Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=
Subject key identifier: 19:E8:B7:1B:56:13:72:87:4E:EB:18:7B:59:08:CA:07:58:C7:4C:D6
Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Certificate serial: 0CCBB40B43615A72DBD997F3A0752731EA3498E8
Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 09:03:10 +0000
ROA not before: Wed 04 Dec 2024 08:58:10 +0000
ROA not after: Wed 03 Dec 2025 09:03:10 +0000
asID: 135478
IP address blocks: 103.129.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cb:b4:0b:43:61:5a:72:db:d9:97:f3:a0:75:27:31:ea:34:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Validity
Not Before: Dec 4 08:58:10 2024 GMT
Not After : Dec 3 09:03:10 2025 GMT
Subject: CN=19E8B71B561372874EEB187B5908CA0758C74CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:79:82:e3:57:18:b8:8e:fc:6f:70:5b:45:
80:e0:41:57:75:97:fc:91:da:2b:63:74:db:47:50:
42:a8:76:f7:f1:07:2a:1c:79:d2:ec:e8:72:0d:ac:
51:b9:61:03:0b:50:f6:50:3e:46:e0:ec:ee:2c:26:
dc:02:19:8a:07:b1:97:30:67:03:bc:c7:48:81:f1:
ca:96:de:d9:42:54:48:92:ab:3b:27:44:64:8a:1d:
6b:f9:77:02:9f:f1:89:24:d5:4e:a7:32:78:cf:00:
ec:5f:ab:44:97:7c:7a:93:9d:4d:94:c1:dc:b3:c4:
f5:19:46:67:d4:7c:03:e1:96:8c:14:80:cf:88:3b:
20:65:98:f8:fb:74:62:6f:32:99:b4:81:18:14:7e:
e6:aa:19:a6:04:3e:05:87:8e:55:4b:71:c1:35:a6:
29:11:8f:18:63:1d:47:89:6f:e3:ae:e8:fd:c0:b6:
0e:a6:4c:f9:f5:a9:b7:89:1e:7b:ef:5d:5f:d1:fa:
e1:04:30:0f:62:67:7f:79:33:eb:bb:7e:aa:15:38:
ce:42:d6:01:42:ee:34:25:98:76:3a:5a:d6:be:ef:
97:9a:be:14:75:f0:ff:e6:cc:0b:75:bc:50:50:df:
10:d0:a9:b2:bd:2a:e7:d4:f0:79:1b:da:a4:ab:9e:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E8:B7:1B:56:13:72:87:4E:EB:18:7B:59:08:CA:07:58:C7:4C:D6
X509v3 Authority Key Identifier:
keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.42.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:3f:c2:f3:b2:81:8b:ea:67:bd:e1:82:38:8b:c9:a3:3b:4e:
a1:0d:d4:3a:6c:83:8e:2a:73:5c:fc:c7:87:8e:6f:6c:01:57:
56:85:3f:3f:09:3b:f6:90:14:b7:26:f9:ec:27:fc:c3:bd:46:
50:a1:18:9e:b4:d5:29:43:47:4f:20:f3:a9:25:e6:fb:ca:01:
09:53:65:30:eb:45:b5:7d:ad:34:3c:de:ec:4d:2e:9f:2b:fe:
ae:d3:07:6d:0e:44:1d:fc:92:66:df:de:20:d3:d7:81:9b:f2:
a4:6d:2d:84:54:15:da:48:93:8e:38:5a:f0:37:14:ca:14:06:
bb:53:5b:56:2b:d6:1b:30:54:b9:75:b0:63:95:66:5d:72:25:
f3:86:4d:94:87:fb:0e:28:25:bc:d3:44:18:f0:c0:dc:8e:f8:
f6:7a:c8:d8:fe:77:59:94:dd:d4:c6:01:20:d9:ef:44:52:31:
d0:f6:f0:6d:9d:39:4d:c3:3f:fe:5c:c0:a6:2e:e2:f2:b9:d5:
c1:a6:fe:93:43:88:97:39:ce:de:d0:37:06:ac:ab:d8:04:06:
ce:10:34:60:23:37:ad:c9:2e:e9:57:e0:02:4c:a1:dd:77:df:
42:16:4a:d3:6c:85:0f:b3:d3:17:c1:78:5b:0d:7c:19:67:56:
dc:1d:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:56:57 2025 by rpki-client