Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
File: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (raw, json)
Hash identifier: N86IGSPUsntKoDQdwFXefUN8QF+2oSIWldr3Evp+mjA=
Subject key identifier: 01:BE:5D:A6:65:0D:EC:B3:1C:7F:4D:90:2E:FB:8D:4F:BD:E4:F8:C4
Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246
Certificate serial: 5F6B4FBDDF468DC8C6848F60CA7C1589FD8C8350
Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
Signing time: Sat 27 Apr 2024 03:00:01 +0000
ROA not before: Sat 27 Apr 2024 02:55:01 +0000
ROA not after: Sat 26 Apr 2025 03:00:01 +0000
asID: 141127
IP address blocks: 103.158.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6b:4f:bd:df:46:8d:c8:c6:84:8f:60:ca:7c:15:89:fd:8c:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246
Validity
Not Before: Apr 27 02:55:01 2024 GMT
Not After : Apr 26 03:00:01 2025 GMT
Subject: CN=01BE5DA6650DECB31C7F4D902EFB8D4FBDE4F8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:97:dd:7c:80:16:77:04:10:3a:d7:7a:73:
30:c0:84:02:4d:29:f0:71:93:f1:5e:eb:e7:ed:c2:
53:52:90:39:62:9a:12:30:1b:5e:77:84:b1:77:5a:
52:ec:f2:a1:58:76:9c:97:dc:cd:3f:06:8b:0a:b2:
63:b9:7c:bc:67:d3:9a:67:51:2a:f2:21:b1:0b:cb:
5b:6f:9f:0f:2d:1e:d5:cb:7c:aa:a2:ae:0b:05:85:
b3:d3:4f:6f:ea:64:00:da:09:14:66:ad:11:7e:22:
e5:ce:4b:1d:50:55:6a:c2:28:e2:0d:c9:41:23:d3:
ae:d9:56:e0:b6:d5:97:78:37:3b:a0:26:87:c6:27:
28:1e:b1:ac:3b:1d:ed:84:50:27:0e:0a:9b:1c:41:
0f:fa:60:d0:4b:7b:a3:9c:3d:1a:3e:9c:29:c1:70:
11:6e:26:0b:17:8f:b7:3a:4f:ae:d3:96:13:e1:dc:
9a:31:ba:dd:90:d2:4a:f7:67:33:30:11:29:3f:2f:
a0:9d:21:33:0e:52:5b:67:b9:3b:40:fd:b6:18:44:
ed:90:89:15:c7:0b:94:cb:45:bb:f8:75:e6:f9:91:
db:7a:06:f1:8e:3a:17:81:5b:b6:8b:3f:a7:48:84:
2f:44:5a:5b:95:9f:91:3b:b5:d6:fb:b6:79:92:ca:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:5D:A6:65:0D:EC:B3:1C:7F:4D:90:2E:FB:8D:4F:BD:E4:F8:C4
X509v3 Authority Key Identifier:
keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.121.0/24
Signature Algorithm: sha256WithRSAEncryption
83:47:27:89:29:4b:47:c7:73:bf:dd:09:d1:ce:31:80:90:25:
44:94:08:9e:d0:d6:51:1b:82:cf:d3:51:14:fb:42:af:85:7a:
38:4a:26:ee:e4:72:08:9e:ac:7a:7e:30:0b:84:f5:ab:8b:e5:
01:e5:b3:36:bf:4a:aa:aa:c1:6b:5e:a7:80:e2:04:db:03:d3:
e7:5d:a2:80:1f:10:c8:3a:ed:30:10:94:1c:0f:02:69:28:f1:
5f:7a:e2:bb:8f:77:4a:b7:18:67:b7:98:a7:a2:96:50:6f:c7:
3d:a9:92:cd:4f:4c:d4:d9:57:80:3c:14:e3:5d:e6:01:e7:c6:
87:0c:92:af:c6:cf:29:99:59:d8:9a:ad:9f:b2:4f:b8:02:34:
89:e7:c6:2e:ce:4f:7b:f6:94:77:ce:8a:43:00:3c:b3:b4:00:
74:dd:09:66:0f:b0:2a:d0:1b:35:8c:8d:2a:28:4a:7e:6f:74:
c4:28:71:50:39:b2:47:f8:03:eb:8f:34:00:00:6a:58:a6:a5:
e7:fe:8f:b1:5a:1a:a0:29:23:fb:db:de:b8:b1:a5:cf:27:7b:
b5:60:59:12:a1:14:4a:21:cb:fd:12:a2:9d:3b:d5:2b:b6:b2:
b8:ca:2e:6c:ce:d5:7a:d3:ea:10:bd:aa:1e:29:37:85:d7:7c:
82:06:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:18 2025 by rpki-client