Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
File: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier: gKmQTrWRo0dtB24OlQ8EekvtiPKnerSJt10iLt7klno=
Subject key identifier: D9:F3:90:27:F4:BA:60:B2:BE:FC:98:B3:15:A8:56:0D:B1:06:B9:A1
Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial: 51753FFEC8CFA5237357B9F987FFC655701CA2A4
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
Signing time: Fri 19 Jul 2024 14:00:02 +0000
ROA not before: Fri 19 Jul 2024 13:55:02 +0000
ROA not after: Fri 18 Jul 2025 14:00:02 +0000
asID: 138093
IP address blocks: 103.130.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:75:3f:fe:c8:cf:a5:23:73:57:b9:f9:87:ff:c6:55:70:1c:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Validity
Not Before: Jul 19 13:55:02 2024 GMT
Not After : Jul 18 14:00:02 2025 GMT
Subject: CN=D9F39027F4BA60B2BEFC98B315A8560DB106B9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:b0:57:3d:1f:ac:53:70:93:73:5b:37:01:
d1:08:a4:00:5e:d9:bc:9d:f8:3f:3f:04:f3:21:9f:
f3:f8:71:ae:25:5d:2c:a4:05:ac:4a:33:d1:96:2c:
17:4f:da:f7:12:cf:09:9d:57:9e:cf:01:67:ff:2e:
88:3a:30:d3:d6:1c:6e:07:ae:c6:c0:a8:ca:1e:53:
be:48:aa:0d:e2:a1:6a:41:ee:7a:44:4f:d3:a8:f1:
13:c6:f4:a8:24:c4:a1:b0:02:f4:ac:b8:8f:1e:c2:
41:ad:37:68:91:18:5f:41:87:01:63:70:56:a4:b3:
c5:86:e1:33:3f:36:ab:8c:99:5a:91:7d:e4:12:6c:
cd:0b:bf:54:11:3c:3a:e3:e3:af:52:96:b6:19:5f:
da:5e:a3:5e:f6:75:68:1b:dc:e3:49:a0:57:45:af:
65:98:f3:31:0d:d3:5d:15:3b:3c:0f:a7:87:95:81:
64:6a:55:c5:c2:7f:26:d7:b8:6c:2d:7b:f4:a9:26:
1e:93:f8:21:03:fd:78:de:f6:66:65:e8:48:da:e6:
d1:b4:92:d4:05:67:47:6e:62:b4:24:09:ca:f2:f9:
85:2d:d9:b2:12:fd:27:6a:97:d6:d3:9d:30:2a:97:
80:a0:f2:50:09:0a:33:62:92:a3:67:4f:7a:03:ee:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:90:27:F4:BA:60:B2:BE:FC:98:B3:15:A8:56:0D:B1:06:B9:A1
X509v3 Authority Key Identifier:
keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.5.0/24
Signature Algorithm: sha256WithRSAEncryption
be:00:34:1e:0c:0f:9c:e6:44:8e:7f:48:f9:34:8f:7d:82:00:
1f:16:bf:52:b7:f8:75:ad:a3:4a:fe:54:2f:7d:ef:a9:d7:88:
f7:ff:82:ce:e0:fb:ce:73:1e:fe:be:ca:43:bc:ef:45:12:cb:
80:c9:80:e5:a8:47:ac:df:ee:20:b1:88:f3:d2:14:a9:1e:c6:
7d:c1:8a:98:8d:23:3b:f0:c3:70:f4:87:f7:9b:e4:7a:0a:3d:
bc:f3:14:f5:c6:1c:3f:0b:78:40:52:19:f3:ab:96:56:4e:5f:
97:cc:16:87:97:6b:bf:05:88:f3:d9:5d:ff:ea:d6:e2:1c:9d:
1f:99:08:f2:5c:0f:95:50:e6:94:c9:f0:f5:7b:73:7e:19:8b:
56:3e:e0:36:fb:f7:65:e3:d6:46:76:63:d1:3f:d2:56:bf:31:
6d:30:67:20:c1:c8:e7:dd:bb:29:30:28:c9:fe:f4:b9:f6:08:
3d:96:fa:3c:b3:9e:75:6a:60:58:c3:d5:62:af:2b:a3:40:ae:
21:16:3f:4b:3e:2c:26:bf:8a:3a:38:86:c7:55:f7:49:26:38:
66:31:31:0b:93:d9:bf:ec:f8:3d:ac:a3:03:b9:ad:cc:d1:a8:
f3:8e:9a:da:1f:e0:2f:a2:f3:f7:ea:0a:0a:17:98:63:75:95:
96:38:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:50 2025 by rpki-client