Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa
File: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier: xqDmQkKvNjqDIhr5W6P74uer/xZQw7F/hF7jgT+PobU=
Subject key identifier: 24:33:26:A7:11:8E:A9:FC:5F:49:E4:19:AE:C6:01:30:6B:FE:AB:B2
Certificate issuer: /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
Certificate serial: CE23F945B92A771785A09FB4F29249C3171122
Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa
Signing time: Fri 21 Mar 2025 09:00:00 +0000
ROA not before: Fri 21 Mar 2025 08:55:00 +0000
ROA not after: Fri 20 Mar 2026 09:00:00 +0000
asID: 58821
IP address blocks: 103.193.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ce:23:f9:45:b9:2a:77:17:85:a0:9f:b4:f2:92:49:c3:17:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
Validity
Not Before: Mar 21 08:55:00 2025 GMT
Not After : Mar 20 09:00:00 2026 GMT
Subject: CN=243326A7118EA9FC5F49E419AEC601306BFEABB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:6f:2b:ef:62:70:f8:7d:a9:d7:ab:36:72:
67:47:9a:f1:3b:79:79:64:8a:a8:1a:d4:ad:f8:24:
86:63:9a:3e:de:49:04:bb:c8:58:da:69:cd:e7:f7:
c2:aa:fd:2d:87:49:57:f6:7c:82:45:af:b0:0c:ec:
78:7f:a0:a8:a7:d4:4e:cd:91:d2:7d:22:29:1d:d8:
83:4b:7b:45:33:02:8a:2c:b4:9e:52:c1:c6:35:e1:
82:70:5c:fc:41:ff:6b:b6:13:b3:9c:98:88:a3:24:
c8:40:68:5f:6f:71:0c:cd:c9:63:42:99:93:42:f6:
32:e7:6f:79:1e:e9:f1:17:d0:cb:61:0d:03:2b:75:
e5:d3:3e:a8:44:ba:9d:d0:03:80:f6:41:07:bb:0c:
bd:90:3a:38:7b:d5:55:66:70:c3:62:71:c2:3b:b2:
f2:57:3b:d1:e5:e9:78:ec:c7:af:83:f5:ad:dc:71:
c0:ac:86:a7:a6:4e:98:ff:a8:da:53:5f:ff:55:b4:
74:f9:34:9c:ea:95:63:49:06:70:0a:eb:8c:7a:63:
b4:4e:42:28:2a:dd:f1:34:2d:5b:51:f4:9b:89:2d:
c7:e7:39:53:c2:98:e1:15:2c:75:b1:d4:c6:90:e7:
0f:28:a4:86:61:52:43:aa:76:86:83:75:9d:54:d0:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:26:A7:11:8E:A9:FC:5F:49:E4:19:AE:C6:01:30:6B:FE:AB:B2
X509v3 Authority Key Identifier:
keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.193.144.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d6:d2:57:57:a1:6f:0a:ee:72:27:40:a5:c3:c2:b6:a3:87:
22:54:29:1e:5b:b8:e8:40:22:7b:0f:78:2f:41:bd:e3:8c:ac:
62:38:d9:a8:68:c5:e5:8a:3e:00:ca:a4:d0:1f:98:2b:f9:69:
51:14:02:b1:b8:05:62:a9:a4:a5:ec:06:63:06:60:6c:45:c4:
59:64:ca:e4:06:21:09:95:e6:7a:02:e1:7c:47:04:8e:31:a8:
a5:a5:ef:9c:c8:6b:2b:fc:b3:cc:a8:a7:83:3a:65:f8:7c:bf:
76:ab:01:d8:b6:07:ff:3f:11:69:b2:dc:da:90:cf:1c:7b:0f:
9d:2a:a9:36:2a:39:cf:69:0e:03:49:7c:d4:7e:51:d3:a6:3d:
63:6f:04:76:e2:50:30:70:23:30:33:29:c5:6a:e8:a3:c6:1f:
95:cc:3a:5a:d9:10:45:66:4c:4e:0d:65:74:d5:af:c4:04:f3:
04:2d:07:ef:93:f8:d4:4e:da:d9:e5:06:44:85:ca:89:21:ab:
68:15:4a:a6:ed:3f:5a:d2:b7:5a:2b:49:99:0d:68:fe:cc:21:
eb:ac:5f:31:60:62:d9:0e:7e:23:d7:03:2e:34:8a:1c:0d:30:
7c:8d:78:07:87:48:54:d9:14:ac:19:d8:6c:83:2f:d4:68:0e:
d7:7c:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:58:03 2025 by rpki-client