Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa
File: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (raw, json)
Hash identifier: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=
Subject key identifier: C1:9F:D5:AF:5B:BF:E5:7C:01:E2:79:D9:EA:B6:5D:B6:63:FB:24:E3
Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2
Certificate serial: 3B4376186A2D0CC45CB2287F78F25143226A8893
Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa
Signing time: Mon 24 Feb 2025 04:01:04 +0000
ROA not before: Mon 24 Feb 2025 03:56:04 +0000
ROA not after: Mon 23 Feb 2026 04:01:04 +0000
asID: 135488
IP address blocks: 103.95.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:43:76:18:6a:2d:0c:c4:5c:b2:28:7f:78:f2:51:43:22:6a:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2
Validity
Not Before: Feb 24 03:56:04 2025 GMT
Not After : Feb 23 04:01:04 2026 GMT
Subject: CN=C19FD5AF5BBFE57C01E279D9EAB65DB663FB24E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:79:cc:49:58:b1:a0:5f:e5:03:5b:64:24:
65:d0:a0:99:78:91:0c:0c:6a:e6:f3:f7:aa:0b:23:
31:df:a7:6a:56:57:88:45:74:7c:e4:8a:f5:2e:90:
ec:99:03:4b:36:ad:78:f7:5d:06:7a:37:81:13:9e:
12:50:14:3a:07:1e:76:29:04:d0:e4:bc:c6:4c:60:
74:55:75:2d:2a:14:f5:12:6a:74:eb:cf:1b:53:06:
67:66:7a:09:88:ae:74:6d:d3:c4:89:26:be:4e:a6:
ee:9d:70:bd:25:d7:a6:34:0f:de:ba:37:b2:85:97:
88:11:69:fa:13:54:98:f7:db:54:a1:1b:2c:a5:b4:
e1:8d:0d:52:6a:fb:f8:3d:aa:7b:2c:89:9f:f7:29:
23:85:b8:4e:dd:45:dd:a5:ec:dc:94:9a:bf:b1:12:
31:d6:f5:13:1c:3a:de:b7:ad:d3:e6:63:f2:9e:a2:
e0:aa:81:43:7c:eb:7a:f6:0f:36:c2:89:ee:de:f3:
04:45:27:10:ac:ae:c5:44:72:81:d6:13:2a:3a:8b:
4d:2d:40:d5:55:94:21:d2:ac:91:2a:af:a4:3c:d4:
58:f7:01:3c:5a:58:74:4b:2e:02:4b:d6:ad:af:5a:
64:93:44:69:b4:b2:76:9c:6d:a3:21:40:75:13:fb:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:D5:AF:5B:BF:E5:7C:01:E2:79:D9:EA:B6:5D:B6:63:FB:24:E3
X509v3 Authority Key Identifier:
keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.11.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4d:64:ab:18:44:82:3c:55:6b:e3:ec:33:14:91:f3:2c:9a:
21:f6:49:b1:e6:34:e9:ff:4f:f9:22:48:4a:4e:96:86:a6:7d:
8e:ad:ed:78:cf:ec:e5:3e:13:19:f9:01:03:34:80:45:34:f1:
dd:ba:82:e9:36:c4:6a:c7:a0:29:71:82:fd:2b:fe:43:a6:ac:
dc:d9:e8:7b:cb:ec:0e:98:37:ef:b6:13:46:25:08:da:64:a5:
29:99:ff:ef:1b:f4:a6:df:94:a5:19:f0:26:84:e4:18:07:3c:
9e:ca:7a:62:d7:e0:67:b0:c5:c3:cf:22:df:c4:5a:61:6e:70:
05:9e:00:45:ff:b1:8e:c5:1d:dd:2b:ba:78:72:33:e2:6c:d8:
ea:73:01:07:fe:0a:4b:4d:26:5d:92:ed:08:b7:88:85:c4:c0:
d2:6a:7c:e6:3b:b0:69:e6:60:fd:69:77:bf:f3:9f:93:d5:17:
e0:54:ae:fb:92:03:0f:45:5e:9f:b0:6b:53:d1:9d:82:89:1b:
79:2f:27:3e:15:fc:74:0f:67:f2:3b:69:da:ae:4e:d5:26:c9:
6d:08:59:43:48:fb:64:43:db:38:95:ea:c4:8d:d7:43:02:91:
10:8e:c3:17:ee:83:3f:0b:93:02:44:23:02:48:11:fc:80:ad:
0b:5a:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:16:47 2025 by rpki-client