Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
File: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=
Subject key identifier: A0:E0:8D:85:48:C7:C4:91:97:4E:27:A2:13:7C:FE:8E:3B:42:FB:CA
Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial: 0E0845865B12B50A5B289EE73B920BC7964D377A
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
Signing time: Mon 03 Mar 2025 09:15:36 +0000
ROA not before: Mon 03 Mar 2025 09:10:36 +0000
ROA not after: Mon 02 Mar 2026 09:15:36 +0000
asID: 138129
IP address blocks: 103.132.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:08:45:86:5b:12:b5:0a:5b:28:9e:e7:3b:92:0b:c7:96:4d:37:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Validity
Not Before: Mar 3 09:10:36 2025 GMT
Not After : Mar 2 09:15:36 2026 GMT
Subject: CN=A0E08D8548C7C491974E27A2137CFE8E3B42FBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:64:44:fe:a7:8c:95:77:97:47:af:2e:04:
15:45:90:40:04:42:6f:a1:ba:54:f1:25:b0:4c:44:
0d:7c:d9:e1:f7:e6:90:12:ad:d4:c7:47:4e:27:ec:
95:67:50:64:96:cd:65:e2:77:e2:a7:d1:49:93:e7:
0e:5c:e5:cf:14:75:a4:39:64:75:25:dd:0c:52:c3:
28:d7:ea:be:2a:e2:5b:df:64:a2:d9:7e:5f:c5:53:
a6:29:ed:fd:2e:2e:ba:5c:28:0a:f2:48:d8:06:36:
28:f0:54:e0:95:04:73:26:0a:cb:6f:b7:08:84:df:
fd:de:8c:f7:d7:78:00:6b:72:ac:90:2d:9a:22:27:
e0:00:11:3a:f2:aa:99:2c:e6:a3:d6:40:db:72:e3:
75:4a:dd:ee:5b:58:c7:a8:36:09:c3:a1:46:ca:bc:
3e:67:b4:d5:6d:ec:4f:a1:43:f2:7f:71:50:77:c2:
9e:c6:8d:a6:6b:6d:27:39:f7:73:50:11:5a:7b:0a:
36:4f:45:7b:d2:a1:d5:c9:10:e3:44:9b:37:12:c7:
5d:18:92:4f:d8:72:13:77:6a:af:22:0f:93:3e:c5:
04:ef:48:c3:9e:96:28:b1:66:d3:a2:b3:69:bb:39:
34:50:40:00:39:ac:ea:0d:75:e2:10:90:58:5f:84:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:8D:85:48:C7:C4:91:97:4E:27:A2:13:7C:FE:8E:3B:42:FB:CA
X509v3 Authority Key Identifier:
keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.239.0/24
Signature Algorithm: sha256WithRSAEncryption
21:da:03:86:44:2c:73:33:c2:d7:ca:a2:91:9c:0c:00:73:b2:
bc:82:f6:ba:19:4f:d9:d4:7c:23:ee:cb:03:05:2e:c3:19:e2:
01:7d:87:ac:66:fe:ba:c5:db:48:50:cd:63:81:2a:35:0c:1d:
5e:55:41:c0:22:c6:12:38:da:73:c1:d8:fa:fa:bb:11:80:ed:
64:a0:f2:75:df:fc:36:c9:25:d1:ab:ee:9f:70:5e:3b:6a:de:
35:3b:0e:8f:e1:96:4b:83:5b:b2:f2:3c:6d:ef:f4:b7:03:17:
63:ae:b0:6e:52:6a:d4:fe:a2:1e:f6:f9:1d:86:af:b0:d2:a8:
11:40:1d:84:38:9e:bc:8b:07:14:e6:9f:82:aa:6f:08:28:31:
4e:c3:81:ca:01:b0:0a:ce:51:5a:2b:b6:75:bd:b6:b1:29:02:
2d:bc:b2:8c:2c:6e:08:80:af:c3:22:1f:a1:a9:cd:38:5d:56:
1a:46:de:24:c8:4c:00:ee:98:19:78:c6:ae:fb:96:49:a3:3d:
97:fd:0e:ce:06:d5:ab:50:9b:aa:d9:ec:21:69:ef:12:eb:e8:
2c:03:d9:0a:0d:7b:7c:cd:c8:15:d1:36:94:43:39:ae:5c:ed:
72:13:41:a8:c6:c3:27:56:cc:35:42:8d:d9:50:f3:1e:dd:d0:
c0:c3:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:00:21 2025 by rpki-client