Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
File: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (raw, json)
Hash identifier: 5xMXCB+Kvq9p/D57QuLDuGVT/4+MwrvSLUjkkAX9x1s=
Subject key identifier: 1A:3E:DA:78:BD:E3:17:26:13:76:83:05:86:29:EC:B8:5F:26:54:24
Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Certificate serial: 788C690973CC228C19BBAEF8E6475A05DC502D8B
Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
Signing time: Sat 01 Jun 2024 08:00:00 +0000
ROA not before: Sat 01 Jun 2024 07:55:00 +0000
ROA not after: Sat 31 May 2025 08:00:00 +0000
asID: 149938
IP address blocks: 103.5.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8c:69:09:73:cc:22:8c:19:bb:ae:f8:e6:47:5a:05:dc:50:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Validity
Not Before: Jun 1 07:55:00 2024 GMT
Not After : May 31 08:00:00 2025 GMT
Subject: CN=1A3EDA78BDE31726137683058629ECB85F265424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:05:79:70:b0:1e:44:eb:90:f1:7b:10:8b:
93:d3:31:fc:f6:91:c7:af:8f:d9:4b:ec:31:eb:6e:
75:6e:3d:ea:5a:8e:a2:e8:09:e8:b4:26:9e:a8:47:
ab:2e:84:2b:04:78:49:2d:c5:5d:5f:7f:5c:8a:66:
c5:54:5c:4c:27:da:05:41:94:6f:af:9b:0e:39:eb:
0a:6f:55:8a:e7:20:4d:8a:58:68:de:c3:21:d2:ea:
ba:d2:a2:8e:4c:27:6f:4d:0d:bb:1c:0e:89:f3:11:
0a:fc:01:7a:48:42:de:6c:db:08:e7:50:6d:b9:e4:
00:1b:7e:0b:ed:0d:54:51:20:ae:4a:50:9f:5c:52:
a7:5b:50:cd:28:be:d9:97:9b:ec:6e:36:ca:d8:86:
29:f4:c0:1a:72:db:b6:eb:5a:ac:e1:d3:c1:f6:5e:
66:21:50:d0:33:02:68:f2:f6:38:e1:f4:75:27:9e:
0c:e0:d9:bd:13:27:d2:1b:81:97:63:48:2f:f8:ff:
72:bd:3f:7d:62:6a:2d:fd:39:5e:01:be:5b:02:2c:
51:29:21:f1:89:3b:ac:ef:d4:9e:f4:de:42:e7:ac:
52:48:1e:07:11:5f:9e:27:a3:e5:9b:25:d2:6a:5a:
a5:ee:99:c2:f5:5e:6b:f5:f9:81:55:69:61:0f:76:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:DA:78:BD:E3:17:26:13:76:83:05:86:29:EC:B8:5F:26:54:24
X509v3 Authority Key Identifier:
keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a0:77:35:c7:25:a3:f6:b3:b5:51:78:9e:cc:41:71:a0:ed:
7d:eb:8b:4e:9f:5b:a9:f1:e8:08:47:fa:5d:4b:36:27:91:ab:
b5:c9:97:c4:a4:f5:9c:93:f2:26:64:df:6f:0d:d4:77:49:48:
27:c5:d9:9a:46:44:0c:91:71:92:e5:dc:b6:c1:f2:06:a7:81:
3b:79:1c:01:d8:40:06:f6:73:65:52:2c:e9:d3:53:e8:4b:2a:
95:25:0a:b5:4b:aa:a5:e9:9e:14:31:79:05:f4:2a:af:f5:bb:
ed:1d:c9:73:6a:4a:3c:88:5b:ee:ce:55:9c:ac:4c:df:9d:50:
a8:f6:df:e8:68:54:bb:54:9b:c6:24:df:e6:32:44:66:0f:cd:
a5:80:34:c5:b6:29:4e:8b:f7:96:b7:44:2b:09:9d:51:7a:14:
31:b1:28:cf:97:78:25:71:9c:6a:76:35:f6:33:66:85:7e:9c:
87:aa:95:fa:8a:3b:39:40:3b:ec:a3:cc:2f:a7:90:69:5d:02:
5a:ca:3c:34:e3:06:7d:02:19:8b:fc:3b:a8:a5:57:d2:6c:4c:
68:43:e6:45:16:f0:18:04:5c:f9:3a:27:34:ba:67:a1:6d:4f:
a2:18:38:48:59:ed:d2:56:54:01:4c:5e:0f:17:bd:19:4a:fc:
ac:b8:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:40 2025 by rpki-client