Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
File: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (raw, json)
Hash identifier: yUVxZDargSk2FtLBXi+cpONrxw8G3BPYR5lXD9FjXw0=
Subject key identifier: 75:2C:28:B0:21:F2:26:88:B5:0C:02:19:02:DC:A9:01:CF:28:C5:A1
Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial: 7AF2621A1E205CFEEDC9FC99D699F7B619D5FCB8
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
Signing time: Tue 07 May 2024 05:00:01 +0000
ROA not before: Tue 07 May 2024 04:55:01 +0000
ROA not after: Tue 06 May 2025 05:00:01 +0000
asID: 141910
IP address blocks: 103.164.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f2:62:1a:1e:20:5c:fe:ed:c9:fc:99:d6:99:f7:b6:19:d5:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Validity
Not Before: May 7 04:55:01 2024 GMT
Not After : May 6 05:00:01 2025 GMT
Subject: CN=752C28B021F22688B50C021902DCA901CF28C5A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:cd:db:0f:08:f0:4b:e5:71:00:80:5e:a0:
57:74:c4:d6:16:53:82:72:1b:d7:c8:ff:b1:b7:eb:
e1:91:f5:55:ef:4c:f7:03:63:be:4f:b0:0a:75:14:
a8:e7:fa:6d:d8:8d:6a:09:5f:da:be:b6:ef:b6:da:
d4:b7:83:b0:ee:47:80:a3:a0:42:45:42:9f:43:5b:
cc:d2:62:b5:ef:ea:4a:91:97:5a:29:15:5a:bd:e5:
90:59:35:3a:f5:c1:68:e1:0a:e1:ba:b8:60:a1:fc:
0a:2b:16:b9:7a:69:5b:6c:38:9d:49:20:09:ca:c6:
a8:bd:1d:b3:04:ff:c5:dc:8a:5f:43:aa:d5:b6:f6:
34:30:98:ce:aa:d5:99:f5:23:20:a9:e2:16:9a:62:
4e:ca:12:92:8c:97:25:be:bb:d6:4c:62:c8:f9:a1:
b5:c2:e7:93:e5:72:a5:7c:e3:e0:2d:bd:15:90:b3:
20:fa:39:06:20:c5:51:1b:1b:dd:8e:51:94:e0:fa:
c3:83:5d:9c:40:4b:0e:ff:dc:bf:27:50:16:b9:c1:
38:8f:db:66:05:43:76:f0:af:64:f1:9b:0f:35:85:
89:e6:4d:3e:1c:7e:67:eb:37:91:1e:a3:cc:cd:94:
bb:b9:6b:2f:98:b0:68:18:7b:26:d0:16:42:dc:2f:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:28:B0:21:F2:26:88:B5:0C:02:19:02:DC:A9:01:CF:28:C5:A1
X509v3 Authority Key Identifier:
keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.58.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:28:24:9f:67:d4:10:6d:08:1e:2e:69:8a:aa:a4:39:d0:a9:
0c:5e:fb:6d:6b:0e:ff:c9:97:cf:a2:7e:ee:be:71:20:86:e3:
28:f2:d9:67:e1:4f:e2:1b:74:8e:52:4f:57:f1:e5:3a:f0:e3:
81:ad:88:d5:1f:6b:a1:6e:4b:ee:14:ae:79:e4:3a:52:d0:69:
3f:02:54:d8:86:3b:95:09:63:eb:a1:95:23:03:11:d9:36:cc:
5e:5c:ab:e0:10:e6:b6:69:5f:3d:d1:80:7f:7b:b8:7d:c5:64:
34:da:e2:62:67:40:f7:1d:cd:48:d3:19:14:ef:fa:27:3d:97:
15:fe:e2:c1:81:e7:de:dd:d5:5e:39:dc:ff:9a:44:d4:66:61:
99:e9:8a:12:2f:3a:c7:b0:99:6f:91:52:27:31:ad:af:c1:43:
dc:30:19:cd:46:05:30:a3:96:0a:44:8a:30:69:ef:3b:43:99:
26:0b:89:21:15:68:3e:76:b9:13:06:8d:30:43:62:9f:ff:92:
7b:62:9f:e7:dc:2e:1c:40:9c:27:e6:85:4e:b5:0d:4d:cc:b8:
5e:f9:b0:d3:ec:b5:1c:16:e6:ea:8a:e8:2a:a0:2a:c3:db:9b:
ae:c7:3c:07:62:d7:50:58:ce:1b:0e:9a:d1:97:4e:2e:e7:23:
80:83:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:21 2025 by rpki-client