Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa
File: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: FcF8duvYIXOvc3WqSyocBSQypEigGKGbtBz9pQSGDto=
Subject key identifier: 04:8B:F9:B2:B1:08:E3:1C:58:6E:1C:E1:A1:75:96:FA:73:58:4C:DA
Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Certificate serial: 2669D7B24F1745949FD9467C3D7F5708688304F4
Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 02:54:47 +0000
ROA not before: Mon 15 Jul 2024 02:49:47 +0000
ROA not after: Mon 14 Jul 2025 02:54:47 +0000
asID: 48465
IP address blocks: 103.183.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:69:d7:b2:4f:17:45:94:9f:d9:46:7c:3d:7f:57:08:68:83:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Validity
Not Before: Jul 15 02:49:47 2024 GMT
Not After : Jul 14 02:54:47 2025 GMT
Subject: CN=048BF9B2B108E31C586E1CE1A17596FA73584CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:33:ee:3e:6c:f6:46:46:bd:d9:86:20:b9:
1e:a9:5d:eb:bd:c4:3d:28:a3:b4:24:9c:a2:9d:ed:
45:1c:70:b0:6a:d6:91:ad:e7:82:d4:09:cb:91:56:
15:43:f7:8b:e7:26:9b:d5:2e:c9:b4:d0:d3:67:95:
19:c8:83:74:87:d9:6b:77:8d:ef:72:9a:6b:f6:73:
7a:18:46:f2:1c:92:96:e3:29:41:f8:0a:e1:8b:8d:
7a:50:23:cd:cb:a8:d1:33:2b:b9:c4:c1:99:4c:8e:
4a:63:70:6a:0d:a4:50:41:fe:2c:0f:fa:81:eb:2d:
ce:96:75:b0:f8:7d:2f:c0:0b:38:9e:c8:b9:ce:b5:
4d:00:05:bb:2f:87:05:a4:37:0d:63:8e:aa:d8:a0:
26:91:3f:e1:54:b5:b6:cd:65:ab:63:ec:46:f2:f4:
79:74:98:cc:b1:90:7b:85:fc:90:a9:c9:26:04:2e:
f8:5e:eb:15:23:ed:23:56:8d:83:ad:14:0c:98:44:
8d:8e:27:de:72:eb:93:62:da:fe:b2:01:86:40:74:
0a:57:50:d5:eb:4f:c8:b0:82:f3:58:60:ec:bd:e3:
5c:40:fe:42:7d:be:3d:ac:36:71:b0:bb:3d:47:03:
df:06:46:0f:25:33:18:b4:7f:3e:29:62:0d:e0:54:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:F9:B2:B1:08:E3:1C:58:6E:1C:E1:A1:75:96:FA:73:58:4C:DA
X509v3 Authority Key Identifier:
keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.56.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c8:a1:50:f8:01:42:e0:9c:1f:66:94:22:c5:b7:5f:58:d4:
49:59:c8:1e:69:33:46:93:d1:1a:fc:fc:23:4d:7b:0a:b7:c9:
ab:dc:c3:58:80:fc:28:8a:e0:40:a4:71:cf:76:4d:30:f4:4d:
cd:65:bb:70:de:10:dc:9a:c3:cb:c7:39:2d:fa:c0:35:5b:29:
f0:bb:8b:29:e0:f9:d9:9f:ee:f0:69:9b:52:ae:ea:eb:bc:cc:
cc:84:b5:5a:32:3d:c2:55:11:19:51:aa:8e:c4:80:4c:b1:42:
65:9a:b9:ec:52:c0:1f:9a:db:e6:80:93:d1:2d:2c:96:f3:6f:
1d:ed:62:de:0d:1b:af:25:db:0f:b3:76:b5:8b:56:f4:eb:bb:
bc:8c:fd:63:3e:cf:18:c8:a9:4e:dc:40:02:05:4d:34:1f:6a:
45:41:6f:10:33:c6:20:18:cc:f9:22:3d:dc:04:48:66:d8:2a:
9a:8b:a8:6d:12:6e:0d:12:97:77:31:66:ef:6c:4c:5f:88:ee:
05:33:63:be:11:31:b4:18:39:a3:a6:94:25:78:67:33:fa:16:
4a:cc:cf:d8:75:a0:91:f1:26:29:2d:6b:84:2a:fb:aa:a2:86:
5f:0d:a0:ce:3e:be:e3:e6:c5:49:90:ab:14:4c:42:a8:a2:97:
b4:e0:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:19 2025 by rpki-client