Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
File: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier: DIk57DXP9EbnAxhNqfJ9/qfaXKxZUsUMRYf4DR8Uo5I=
Subject key identifier: FD:F7:AD:D1:E8:47:AD:D7:3C:A8:D4:31:B8:80:F1:6E:E3:D1:23:8F
Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Certificate serial: 0460E2CC446B230D734C4F41455785F02D114C53
Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
Signing time: Mon 01 Jul 2024 01:03:12 +0000
ROA not before: Mon 01 Jul 2024 00:58:12 +0000
ROA not after: Mon 30 Jun 2025 01:03:12 +0000
asID: 140389
IP address blocks: 103.153.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:60:e2:cc:44:6b:23:0d:73:4c:4f:41:45:57:85:f0:2d:11:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Validity
Not Before: Jul 1 00:58:12 2024 GMT
Not After : Jun 30 01:03:12 2025 GMT
Subject: CN=FDF7ADD1E847ADD73CA8D431B880F16EE3D1238F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:f3:43:bf:4f:ad:17:cd:35:72:eb:10:c0:
83:00:f9:a9:5a:ee:f2:00:bc:46:3a:49:7f:a9:6e:
96:97:11:26:2f:60:9e:9e:b6:02:7a:e1:f5:7a:a8:
7a:eb:e7:c1:58:39:f8:d4:67:be:3c:2f:5a:07:40:
a4:9b:9e:96:eb:fc:91:1b:f0:f0:81:d1:3d:48:1e:
de:37:32:ae:72:47:79:c7:60:31:e6:d7:65:4f:e0:
f1:b9:3d:10:87:04:82:67:2d:60:e3:e0:35:75:8f:
75:f7:13:5e:19:a4:05:18:36:27:ea:b5:e6:80:2d:
d9:11:84:4e:68:0f:3b:35:3b:56:ea:a6:ec:b5:5a:
4d:cf:ad:58:e5:15:8f:bd:6f:5b:87:ff:70:fe:20:
32:3e:ad:d3:ea:d1:7f:04:0f:3c:3c:81:4d:eb:d6:
29:91:8e:54:f3:b3:ba:74:da:31:87:9d:ea:88:59:
ca:70:bc:03:81:35:96:87:74:89:63:90:4f:4a:4c:
b8:3b:e3:b5:dd:54:04:72:3f:70:06:0f:b2:68:f8:
23:15:d8:b1:2a:ea:55:59:60:fe:34:72:a0:15:cc:
e3:25:19:70:55:13:02:dc:4f:08:cb:75:af:e5:9b:
46:fb:b5:07:8d:bf:62:fa:51:1f:49:5b:59:53:27:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:AD:D1:E8:47:AD:D7:3C:A8:D4:31:B8:80:F1:6E:E3:D1:23:8F
X509v3 Authority Key Identifier:
keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:63:82:4d:cd:d2:37:5c:4f:56:29:a7:e7:79:e7:98:26:c2:
5f:e2:0c:68:1d:ff:5d:50:7a:95:10:3e:75:8c:b7:c8:ab:6d:
11:17:f4:ec:d1:22:ad:a0:77:30:22:93:1a:b5:8e:39:cf:bb:
5b:b4:2e:a6:e0:e1:85:d1:cd:ba:f5:5a:d8:e6:14:5c:b9:31:
7c:1a:08:84:57:c8:3a:d9:17:1f:49:99:1e:5f:e2:82:b8:ca:
5c:bc:a7:bc:c8:11:ed:84:51:fc:01:33:4f:9d:9b:dd:be:15:
b7:ac:84:98:a4:08:a2:88:2c:1b:3c:5e:4a:b8:cf:be:2b:6c:
4f:d6:ff:cd:1f:f6:21:43:a0:70:a0:75:0f:b0:d9:f8:64:0d:
36:3d:3d:6a:7b:6d:57:20:3e:1b:ad:4c:19:19:e5:ec:9f:ed:
3b:a4:67:33:98:92:ae:70:c6:3b:5f:a2:b4:14:2b:ed:0d:47:
e1:d8:94:a0:52:37:0f:99:3b:6f:4c:a7:19:d6:b8:75:67:27:
11:4b:76:04:23:80:98:f8:66:2a:14:30:fa:99:da:67:ca:e5:
4c:c4:82:91:e9:1e:c2:68:f8:4d:27:78:39:81:e9:e0:ab:96:
53:11:61:a9:fb:e4:13:4c:72:4e:d0:c3:4a:ae:91:ba:2c:7b:
17:b0:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:43 2025 by rpki-client