Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa
File: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (raw, json)
Hash identifier: 8H951OFYlZkzuvTNcIe0++EeO0XA156uuF4G5IFxI6E=
Subject key identifier: 9D:1B:DD:12:6A:06:CF:D7:0A:91:0D:68:34:61:EB:91:CB:60:B2:11
Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial: 0F5DBF652FC758B7FA20E5BBFFC963D476906B76
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa
Signing time: Thu 19 Sep 2024 13:45:57 +0000
ROA not before: Thu 19 Sep 2024 13:40:57 +0000
ROA not after: Thu 18 Sep 2025 13:45:57 +0000
asID: 38149
IP address blocks: 103.3.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5d:bf:65:2f:c7:58:b7:fa:20:e5:bb:ff:c9:63:d4:76:90:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Validity
Not Before: Sep 19 13:40:57 2024 GMT
Not After : Sep 18 13:45:57 2025 GMT
Subject: CN=9D1BDD126A06CFD70A910D683461EB91CB60B211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:70:f3:6b:5e:9d:40:0e:a2:1c:8c:c4:e3:
cd:d6:3b:73:3d:93:c7:69:99:c8:0f:fa:37:13:10:
ca:50:9a:61:eb:6e:ab:2b:fe:af:23:aa:3e:f9:69:
8e:fc:a1:82:95:85:d9:21:5f:92:64:6f:06:2e:f9:
54:4a:2b:30:cf:6d:2b:88:96:01:7d:ef:3b:80:e4:
23:06:bd:6d:ff:f2:8c:46:f1:5e:50:52:ef:20:ca:
80:bb:9c:c9:16:7a:52:9b:10:a2:c2:3a:6e:f7:62:
b5:0f:ee:a4:92:68:e1:94:bf:34:19:64:6e:78:13:
d4:d6:34:b3:17:b8:d6:fb:06:87:73:03:dc:c9:03:
bb:64:b6:d2:90:64:49:d7:ca:30:10:d7:70:8c:1a:
3e:d4:3b:27:e5:2a:02:f3:be:2d:36:a8:c5:3d:69:
ed:1d:c7:35:d7:ad:e5:fe:13:dd:91:28:5e:d2:bd:
73:cd:c6:eb:3a:1f:cd:18:41:d8:fc:29:90:b6:05:
5f:15:34:6f:83:c9:cc:a1:92:7b:c6:01:e2:e1:8b:
34:1e:6e:b8:d9:93:88:ab:cf:90:38:10:7a:d1:c0:
5e:ef:85:37:81:53:fb:f2:18:6d:9f:d5:58:ce:50:
cf:ac:e5:af:f5:c0:1f:c4:7b:c6:22:f5:d2:4f:99:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:DD:12:6A:06:CF:D7:0A:91:0D:68:34:61:EB:91:CB:60:B2:11
X509v3 Authority Key Identifier:
keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.212.0/22
Signature Algorithm: sha256WithRSAEncryption
99:12:a7:ab:8b:78:ad:f8:e3:9a:a7:03:89:64:e1:e0:fe:9a:
d8:06:21:8c:9c:e2:45:ad:74:8a:84:19:87:ee:9e:99:10:13:
d9:c9:1c:0d:70:05:7e:56:17:7c:a4:05:5b:41:b4:1c:a4:8d:
ad:20:c2:0b:3b:d6:5f:29:cb:57:56:0d:8f:d8:9c:8b:4f:41:
df:f2:30:73:70:41:53:5f:47:9a:5a:a4:53:45:49:6f:0d:9b:
b0:7d:5f:25:4b:11:7c:dc:40:af:8f:91:12:ac:e9:43:65:22:
93:0a:f5:b9:26:04:3b:ad:c1:dd:50:e2:a1:8a:05:e3:38:9e:
38:4b:cf:6a:fc:00:32:27:fa:3f:db:a3:de:22:9f:c9:fb:b0:
99:36:9a:24:5b:76:d4:7a:25:a3:2b:71:03:f2:25:f0:9b:8c:
0d:7a:91:99:75:36:c8:94:37:27:48:83:d9:f4:50:e7:2e:d5:
69:a1:ff:14:14:ef:ff:c3:08:67:7b:0b:38:e1:3d:9c:e8:2a:
07:64:b7:15:44:fd:0f:c4:4c:02:4d:7a:08:09:01:5a:e4:a0:
33:77:6e:24:6b:7f:a9:09:70:74:b3:7c:2b:73:69:dc:d5:d8:
72:32:47:5d:16:ec:41:41:9c:cf:01:27:31:0a:a1:96:2a:83:
f3:48:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:30 2025 by rpki-client