Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa
File: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (raw, json)
Hash identifier: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=
Subject key identifier: 73:EA:9E:ED:C8:2E:2D:23:59:6E:1E:0E:A9:03:D4:04:AA:95:7D:6F
Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Certificate serial: 0367AFA817F2C46DEDEA153527A1A0D2DCACF6BD
Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa
Signing time: Fri 20 Dec 2024 08:29:22 +0000
ROA not before: Fri 20 Dec 2024 08:24:22 +0000
ROA not after: Fri 19 Dec 2025 08:29:22 +0000
asID: 136839
IP address blocks: 103.98.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:67:af:a8:17:f2:c4:6d:ed:ea:15:35:27:a1:a0:d2:dc:ac:f6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Validity
Not Before: Dec 20 08:24:22 2024 GMT
Not After : Dec 19 08:29:22 2025 GMT
Subject: CN=73EA9EEDC82E2D23596E1E0EA903D404AA957D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:49:b7:a2:26:9d:52:93:f8:7c:9f:ed:42:
38:35:de:57:35:c0:94:c7:b7:2d:e7:00:2b:0f:cc:
51:0d:13:86:2f:06:93:64:ae:ad:b7:e3:28:6b:17:
e6:d5:6a:ca:a9:3a:8a:da:a3:1f:3a:5b:dc:95:f9:
74:e4:2f:2d:77:cf:b3:5b:33:e3:ab:5e:b1:47:58:
76:ac:e7:8d:cf:bd:55:2a:34:93:92:c1:56:df:f0:
77:fd:be:46:57:c3:01:0e:d9:aa:bb:75:4b:2d:d4:
94:a3:30:2f:9a:a6:bf:db:b2:66:15:1a:4d:66:04:
e8:d5:45:bb:80:66:bd:2f:12:ba:0d:3b:73:75:cf:
1a:63:f7:80:e7:b0:cd:25:53:c4:9d:36:e3:9b:cf:
d0:16:e3:27:f0:7b:47:87:3f:ee:61:f6:3d:3e:92:
7a:57:01:fd:0e:04:65:4a:6e:e8:d7:9b:8e:b1:66:
b8:a0:f9:45:1f:12:69:11:9f:04:f6:f9:ce:1e:eb:
6b:8f:24:29:ab:34:04:e7:17:af:bf:bb:06:10:19:
1c:2a:59:12:56:4d:97:c8:12:f4:73:3b:9e:3c:a9:
13:e9:93:53:48:e7:b6:69:ec:04:ab:3d:a1:9d:61:
17:df:76:24:bc:a7:33:88:73:12:8e:03:aa:81:fc:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:9E:ED:C8:2E:2D:23:59:6E:1E:0E:A9:03:D4:04:AA:95:7D:6F
X509v3 Authority Key Identifier:
keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8c:d4:95:77:de:21:3f:3f:c5:99:97:7f:5b:9c:6a:96:23:
c6:ea:91:c6:c3:68:8c:82:7b:6d:23:35:05:a4:5a:4a:26:64:
5a:52:0b:a0:22:81:27:10:69:1b:58:ba:21:35:5f:80:ce:c3:
b1:02:b3:37:c4:ca:85:05:3f:ca:d5:23:9d:96:a9:25:8f:46:
87:ec:c3:7f:6d:6c:64:ed:ee:e0:10:fc:97:e6:ac:33:9b:08:
47:a7:c2:23:dc:3c:7d:17:a3:8c:52:2e:40:c8:a0:f2:db:60:
6e:cc:9f:1e:dd:ba:a0:d6:c8:dd:73:61:e1:00:3c:f3:91:63:
6b:46:a4:17:45:53:30:ec:1e:24:81:a1:30:b6:33:9e:6a:f9:
88:64:c4:58:ff:66:30:ef:8a:46:8c:6e:29:5b:18:dd:33:0f:
c6:01:8c:de:30:95:e3:bd:f5:e9:98:5f:5a:14:93:60:19:cc:
c5:e4:c9:bb:34:06:74:49:85:6a:c7:d9:3e:9e:93:67:8e:a1:
cb:79:ae:3b:c5:0a:48:f6:86:70:d0:b1:1c:ec:52:5c:83:9d:
cf:74:bc:b9:a3:7c:a9:57:3a:42:58:36:30:0f:96:20:39:68:
48:11:3a:22:af:12:16:99:9f:1c:87:5a:7b:9b:f4:8b:5c:44:
a9:ff:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:55:44 2025 by rpki-client