Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32332d3233203d3e20313431313339.roa
File: 3130332e3135392e39322e302f32332d3233203d3e20313431313339.roa (raw, json)
Hash identifier: +MsYiSB33ZhKOE38AtAvkKv5jDqsSgH+lwGxVIUzXdI=
Subject key identifier: CF:D6:8A:F9:52:1D:08:B6:AA:5F:0B:41:23:40:47:68:87:E4:2A:9E
Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Certificate serial: 61C465588B5BAB29E9985740FD66AD4B5A7D3126
Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32332d3233203d3e20313431313339.roa
Signing time: Tue 24 Dec 2024 19:23:43 +0000
ROA not before: Tue 24 Dec 2024 19:18:43 +0000
ROA not after: Tue 23 Dec 2025 19:23:43 +0000
asID: 141139
IP address blocks: 103.159.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c4:65:58:8b:5b:ab:29:e9:98:57:40:fd:66:ad:4b:5a:7d:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Validity
Not Before: Dec 24 19:18:43 2024 GMT
Not After : Dec 23 19:23:43 2025 GMT
Subject: CN=CFD68AF9521D08B6AA5F0B412340476887E42A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:50:4b:d4:d9:a6:63:be:0f:c2:89:e1:a5:
07:17:01:73:0d:23:74:36:4e:aa:88:73:db:f6:0f:
40:d0:fe:f7:b9:c8:55:3f:7a:ea:71:4e:53:0c:e5:
37:5b:a2:09:92:40:77:79:b4:d6:28:fc:20:e0:2b:
ae:1d:5c:9b:eb:b1:ee:1a:05:96:fc:b6:e6:e8:f7:
11:09:10:a7:5d:9b:fb:2a:81:f9:6e:ed:75:84:19:
62:5f:a3:8b:cd:0e:72:d3:f7:00:0c:ad:ca:0c:60:
08:a1:5f:51:8d:10:61:39:99:e8:76:0e:2b:5e:44:
6a:5f:f3:49:1b:bd:1e:0b:95:c1:16:99:41:56:26:
d5:28:6a:4e:4b:b7:d7:f8:f5:46:d2:51:70:e6:03:
6a:b2:13:b8:42:45:b4:c2:0a:28:7d:bd:7c:58:a8:
ca:5c:23:c1:93:f1:b6:02:3d:6a:c4:61:27:1f:83:
2c:f3:4b:1f:f5:18:38:25:86:59:1d:61:a6:50:4c:
c6:cb:13:dd:ae:0e:2c:71:01:79:1c:7e:fb:25:55:
60:f4:c7:a6:93:ef:9e:64:a3:e2:a5:5e:d0:38:e9:
f7:c3:88:52:18:33:28:c9:01:f2:16:fa:5a:ba:67:
fa:b6:3a:08:99:52:fd:50:2a:5f:0c:2b:0a:32:9b:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:8A:F9:52:1D:08:B6:AA:5F:0B:41:23:40:47:68:87:E4:2A:9E
X509v3 Authority Key Identifier:
keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32332d3233203d3e20313431313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.92.0/23
Signature Algorithm: sha256WithRSAEncryption
53:4e:d2:83:7b:43:ef:e9:10:c1:cb:d7:43:0b:db:e8:ed:1f:
bf:95:b9:62:9b:56:92:77:db:e2:99:34:0c:cf:63:23:c7:db:
4c:b4:42:6c:bd:5f:ba:46:82:15:aa:d6:d2:31:5c:2a:3a:fb:
fb:5c:f2:d8:71:3f:95:7a:7d:69:6f:99:fb:a3:95:06:af:97:
ea:fb:94:d4:e3:82:d0:aa:0b:d8:bf:cf:1d:da:b3:08:f7:f5:
29:6f:e3:df:7f:ab:5c:6b:4c:c6:aa:03:10:7f:d1:1b:37:ef:
bc:6c:52:17:7c:65:d8:15:17:2d:9c:0e:54:2c:7f:27:a1:90:
be:62:bf:d1:f6:4a:a7:44:fc:0a:04:45:30:0d:2c:e7:cc:a9:
c3:91:aa:1b:db:cc:8d:b8:15:a9:e4:3b:d4:bc:65:9c:dc:69:
76:45:81:03:df:e0:47:ac:b1:b7:0e:0d:c6:7b:dc:10:33:bd:
54:7c:0b:d5:f9:ff:9a:a5:fd:a8:c4:dd:8c:a0:52:01:26:ac:
77:ce:46:7c:f7:1a:e1:c6:9b:4c:9c:dd:93:af:c7:f0:0a:c1:
7e:5c:6d:05:1c:86:82:ab:2c:b9:45:ee:bb:9a:55:ae:22:cf:
5c:65:9a:aa:75:3b:3b:85:ef:74:87:10:52:3b:0b:24:42:4f:
8d:07:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:02 2025 by rpki-client