Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa
File: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (raw, json)
Hash identifier: lNUVXEP6ws0KNXWkOdcFHdX37i6dG9Y+8PzDuRErxcs=
Subject key identifier: 28:83:1A:71:4E:96:CA:6A:63:07:A6:04:01:19:57:EE:45:4F:25:09
Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial: 44750F9CEA689709D8469DA678437749A5094145
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa
Signing time: Fri 10 May 2024 03:00:01 +0000
ROA not before: Fri 10 May 2024 02:55:01 +0000
ROA not after: Fri 09 May 2025 03:00:01 +0000
asID: 149885
IP address blocks: 103.189.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:75:0f:9c:ea:68:97:09:d8:46:9d:a6:78:43:77:49:a5:09:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Validity
Not Before: May 10 02:55:01 2024 GMT
Not After : May 9 03:00:01 2025 GMT
Subject: CN=28831A714E96CA6A6307A604011957EE454F2509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:b2:38:24:c4:73:83:6b:e2:86:f9:47:0d:
31:b1:ef:aa:41:9e:be:4a:29:37:8c:79:0d:a3:9f:
de:59:99:e9:aa:9b:3d:45:a2:37:12:db:27:c1:ab:
26:ee:a1:7e:a4:b3:a9:fc:bd:9b:fd:45:42:e7:f5:
74:8c:e9:e2:6a:cb:59:b2:fd:a3:dc:86:57:21:44:
5d:e4:a7:ed:42:8e:7e:46:da:5e:e7:2c:9f:22:d3:
c0:2e:b6:70:71:94:28:9e:29:75:0d:32:60:95:0f:
21:73:18:89:b4:4e:17:69:79:aa:45:2f:a6:7c:e6:
22:4d:aa:85:ab:bd:17:63:40:26:91:d4:86:94:51:
c0:45:fc:05:6d:c9:2b:af:00:5e:cd:32:e4:08:bb:
65:fa:af:60:5d:b8:51:8a:e5:b6:96:91:1a:7e:21:
f6:6c:f0:b0:ec:50:ca:cd:57:e7:02:8c:04:9c:16:
48:a6:05:ec:80:c4:c4:aa:ec:96:45:e0:b8:bb:6d:
89:0b:0d:b4:43:5d:3a:dc:e8:f3:b5:4a:31:f7:46:
77:4e:75:88:49:95:0a:d2:0a:6e:ae:9a:cd:de:15:
f4:27:53:74:1f:36:75:54:dd:bf:6d:60:84:e9:78:
fe:6a:ec:4d:cb:e6:03:97:01:71:c8:e8:b6:72:2b:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:1A:71:4E:96:CA:6A:63:07:A6:04:01:19:57:EE:45:4F:25:09
X509v3 Authority Key Identifier:
keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.166.0/23
Signature Algorithm: sha256WithRSAEncryption
88:83:e1:63:06:02:ff:b4:76:06:c4:5d:78:3f:7d:de:73:d1:
c1:3a:6f:da:44:b3:ac:bc:6f:cb:a3:44:46:b6:89:4c:7e:99:
96:ee:41:97:f6:07:55:48:18:06:1c:a8:7a:21:d9:c1:83:0a:
26:9b:48:8e:e2:1c:0a:30:5b:df:8b:de:ff:e9:f6:28:28:f1:
4f:6b:36:83:fe:29:9a:ac:42:78:06:d0:df:a8:71:cd:89:d8:
4e:7f:5e:cc:53:cd:29:68:b7:e3:7d:0c:15:a7:76:a5:0f:38:
50:e5:5b:b8:53:75:35:63:37:9d:33:57:3e:29:31:7d:2a:75:
a7:fb:5c:2c:ca:68:ab:af:f4:36:85:2c:57:f6:a0:a9:43:15:
e7:64:e1:ae:6f:37:3f:94:2e:b7:c9:65:db:a1:a1:57:7c:2a:
31:ae:d9:64:04:f3:4c:f5:56:33:7f:a4:d1:ba:50:6d:54:e2:
58:00:ea:3e:1d:6c:f1:eb:72:15:0d:49:72:e3:4f:88:ba:6a:
b4:5c:3a:f4:25:8e:99:28:e8:35:be:ab:12:56:30:5c:ce:cc:
4e:6e:04:85:1f:98:a0:78:b3:36:92:ca:74:69:4a:22:1e:81:
6c:3b:47:bf:2b:b5:0b:63:d6:a9:5c:d6:42:18:ce:9f:06:cc:
9a:a0:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:12 2025 by rpki-client