:5c:da:b0:3c:d2:77:
c2:7b:1f:59:50:8f:f4:91:b5:b1:64:0a:d3:dd:48:3c:f7:94:
55:3a:39:7c:9b:16:52:0d:51:71:d9:f1:34:c8:88:c8:f5:70:
6d:df:47:a2:26:ff:f3:38:b5:40:33:b0:b6:4e:eb:c1:ff:5b:
99:61:99:10:40:4f:06:57:64:63:c9:bf:c5:02:9b:57:75:c1:
3c:f5:2f:08:84:3d:51:95:63:45:30:69:d4:16:68:2a:43:67:
4a:29:e5:ec:04:18:a3:ef:5f:8e:1e:f9:c6:46:cb:d7:4c:59:
f5:1d:c7:1f:43:81:1d:95:52:b3:29:27:0d:6f:be:5e:d1:ee:
85:d5:2a:24:2d:46:61:de:2f:8f:95:84:7e:72:1f:2c:61:04:
48:61:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:26:20 2025 by rpki-client