Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3233203d3e20313530343837.roa
File: 3130332e35352e32382e302f32332d3233203d3e20313530343837.roa (raw, json)
Hash identifier: 8ACYUiggkiWF2QMNYAS7LCN9uY0jY6YxY0bLNcGGbtY=
Subject key identifier: D3:4E:F2:7D:A8:48:3A:3C:E4:D6:5E:DA:EB:DD:60:3F:3D:98:58:F4
Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial: 3ED3C0AB881A3222BF7518F000E3C7AA68833844
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3233203d3e20313530343837.roa
Signing time: Sun 31 Dec 2023 04:44:29 +0000
ROA not before: Sun 31 Dec 2023 04:39:29 +0000
ROA not after: Sun 29 Dec 2024 04:44:29 +0000
asID: 150487
IP address blocks: 103.55.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:c0:ab:88:1a:32:22:bf:75:18:f0:00:e3:c7:aa:68:83:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Validity
Not Before: Dec 31 04:39:29 2023 GMT
Not After : Dec 29 04:44:29 2024 GMT
Subject: CN=D34EF27DA8483A3CE4D65EDAEBDD603F3D9858F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:57:ac:1f:aa:7f:8a:af:ff:eb:29:d2:fe:
24:4b:9f:f1:00:90:32:5a:12:30:61:a8:03:d2:9f:
a8:8f:05:5a:03:40:44:17:54:f3:2a:37:36:c6:75:
63:e8:ac:04:45:7b:ee:6b:19:94:4a:d1:88:79:c1:
09:ed:b1:fb:02:5a:3c:dd:83:7a:bc:89:b2:17:12:
b8:b6:c3:7c:12:f9:d6:25:bd:49:0a:4d:e3:72:c5:
38:bb:a8:ab:a1:60:91:2c:3d:26:10:84:31:63:0f:
7a:9f:8b:3c:71:e1:ee:6d:19:f4:b9:a6:0a:f8:1f:
ce:e2:f4:47:ac:25:83:0e:39:e0:a3:0e:45:9b:69:
af:f5:2f:3b:72:30:cd:f6:b0:ad:29:21:68:f5:a7:
62:d1:d8:a5:2b:30:aa:40:cc:aa:49:3b:33:36:3a:
ea:1d:f2:6e:62:62:b5:2a:93:b7:ca:31:cf:39:7a:
2f:c9:3a:8a:bf:5c:9d:16:6d:14:a3:61:b4:6f:3d:
ed:39:a9:1a:da:c7:7a:70:8f:bc:b8:12:96:b3:8e:
77:24:9f:15:aa:d1:b1:1c:93:b3:2c:fa:19:50:6d:
c2:48:f5:e3:73:cf:25:7c:93:ba:f6:9c:00:ba:ae:
fb:8b:91:b4:ca:fc:df:49:18:db:0e:3b:76:54:c8:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4E:F2:7D:A8:48:3A:3C:E4:D6:5E:DA:EB:DD:60:3F:3D:98:58:F4
X509v3 Authority Key Identifier:
keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3233203d3e20313530343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.28.0/23
Signature Algorithm: sha256WithRSAEncryption
80:5b:e8:39:7d:4b:ee:a6:bf:b6:15:0e:63:1e:1d:5f:e9:18:
56:36:bc:0f:e5:91:bd:59:6f:a7:35:c1:2e:78:bf:95:45:e5:
ca:64:fd:cd:b0:e8:6e:96:11:ba:ac:72:c7:d2:f6:e8:34:58:
33:5d:21:67:7f:02:2b:68:e1:74:4b:29:26:7a:de:f4:3a:9a:
a5:0e:89:c2:7b:39:65:a0:59:c7:36:1f:56:90:ff:c0:51:48:
cf:46:f9:7c:7c:28:c2:a6:18:7a:00:af:b3:cc:2c:6a:4b:f1:
1b:1f:0e:d4:51:31:7f:72:1e:91:e7:19:06:4e:4b:67:ec:7f:
0b:d3:5c:1f:68:48:72:bb:c3:6d:05:4b:e0:8d:3d:18:02:d2:
d3:d5:b1:0e:64:42:a6:12:b0:15:3d:0c:cb:40:9f:29:5a:00:
ca:02:74:26:a7:c8:a7:61:e4:2f:9f:1e:82:0b:90:5d:82:29:
04:5c:67:08:58:cd:1e:1f:0e:bd:40:5c:11:6c:c6:13:e2:15:
24:cf:d4:b3:f1:e7:ac:92:c8:d8:e0:7f:36:8b:30:08:24:2b:
79:ae:05:9d:38:07:8d:ad:72:7d:43:84:4d:de:94:c0:a4:c1:
90:32:49:58:5b:4e:ef:4a:a0:f5:70:1c:08:5f:33:85:fb:70:
18:54:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:09 2025 by rpki-client