Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa
File: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (raw, json)
Hash identifier: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=
Subject key identifier: 74:1F:CE:F1:51:86:E0:A5:10:9F:1C:AE:4C:A9:26:9D:E7:B2:01:2B
Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
Certificate serial: 481A66CF8AB4E148FFDE202DAC44D7D65D2EA1B2
Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa
Signing time: Tue 31 Dec 2024 01:00:02 +0000
ROA not before: Tue 31 Dec 2024 00:55:02 +0000
ROA not after: Tue 30 Dec 2025 01:00:02 +0000
asID: 139973
IP address blocks: 103.147.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1a:66:cf:8a:b4:e1:48:ff:de:20:2d:ac:44:d7:d6:5d:2e:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
Validity
Not Before: Dec 31 00:55:02 2024 GMT
Not After : Dec 30 01:00:02 2025 GMT
Subject: CN=741FCEF15186E0A5109F1CAE4CA9269DE7B2012B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:e0:75:bb:29:7f:3c:8a:4a:e9:1a:17:e5:
94:e6:cc:9a:8f:a2:78:a7:32:40:f3:43:f3:dd:18:
cf:d7:b9:2f:89:fa:68:56:14:b4:f9:7d:a8:4a:ab:
ef:24:1d:13:a1:22:46:df:a7:a1:f7:c1:e7:82:3e:
0d:63:f3:8f:ae:e9:ae:c7:67:a0:8e:36:78:b0:58:
d9:94:b0:5b:a4:65:50:bb:69:a7:d8:5a:e3:20:00:
07:89:70:67:a8:4e:32:35:3a:b5:88:03:3b:00:d0:
42:11:64:de:3e:18:68:8f:3c:30:99:90:3b:5f:95:
85:44:7a:2a:52:25:04:01:6d:44:28:37:a4:7b:dd:
85:27:6f:35:f1:c5:bb:0f:72:29:61:57:6b:63:26:
09:3b:04:45:ec:48:5f:56:9b:bc:a0:57:02:99:fa:
e0:37:c9:9c:30:1a:88:85:98:d4:97:96:67:7e:82:
a4:85:de:77:d2:be:6c:c9:a2:86:ae:52:04:78:64:
50:7b:22:d9:1e:69:9e:36:4d:62:00:6b:6a:d0:5c:
13:33:26:d6:c8:8b:71:3d:0b:e5:38:dd:e3:d4:fd:
5e:9d:42:9b:47:7c:59:2f:e4:41:a6:80:53:67:3f:
5c:ff:80:9d:27:62:60:b2:ed:a4:de:e2:c9:02:11:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:CE:F1:51:86:E0:A5:10:9F:1C:AE:4C:A9:26:9D:E7:B2:01:2B
X509v3 Authority Key Identifier:
keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.245.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d6:97:14:d6:65:fd:16:e4:d8:f9:3a:49:bd:97:85:f3:90:
29:9a:38:ba:af:a1:fb:03:c7:c1:e8:99:90:70:9c:8d:85:19:
c5:cf:e8:b9:a5:d3:57:7e:47:8a:f0:80:26:be:56:16:37:02:
f4:4f:c4:01:1d:e7:8e:3e:9b:3a:1d:58:89:e7:50:b1:4b:73:
1e:bb:28:b8:28:76:c0:34:16:d6:d8:af:20:ea:61:46:79:e0:
b8:8c:43:d5:28:69:f6:5e:30:77:ec:6d:c0:f9:89:d9:09:9b:
c5:81:27:3b:7a:32:f7:74:ad:24:93:1d:b8:61:68:e2:52:2d:
3a:d7:cd:e7:c0:97:78:65:c7:9c:dd:75:1f:07:18:e9:f5:cc:
00:c0:d2:02:b2:53:50:52:04:93:f1:f0:a3:61:28:77:29:c1:
15:58:97:87:43:7c:28:ab:07:13:fa:53:d6:43:5d:4f:12:ae:
f7:38:df:31:d6:87:9d:e8:c0:83:9e:8c:13:35:3e:ef:bb:ab:
6c:96:d9:58:1e:db:20:a9:8e:b7:8f:b4:93:37:f4:c3:13:29:
1c:8f:da:26:c2:49:bc:ca:2f:f7:3e:94:36:26:34:00:0f:90:
43:ef:00:e1:c0:4a:40:51:f3:fd:61:36:99:5a:49:38:69:0a:
af:c4:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:56 2025 by rpki-client