Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32342d3234203d3e20313530353132.roa
File: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (raw, json)
Hash identifier: Bn094jjpTmS3GhwwJiONFucK7tyqAYJ6uENssiFFaws=
Subject key identifier: 25:C2:6D:95:76:C2:EC:31:4B:6F:9F:C7:55:B4:A2:E5:FC:35:97:7D
Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A
Certificate serial: 5E5B1839F7EDFB0C049EEC1E2988BB409180271D
Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32342d3234203d3e20313530353132.roa
Signing time: Mon 23 Dec 2024 11:00:02 +0000
ROA not before: Mon 23 Dec 2024 10:55:02 +0000
ROA not after: Mon 22 Dec 2025 11:00:02 +0000
asID: 150512
IP address blocks: 103.54.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5b:18:39:f7:ed:fb:0c:04:9e:ec:1e:29:88:bb:40:91:80:27:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A
Validity
Not Before: Dec 23 10:55:02 2024 GMT
Not After : Dec 22 11:00:02 2025 GMT
Subject: CN=25C26D9576C2EC314B6F9FC755B4A2E5FC35977D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:4a:26:b8:3e:43:d6:16:ca:90:03:26:8f:
c7:5a:31:42:90:f8:e7:60:9e:09:b6:5f:9c:7d:d1:
7d:93:e4:40:ae:35:11:40:2c:bf:58:97:ca:f0:e8:
fc:9b:89:94:64:0b:bc:f3:89:bd:8a:42:76:45:d0:
62:d5:a3:75:5c:54:d8:a0:32:de:5d:c9:e6:5a:fa:
84:f0:79:be:73:f8:6d:4c:1c:98:43:11:44:65:de:
a5:01:35:c5:eb:c9:89:d3:c9:f2:c0:3f:7c:37:91:
6a:3d:10:f6:cb:32:3c:7a:3c:1b:36:e6:47:50:3b:
94:5b:da:5c:11:cb:fb:22:16:55:53:09:97:ef:48:
ae:66:c6:ce:54:61:76:62:ef:b8:8b:49:d5:69:e5:
19:36:db:59:00:98:e0:03:80:69:dd:a2:c5:9e:ca:
06:e9:2a:b9:2d:0d:14:85:23:27:ba:e1:9c:ec:8b:
6f:ac:7b:6b:7e:b2:45:64:da:89:a2:73:4a:32:b5:
46:ce:af:8c:3d:6a:9b:50:df:c3:e1:87:03:78:ee:
a1:d7:02:e8:0a:29:1d:9d:fb:ae:63:7d:fc:0b:0b:
eb:3a:4f:7d:3a:fc:66:fd:dd:44:bf:92:6f:b5:77:
2c:2a:46:a4:4b:74:d0:21:f8:5d:28:d2:7d:81:8a:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:6D:95:76:C2:EC:31:4B:6F:9F:C7:55:B4:A2:E5:FC:35:97:7D
X509v3 Authority Key Identifier:
keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32342d3234203d3e20313530353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ad:18:37:6b:ee:64:95:27:c1:49:a7:8b:dc:97:ff:ee:fe:
88:d4:02:4b:3d:b2:4c:58:31:76:b4:ca:5d:5e:45:2f:10:2d:
ce:ff:7e:a7:c5:1b:28:36:f1:c2:5b:00:af:b2:5c:cd:3f:4a:
0b:a4:1c:21:75:15:50:77:0b:f4:af:e8:d1:c9:69:03:9e:c0:
f9:41:a8:e4:05:a2:42:c9:7d:65:3a:76:19:93:0c:2b:a3:c2:
b8:45:ad:50:ea:2e:e1:b1:9e:f7:af:4b:66:92:12:06:fa:11:
45:fd:76:38:bc:7e:d6:64:9a:bc:0c:5e:4a:6a:05:77:50:d1:
19:e3:83:3c:3d:d9:35:b8:7a:2e:cf:e0:8f:80:a3:ec:47:5a:
b6:94:ea:f9:87:c5:35:4d:eb:b3:75:5f:3a:28:6d:89:89:79:
72:aa:fb:83:44:4b:b4:fd:1b:80:8c:2e:cd:2c:7c:6b:5b:8e:
cf:2a:57:e4:66:6d:b6:96:2d:fb:4a:c3:83:fc:08:8d:f6:24:
46:da:69:22:f3:1b:f5:c9:c9:38:38:c0:22:29:30:9c:75:92:
b1:8a:f0:b9:2f:4e:08:f0:de:51:d7:7e:75:9c:d6:98:d6:50:
6a:23:03:0c:a7:0e:6d:14:1f:84:64:f4:10:cb:11:f0:7c:9e:
ad:62:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:09 2025 by rpki-client