Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa
File: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (raw, json)
Hash identifier: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=
Subject key identifier: 95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 024E29ACDC40E88387B525B9997986B22194833E
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa
Signing time: Thu 13 Jun 2024 16:00:00 +0000
ROA not before: Thu 13 Jun 2024 15:55:00 +0000
ROA not after: Thu 12 Jun 2025 16:00:00 +0000
asID: 131705
IP address blocks: 103.154.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4e:29:ac:dc:40:e8:83:87:b5:25:b9:99:79:86:b2:21:94:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Jun 13 15:55:00 2024 GMT
Not After : Jun 12 16:00:00 2025 GMT
Subject: CN=95C3668C578165C870CF8E5E71B8005B272539A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6d:11:20:9a:0a:77:1e:aa:3c:74:1f:20:e7:
84:8d:66:d1:6b:c1:e5:4d:29:67:e4:78:a0:0f:bd:
df:96:e8:d0:d1:32:c6:3f:b0:22:39:ba:39:72:73:
0c:f1:0f:51:e8:58:d4:32:60:97:ec:73:ec:89:9c:
62:99:11:78:d8:aa:82:c7:8a:47:72:3c:51:f9:71:
a2:af:83:c9:b9:c4:9d:22:e8:26:e0:ff:d2:1c:32:
ec:ee:c9:78:72:d2:fc:c1:92:8b:9d:63:8a:cd:da:
d6:df:a9:dc:cc:5f:b4:d6:78:f4:b0:9a:32:39:57:
5c:70:12:3d:47:b6:a2:6e:f0:37:6f:25:a3:84:75:
03:7d:90:c8:1a:fb:3d:2d:03:ca:4f:67:e0:44:cb:
7f:ba:19:33:e6:7d:73:e6:be:25:13:3b:0d:8f:4c:
c7:80:8b:e6:a9:82:e6:e7:07:af:35:de:33:5e:1f:
18:aa:30:ae:b0:81:28:ae:92:54:51:47:f4:70:68:
49:8d:5b:fb:ef:3f:9d:10:b8:14:23:ed:f5:51:a1:
1a:5c:09:14:2f:e1:05:c1:9e:98:6a:3a:b2:2d:68:
50:d6:00:31:45:43:46:5d:48:43:b5:25:6f:73:6c:
fa:08:82:9e:3e:39:bb:32:49:96:70:15:9a:7a:4a:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.178.0/23
Signature Algorithm: sha256WithRSAEncryption
42:85:03:5d:9e:e9:eb:b2:dc:b2:2e:66:db:01:95:0d:1e:50:
ad:3c:04:28:bb:ee:e6:4e:8c:da:2d:90:7e:f5:aa:ce:03:a7:
ca:ea:6c:93:78:7a:d9:f6:1e:86:f0:85:d9:ac:3c:21:69:cf:
da:1d:91:1d:68:ae:e2:e7:8a:c9:eb:d0:5f:e0:8e:ba:5b:9d:
a4:e5:9a:49:1d:59:49:68:8b:11:34:e2:a4:da:b4:50:7d:7c:
8a:9f:fc:49:d7:56:bf:d8:ad:79:78:f4:6b:1c:12:84:5e:57:
a5:1e:52:25:fd:81:f6:99:21:28:15:9f:d6:cc:56:5c:40:51:
fb:d7:7f:9e:60:b8:81:be:9a:31:15:52:14:2e:15:9a:d0:f7:
e4:1f:af:6a:f9:40:84:c8:ef:61:54:3f:b8:2e:85:ca:cd:c9:
80:08:da:47:f6:17:f8:06:ab:eb:e6:a3:12:52:1e:98:bb:cc:
02:5b:55:33:44:09:64:d8:f8:52:75:27:09:8b:35:00:5d:d0:
b9:69:36:04:f5:d4:28:4b:34:f8:56:b8:46:41:c0:d1:32:80:
87:39:8e:fb:01:05:90:d4:97:80:3e:6d:a7:72:c7:ff:a5:08:
8a:2b:41:5e:1b:c4:e7:bd:00:23:94:71:fc:55:15:16:0f:91:
d8:d0:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:31 2025 by rpki-client