Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
File: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (raw, json)
Hash identifier: fMitGvSIMZKR/xojJDzG2iWApTg4bDt/1kqJnOfFiTo=
Subject key identifier: 71:B5:73:34:EA:D4:63:7C:0D:23:B4:49:0D:CD:6B:86:2D:4A:00:05
Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Certificate serial: 1D5F414D841A7245514D8676FB24CE13E9B563AA
Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
Signing time: Fri 17 Jan 2025 07:00:01 +0000
ROA not before: Fri 17 Jan 2025 06:55:01 +0000
ROA not after: Fri 16 Jan 2026 07:00:01 +0000
asID: 149737
IP address blocks: 103.188.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5f:41:4d:84:1a:72:45:51:4d:86:76:fb:24:ce:13:e9:b5:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Validity
Not Before: Jan 17 06:55:01 2025 GMT
Not After : Jan 16 07:00:01 2026 GMT
Subject: CN=71B57334EAD4637C0D23B4490DCD6B862D4A0005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:25:3a:f4:40:01:ac:3c:57:40:7b:53:f6:
97:a0:46:0c:eb:b1:e0:0d:b6:69:28:79:38:14:3a:
a4:53:a1:d2:17:1b:81:1a:2e:aa:67:12:99:f9:3f:
f0:27:da:cb:9e:11:5a:49:81:48:0e:a1:b7:e7:dd:
fb:d8:8e:d7:e5:ac:e7:d9:b4:d3:c7:f6:7d:b7:81:
fb:11:aa:28:30:67:d7:ed:6c:32:d5:62:eb:e6:b2:
b2:d0:a2:a1:51:64:cb:52:8a:eb:5c:5c:b4:9e:cb:
9b:01:8a:bd:c9:ac:64:ae:1b:ab:66:bf:6f:61:5f:
9e:12:5d:fa:5f:57:da:1e:08:0c:fa:5e:79:51:44:
42:7b:e1:fb:2c:2b:d2:80:00:ba:d7:46:be:1e:f7:
e5:f4:53:5d:aa:38:65:ae:28:e8:89:9f:fd:3d:5e:
21:25:1d:ad:3d:71:43:44:44:49:75:fa:09:04:d3:
cd:28:0e:5b:86:8b:74:2d:81:16:74:f8:54:77:5f:
2f:47:7d:b6:08:27:c1:67:42:ba:a5:e3:4b:47:8d:
d4:db:4f:9b:b1:e6:9f:ca:ec:41:16:71:62:57:52:
75:7f:10:ec:ac:03:2c:af:e6:e4:df:1e:0c:62:74:
67:b8:df:b4:26:17:0e:b1:3e:d0:49:c1:02:59:21:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:73:34:EA:D4:63:7C:0D:23:B4:49:0D:CD:6B:86:2D:4A:00:05
X509v3 Authority Key Identifier:
keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:27:c5:67:fd:89:36:17:91:ec:20:8f:7b:29:1b:e6:a0:46:
e6:93:28:f3:69:dd:8e:f1:d7:0a:4d:f7:00:92:30:97:74:93:
2e:14:58:7e:35:be:1f:84:52:d8:64:f7:74:dd:ab:a8:54:2f:
f1:cd:f2:36:f2:b9:d3:c6:2b:db:b7:9d:37:35:11:06:fe:24:
12:0d:99:60:64:c2:c7:55:5c:8b:81:fb:f7:95:89:e3:3b:21:
79:03:90:18:40:2f:6b:44:51:57:34:e7:9e:1e:ea:78:b2:76:
ab:9c:f9:c1:96:b4:69:63:d8:2c:ed:cd:66:2b:57:e3:f0:7b:
ae:72:a7:6b:6a:d0:5f:74:f7:e2:a4:f5:26:68:e0:03:df:e6:
93:7b:3e:9d:28:2a:4e:4f:46:24:d7:1a:d2:cd:f5:b5:31:f5:
28:2a:46:aa:a7:5b:cc:c5:5c:0a:58:68:e2:aa:ff:3b:8b:49:
f4:b5:ad:e2:24:e6:10:66:11:a8:46:a7:f5:2c:0a:86:e6:44:
81:64:5c:37:03:6e:75:39:3c:6f:1c:91:25:da:ed:f1:0f:b9:
74:76:a1:6e:2c:b6:e5:cf:73:55:3b:31:50:57:41:c9:b6:61:
14:e2:c1:5d:2b:6f:4d:76:03:f2:9b:c3:1b:2d:86:50:c7:ce:
7f:7a:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:01 2025 by rpki-client