Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
File: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: ph3uYTlFMX1BFRHHGEZlKMgJ6csPlVRgtyfF036CKIk=
Subject key identifier: 49:85:2A:CC:D8:95:07:72:62:39:8F:AC:EE:C6:0C:25:1E:17:04:66
Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial: 17A2883F048A9D550294FC77FFEAC5290B4146C2
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
Signing time: Wed 08 May 2024 06:00:00 +0000
ROA not before: Wed 08 May 2024 05:55:00 +0000
ROA not after: Wed 07 May 2025 06:00:00 +0000
asID: 9341
IP address blocks: 103.190.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a2:88:3f:04:8a:9d:55:02:94:fc:77:ff:ea:c5:29:0b:41:46:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Validity
Not Before: May 8 05:55:00 2024 GMT
Not After : May 7 06:00:00 2025 GMT
Subject: CN=49852ACCD895077262398FACEEC60C251E170466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:9f:5e:8d:15:51:da:56:2f:c4:4a:18:11:
2b:67:10:c9:e3:4f:e8:ce:c2:cb:af:0b:ff:bc:a4:
34:45:fc:f2:80:41:c3:cd:24:16:3c:97:26:fd:a1:
98:2c:60:85:6b:59:36:77:4b:f8:7a:11:a4:d7:d4:
2f:c6:56:e9:7b:8f:7a:e8:93:1e:d6:0d:08:76:c2:
80:11:f1:a1:61:87:de:9f:58:f5:01:1b:71:24:1e:
df:5d:62:e8:04:a1:a5:98:66:05:56:08:22:80:33:
23:35:54:7f:c2:61:30:42:95:1c:a9:9f:a6:9b:32:
fa:ef:d0:fc:49:7d:70:14:e7:02:c7:e4:5d:16:14:
61:91:83:05:11:af:d4:86:b4:21:c8:e0:be:82:d9:
ae:87:72:af:53:25:62:74:3a:65:09:c1:0c:5d:28:
79:b4:49:2e:2e:f5:d5:7b:70:83:7b:3d:4c:ce:00:
fb:c7:28:5e:9f:01:77:e8:86:0a:5e:f3:bc:39:cb:
71:b6:47:97:f4:f5:33:ff:b0:04:94:8b:35:3a:29:
7e:15:fc:92:0e:d3:52:93:82:52:45:c3:c4:b1:2d:
df:f2:93:ed:60:53:76:92:69:4c:a8:3d:62:03:24:
28:07:5b:63:7d:1a:d7:19:ab:56:9b:b1:ea:c0:5d:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:2A:CC:D8:95:07:72:62:39:8F:AC:EE:C6:0C:25:1E:17:04:66
X509v3 Authority Key Identifier:
keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d2:08:10:ba:6d:a3:42:08:19:a7:43:2e:54:1c:00:31:37:
69:3f:bc:68:1a:32:f2:09:2b:0d:51:c2:f2:60:90:77:4f:71:
34:45:1c:b4:c4:b1:c2:a4:ee:09:48:67:7f:46:e3:3d:e1:ee:
31:73:50:4c:6f:07:9f:28:36:d3:1e:04:0c:68:d1:f3:3c:4b:
84:67:91:f0:07:60:96:40:ce:cb:bd:cb:dc:67:1a:97:87:b4:
05:95:a8:13:f1:41:74:3b:72:da:e7:5e:a9:b9:3e:92:95:8e:
13:4c:1a:32:ff:c5:36:a0:c8:04:7b:27:6f:a8:66:0e:93:d6:
fd:8f:56:70:e3:8d:2b:2d:d0:bf:6d:6d:f1:83:6f:81:ea:38:
26:70:10:eb:1b:cf:0f:20:19:d8:02:6a:5f:21:16:a9:9d:80:
3e:5c:af:f3:f2:3f:e7:e2:82:4f:fd:87:8d:e7:ec:7a:0b:b6:
8a:3e:54:f4:3e:f2:08:4d:c3:06:b4:22:87:ea:5e:fe:a7:30:
18:c6:bf:89:fc:90:b2:89:64:b5:c0:69:66:cb:70:2a:a6:9c:
ff:32:e0:7d:26:ab:6e:a3:b1:fa:1b:dc:b0:f1:e3:a5:cf:a0:
cc:3e:d3:b4:0e:33:e4:f3:16:ee:f7:be:83:09:32:eb:99:1a:
1c:e7:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:39 2025 by rpki-client