Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
File: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (raw, json)
Hash identifier: yd/9tWo1kJ6YHfykCLdu2BeP/tNNzdmE7/w//Rilq70=
Subject key identifier: 09:18:B5:8E:81:45:A6:36:A3:90:2F:08:14:1B:42:5C:31:CF:67:0A
Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial: 2273138985FECC10B536294ABE5D883E80D3E156
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
Signing time: Mon 01 Jul 2024 01:02:40 +0000
ROA not before: Mon 01 Jul 2024 00:57:40 +0000
ROA not after: Mon 30 Jun 2025 01:02:40 +0000
asID: 58499
IP address blocks: 103.15.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:73:13:89:85:fe:cc:10:b5:36:29:4a:be:5d:88:3e:80:d3:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Validity
Not Before: Jul 1 00:57:40 2024 GMT
Not After : Jun 30 01:02:40 2025 GMT
Subject: CN=0918B58E8145A636A3902F08141B425C31CF670A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:ce:ed:9d:e9:a0:48:bd:99:09:16:06:c4:
64:ad:24:fa:da:3d:aa:a3:2f:73:c7:16:0e:5e:4d:
04:e0:a1:a5:4a:47:3b:a3:b5:c6:c7:1e:4d:58:fb:
03:42:9b:43:fe:9f:ad:21:b1:7c:d0:8b:0d:8c:1d:
46:a7:a3:5d:21:e4:71:5e:6a:33:4f:0f:82:16:8f:
9a:fd:51:c3:14:70:3e:7b:d7:4b:6d:5c:b0:a4:39:
ae:fb:68:b0:59:51:bb:09:25:1a:c7:0c:02:b2:85:
c9:60:07:2e:31:9b:11:e4:a5:a2:0f:18:e8:ab:dd:
d6:62:1a:20:91:c6:a7:b9:cc:d9:90:69:f9:b4:a9:
42:b9:18:b1:e2:e7:d3:ae:31:15:10:d4:a0:a7:58:
ca:4c:42:b1:91:e1:18:8f:77:a9:41:5f:54:38:d8:
ca:ba:0c:87:32:a2:7e:5e:e5:ab:3c:92:6f:9f:61:
76:06:a5:8c:7f:f0:45:6a:c3:af:bf:6b:9b:dc:ac:
a3:ba:50:0e:63:e7:f1:f0:89:01:c9:e4:f1:0c:c2:
12:03:4e:77:c2:5c:ac:97:ff:24:39:2b:da:0b:03:
18:a6:8c:ef:3a:4d:3d:1b:4b:d4:8b:ce:81:48:f8:
7f:f4:8c:84:d8:56:c2:e9:88:ad:f5:36:f5:8b:e0:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:B5:8E:81:45:A6:36:A3:90:2F:08:14:1B:42:5C:31:CF:67:0A
X509v3 Authority Key Identifier:
keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.15.37.0/24
Signature Algorithm: sha256WithRSAEncryption
68:34:c0:30:ee:af:72:38:f2:7e:9c:47:20:93:a0:fb:a7:93:
f3:d6:4e:65:e1:c3:c1:c1:3f:da:96:4b:cf:89:af:9f:5d:fa:
9f:d2:68:e6:17:36:ad:8a:31:0e:79:80:36:f5:fa:84:8a:90:
47:88:97:dd:ee:be:25:18:18:6a:76:72:a9:b8:8b:90:87:87:
a8:31:b2:f4:e8:db:e8:78:dc:e5:56:e4:e0:95:fc:19:06:42:
62:b1:24:64:4e:15:2a:9f:5f:90:23:3e:da:b7:c4:e1:a3:0f:
02:03:a6:97:a1:16:2c:ac:af:48:86:85:cc:20:72:df:16:97:
a6:da:93:e5:2d:20:fa:96:59:af:c0:18:61:05:ee:81:ba:42:
3e:56:28:6e:5d:48:b4:0d:da:56:08:4c:4c:25:55:86:fe:4d:
1c:1f:ad:b7:cc:ba:b3:f3:d3:6a:b0:bf:4c:d1:26:01:3a:74:
e7:ee:9f:58:79:c5:e7:f3:9e:4a:39:70:24:5b:2d:3f:d4:c9:
8c:67:50:d9:e9:7e:05:39:e8:37:02:72:36:b9:d5:34:23:0f:
5b:7c:19:5b:2b:14:6c:2d:55:e9:8a:6a:95:13:a3:93:8f:c0:
74:61:08:d9:05:32:fc:24:ca:e9:d6:c0:37:97:bf:cf:c3:a0:
2a:e2:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:07 2025 by rpki-client