Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa
File: 3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa (raw, json)
Hash identifier: 7LlAdTViR+6wbsIPoy9XFjZU3RqqVqstu1qtg3UwKgc=
Subject key identifier: 38:A3:67:96:AC:85:3B:73:C5:A3:7F:CA:76:47:6F:73:D4:12:1C:17
Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Certificate serial: 2D8AFFC819EF3E06A70200B08CF2F6F1A864AEC5
Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa
Signing time: Sat 06 Apr 2024 04:02:01 +0000
ROA not before: Sat 06 Apr 2024 03:57:01 +0000
ROA not after: Sat 05 Apr 2025 04:02:01 +0000
asID: 150970
IP address blocks: 103.132.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8a:ff:c8:19:ef:3e:06:a7:02:00:b0:8c:f2:f6:f1:a8:64:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Validity
Not Before: Apr 6 03:57:01 2024 GMT
Not After : Apr 5 04:02:01 2025 GMT
Subject: CN=38A36796AC853B73C5A37FCA76476F73D4121C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:ad:19:81:2f:7c:87:94:54:e1:ea:c9:30:
5e:96:51:4a:7d:c2:a8:59:7b:f1:2a:5a:02:52:33:
69:b7:fd:68:85:c2:0a:d4:00:25:ee:62:26:7c:cd:
a8:39:f9:28:58:40:d4:4d:53:ca:dc:63:c4:61:2a:
94:55:7b:23:c1:46:9b:a1:e0:1f:b8:0f:95:d4:fa:
26:f3:6b:46:c7:e4:29:4e:10:f1:6c:d0:ac:a8:a2:
0f:bf:a0:72:31:0b:cf:d3:31:cb:13:23:73:75:22:
f8:1a:c6:24:53:68:97:d2:66:41:8e:86:84:a7:06:
f0:5e:5c:bb:cc:77:ff:58:dd:f6:34:ca:4e:5b:4b:
c2:ab:51:07:1e:81:4c:8a:ae:08:27:b2:9d:42:6b:
2f:ab:8c:32:3f:52:33:0e:8d:79:d9:a7:78:4d:16:
d3:97:3d:a3:b3:22:b0:04:c3:47:44:a1:93:70:b5:
ca:90:d0:46:f2:58:d0:c0:36:d8:fb:e8:02:f2:7e:
27:ce:b8:fe:52:8b:80:2b:fb:b7:93:56:fa:ee:d3:
59:25:8a:33:c1:eb:49:b8:a3:58:3c:3b:1b:16:1e:
e8:b9:da:28:48:57:40:d9:30:1e:74:61:bb:08:73:
25:81:62:76:e2:a8:be:24:ba:3c:5c:48:82:bd:fe:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:67:96:AC:85:3B:73:C5:A3:7F:CA:76:47:6F:73:D4:12:1C:17
X509v3 Authority Key Identifier:
keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.40.0/23
Signature Algorithm: sha256WithRSAEncryption
88:97:70:49:d5:eb:a7:d6:62:3f:aa:93:93:aa:1d:1f:2c:49:
20:62:d6:1a:da:52:61:54:0b:a3:74:5d:80:7a:6d:ab:ae:3e:
a9:d1:6f:de:93:ce:8e:a1:17:cc:96:8a:45:4c:18:59:72:5c:
32:3d:65:3c:92:12:6b:3f:76:31:ba:c7:cb:ed:08:3e:a1:8c:
ab:75:00:63:60:08:bc:8b:e4:f7:4f:57:d3:10:ee:d1:62:71:
87:d4:08:99:41:4e:7e:ad:49:ed:6c:b7:36:cd:9b:38:a2:37:
d7:13:ea:52:72:ce:08:7d:dd:fa:70:cd:ba:39:bd:70:99:47:
d6:03:57:7c:7d:45:6f:0b:cc:8d:e7:7e:b4:0a:3a:a5:dc:b2:
b7:b0:b8:14:70:65:8b:80:a4:0d:05:00:cb:f0:9d:1b:9f:92:
aa:a4:ea:fd:e0:cc:0a:2e:71:59:03:db:ac:b2:40:5b:19:5a:
3a:08:a9:d1:08:a5:67:0e:83:c2:ce:0d:01:79:55:64:f8:7e:
f8:3d:2e:a6:99:6c:e7:29:0d:f4:5f:be:79:59:78:a4:71:71:
4e:23:31:3a:c5:8d:7e:c3:0a:da:ee:bc:4e:6c:e9:5b:b0:03:
47:7e:82:85:ef:57:33:9e:2a:b1:c4:c9:4f:68:9f:3a:88:82:
29:5c:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:42 2025 by rpki-client