Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313430333839.roa
File: 3130332e31362e3133382e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: AU/f1snUGaS/3h7ksZnzPZ+Fi8Wt1gev2S87CZUSgjU=
Subject key identifier: 74:B1:86:68:BD:70:01:8B:38:71:1E:3F:77:5F:6B:24:D8:29:80:12
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 5BC5997C0FB796C354327555292E717235D5654A
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313430333839.roa
Signing time: Thu 30 Jan 2025 05:01:19 +0000
ROA not before: Thu 30 Jan 2025 04:56:19 +0000
ROA not after: Thu 29 Jan 2026 05:01:19 +0000
asID: 140389
IP address blocks: 103.16.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c5:99:7c:0f:b7:96:c3:54:32:75:55:29:2e:71:72:35:d5:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jan 30 04:56:19 2025 GMT
Not After : Jan 29 05:01:19 2026 GMT
Subject: CN=74B18668BD70018B38711E3F775F6B24D8298012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:7b:ce:14:cd:2b:0a:72:9b:15:08:22:f5:
31:90:5a:c4:56:28:d3:39:ca:84:d6:18:cd:56:22:
a5:e3:ff:ff:8c:17:8e:bb:d5:66:25:eb:a7:0b:fb:
30:ac:2a:7b:d3:c0:af:7d:f6:67:4f:03:97:4d:aa:
7e:75:17:ea:86:65:e2:cd:8a:45:59:52:21:13:1e:
12:a1:f5:4c:df:b4:34:55:f8:44:0a:5b:85:6f:7e:
2c:fb:12:bd:31:34:c1:99:93:a3:19:9c:f6:2b:d5:
e6:51:d9:b9:e3:29:90:7b:1a:0e:81:e6:e6:7b:16:
45:5a:4d:c4:2d:fc:32:07:43:ec:03:de:d0:07:4d:
53:67:10:05:42:f0:f3:02:14:a3:01:d1:84:ce:fa:
67:d0:3b:3c:e9:05:b8:67:4b:91:35:b4:dd:ef:38:
8a:b6:30:5c:03:1f:02:a6:e8:f2:00:0c:9f:99:09:
87:a4:6c:22:f2:e8:c8:85:83:82:67:9a:a5:7b:ce:
be:72:c7:75:55:52:52:62:70:01:84:75:5f:58:52:
cc:6d:a9:12:31:3c:d2:13:19:17:57:72:85:5c:04:
fc:89:f8:62:90:47:fb:75:4b:ab:93:07:c3:da:ad:
ec:20:50:f1:03:8d:70:09:bf:ea:90:88:f1:1e:a3:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:86:68:BD:70:01:8B:38:71:1E:3F:77:5F:6B:24:D8:29:80:12
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.138.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fe:fb:83:dc:1c:09:b2:c4:7d:91:ba:7a:bc:68:98:9e:2e:
e6:19:89:b0:79:42:2f:c9:02:f2:20:58:f9:49:97:a0:c2:00:
bc:d1:ab:fd:0d:1a:bf:fa:be:31:1d:76:3d:01:fc:b6:15:b9:
96:b6:2e:b2:93:68:82:5b:35:13:0f:96:06:d1:c0:a9:99:6a:
f1:9a:97:99:ab:64:a9:01:a1:97:5f:ca:fc:a9:ee:ce:e5:b3:
95:56:35:6a:2d:3f:00:74:d1:2e:52:e7:0c:9b:c6:6d:88:f2:
b4:1b:cd:54:22:28:e6:a7:87:a9:fd:a3:2a:6b:f6:26:08:7a:
df:2e:03:c3:3e:56:b4:be:17:b0:05:88:af:5c:71:b7:8f:70:
da:3a:c7:cf:18:14:30:f6:8c:ac:4f:28:e2:01:2b:79:93:76:
c4:9a:7b:14:02:ad:56:fb:04:21:50:af:ac:c9:b4:19:25:ce:
29:15:f1:2d:45:95:9b:e8:21:27:c6:2a:be:fd:a9:75:a3:1b:
9b:00:7a:0e:b6:7c:df:ee:e7:97:9f:e3:7d:51:2d:74:5a:fb:
b7:6e:10:77:ad:86:eb:79:75:a0:c9:a6:da:c1:82:e6:fa:5d:
4c:c7:e6:4f:3a:c2:a9:c6:2a:64:37:86:f6:e8:32:28:b5:d2:
e4:63:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:25 2025 by rpki-client