Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa
File: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (raw, json)
Hash identifier: kTHvzmqB/2veUohEP9ZdbxC595Rgd4EACGX8AypsPpY=
Subject key identifier: 90:3F:F9:F0:B4:DE:C7:60:CA:69:96:33:91:4B:65:15:6A:4B:42:8D
Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277
Certificate serial: 0D2DFA448770DF9C591C7B53568E04FF5D376783
Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa
Signing time: Sat 14 Dec 2024 04:32:52 +0000
ROA not before: Sat 14 Dec 2024 04:27:52 +0000
ROA not after: Sat 13 Dec 2025 04:32:52 +0000
asID: 153092
IP address blocks: 103.80.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2d:fa:44:87:70:df:9c:59:1c:7b:53:56:8e:04:ff:5d:37:67:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277
Validity
Not Before: Dec 14 04:27:52 2024 GMT
Not After : Dec 13 04:32:52 2025 GMT
Subject: CN=903FF9F0B4DEC760CA699633914B65156A4B428D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:ad:50:12:09:32:93:d3:ef:a3:e2:63:f0:
72:02:b8:31:7b:dc:6c:4a:aa:63:01:e4:76:cd:42:
bd:47:84:34:3c:10:f6:fe:9f:7e:72:33:d7:c6:9c:
9e:7d:54:ee:50:a1:aa:2e:8c:1a:be:ff:7c:4b:68:
e6:45:8b:86:b8:66:43:87:cd:70:4c:7f:dc:7e:88:
3d:d2:96:fa:2a:ed:53:2e:d7:c3:cd:3c:28:c7:a9:
b8:52:0c:bd:c5:3c:c6:68:e9:da:73:fb:d2:70:a5:
1f:ea:9e:ed:8e:f4:47:a8:b3:a2:c1:b2:ff:68:a2:
c6:fc:52:82:53:ec:74:25:fd:ad:63:a8:35:6b:28:
d7:67:56:93:7b:41:66:57:db:52:65:84:dc:2b:5a:
0f:f2:6d:0f:cd:5d:72:4f:4b:07:c9:e0:fb:0a:3b:
22:49:f7:c7:a7:03:d4:99:50:76:6e:5d:db:98:7a:
4c:68:29:b6:85:89:ca:fd:dd:a4:8d:c4:82:3a:b2:
49:6f:9b:f1:4f:38:7a:68:5e:ac:57:48:4b:74:02:
6e:ca:13:bc:a4:48:07:57:05:11:74:ae:5d:98:60:
c2:c5:8e:b9:84:6a:75:20:15:44:12:cb:88:5b:03:
71:b8:78:91:3f:a9:a4:3a:76:28:c8:71:0e:be:05:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:F9:F0:B4:DE:C7:60:CA:69:96:33:91:4B:65:15:6A:4B:42:8D
X509v3 Authority Key Identifier:
keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:e2:bd:d2:5a:87:20:05:b8:2c:39:8b:7d:41:80:fa:a8:a1:
f5:5d:3d:22:78:7a:a0:cd:1c:1c:09:f5:04:e5:20:e0:e4:ef:
81:06:cf:7d:95:44:cb:e1:b0:9c:8f:58:da:73:39:16:c2:39:
eb:de:a9:5e:2c:4e:0f:00:f1:51:48:a0:d0:75:4b:a5:1d:c6:
2d:67:2f:4b:ab:b8:c2:94:68:6d:7c:fe:0b:6d:9a:c5:6e:c3:
b0:f8:a0:31:f4:c0:26:53:25:f5:ed:67:e6:78:03:ab:d3:b5:
fa:5e:a2:31:0d:ba:88:cc:76:9d:9d:8a:80:ef:53:69:a9:aa:
73:e8:5c:68:31:0a:24:7e:4d:d3:ac:ed:03:17:6b:e5:a9:e4:
21:54:0b:15:03:06:bd:3d:65:7f:6a:24:bb:cf:3f:22:64:fe:
d2:31:c0:71:f6:17:24:f5:f3:87:d2:2d:1b:2d:fe:09:f4:80:
5a:9f:e9:ae:b1:54:c3:8d:40:7c:46:6e:a6:0b:b5:f6:f0:64:
3a:fd:13:e6:5c:21:c8:46:f1:3e:8e:b7:20:35:cf:01:cd:0c:
57:56:4b:aa:3e:69:5a:f0:03:6c:c1:d5:ad:1c:5d:26:4f:de:
3a:fb:59:e6:ca:b5:3f:3b:2b:2d:e8:16:f0:01:65:af:08:87:
13:59:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:47:45 2025 by rpki-client