Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa
File: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier: nrlkcOKrmAXnnZG+jpttMgPOV2O+KVOywRlq1beQm1o=
Subject key identifier: 52:BB:D7:77:F2:23:D7:1A:1A:68:1D:E6:16:ED:0B:84:1A:37:32:C7
Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial: 2377BCF92C0851AF8DB3B907B5176CCE35DA7E2E
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa
Signing time: Fri 31 May 2024 01:00:02 +0000
ROA not before: Fri 31 May 2024 00:55:02 +0000
ROA not after: Fri 30 May 2025 01:00:02 +0000
asID: 45305
IP address blocks: 103.190.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:77:bc:f9:2c:08:51:af:8d:b3:b9:07:b5:17:6c:ce:35:da:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Validity
Not Before: May 31 00:55:02 2024 GMT
Not After : May 30 01:00:02 2025 GMT
Subject: CN=52BBD777F223D71A1A681DE616ED0B841A3732C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:f2:a1:0c:4f:04:2f:b2:c2:e7:6f:6e:cb:
25:95:32:66:93:59:ae:e8:1f:ff:a8:85:ad:b6:b9:
d6:cc:66:c4:96:e0:12:17:29:bb:64:10:6f:3d:20:
ba:4d:af:54:31:be:95:75:99:71:f7:d2:92:d7:42:
2f:b3:95:84:b3:52:09:70:66:97:87:fc:8c:62:12:
97:80:c5:5b:f0:86:cf:bf:bf:0f:aa:a5:c0:55:e1:
cf:82:77:c9:98:45:3d:55:ab:15:4b:2c:3f:b1:13:
a6:23:c1:d0:58:2b:4c:da:f6:55:18:9b:c0:8f:af:
56:17:d6:0b:5b:2c:db:91:3c:23:f8:ec:9c:c2:4a:
d3:05:8b:d7:97:6c:3b:d9:d5:69:22:a6:75:a8:6d:
fc:f0:29:c0:2a:4f:e2:ba:16:93:46:13:7c:e0:de:
ba:26:b4:f1:33:9c:1f:c0:12:62:06:02:28:c5:43:
c0:7a:90:80:c8:57:db:1e:5b:a3:3b:12:8e:f7:01:
12:11:7a:79:ca:5d:59:b4:8a:4e:18:30:b5:c6:cb:
07:54:94:7d:80:35:4c:cd:59:72:11:8d:74:e7:a8:
e4:3f:46:0a:8f:de:03:f0:14:e6:db:6c:b0:af:ab:
22:f8:37:c9:03:a6:f2:da:26:d9:44:e0:bc:b4:44:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:D7:77:F2:23:D7:1A:1A:68:1D:E6:16:ED:0B:84:1A:37:32:C7
X509v3 Authority Key Identifier:
keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.114.0/24
Signature Algorithm: sha256WithRSAEncryption
32:03:54:a2:f0:3e:53:77:bc:af:10:a1:a0:0a:30:d2:21:e2:
72:25:c4:27:14:c7:4b:6f:1f:34:02:d5:58:ae:eb:04:a7:f9:
21:35:a7:fd:3e:fd:53:f8:c1:1f:76:bb:04:17:65:74:b3:15:
e4:8a:8d:1d:3b:f5:c6:cc:8f:c1:3e:76:fc:ad:71:aa:0e:2f:
a8:5f:58:30:63:a6:8f:a2:75:df:b9:a9:ad:28:fd:e4:2c:ae:
9b:14:0e:fc:7a:bc:65:63:30:8e:1e:f3:f9:47:c5:f6:d3:c6:
4d:40:01:6d:50:48:89:d9:39:81:41:cf:3b:a9:33:2e:44:0d:
47:46:e2:92:57:1b:09:11:c2:ff:79:76:72:a1:00:f7:6b:6b:
35:c5:54:63:0b:ca:e9:d3:a4:de:3f:05:22:f4:6a:b4:fd:68:
e9:f8:9c:81:c4:94:49:a0:af:02:2d:64:66:50:48:87:6d:2a:
83:96:d7:b3:a5:42:22:bf:36:f0:f0:94:3a:20:05:35:c9:d6:
aa:f2:fe:9c:a1:bd:e1:54:ea:14:80:9b:a2:89:d3:56:4d:9a:
54:f4:9f:8e:60:41:21:90:7b:d6:04:63:16:51:57:71:ef:f8:
4a:b3:89:c3:77:ad:d6:7b:51:80:f9:90:3c:72:43:e3:17:74:
f4:a5:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:46 2025 by rpki-client