Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa
File: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (raw, json)
Hash identifier: q6SY7dMZTZK38tnoR+pXFf7kzoZFDF5ifDK7XqxUw8c=
Subject key identifier: F0:49:93:3F:10:57:0F:AC:FF:13:06:89:88:0A:12:13:E2:15:DA:B3
Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Certificate serial: 5FB623C3A517A7AA6B14AC62EC37C7D8269F1D80
Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa
Signing time: Mon 02 Dec 2024 17:00:01 +0000
ROA not before: Mon 02 Dec 2024 16:55:01 +0000
ROA not after: Mon 01 Dec 2025 17:00:01 +0000
asID: 150523
IP address blocks: 103.75.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b6:23:c3:a5:17:a7:aa:6b:14:ac:62:ec:37:c7:d8:26:9f:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Validity
Not Before: Dec 2 16:55:01 2024 GMT
Not After : Dec 1 17:00:01 2025 GMT
Subject: CN=F049933F10570FACFF130689880A1213E215DAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:6f:23:3a:1a:be:fa:a6:03:db:d4:44:e4:
05:9d:bc:4d:1d:d3:67:43:68:c8:80:21:0d:93:2c:
cd:bb:d8:b4:d2:6a:e9:50:9f:fa:10:38:53:39:3a:
a5:8e:01:81:bd:c7:b8:d2:e6:fa:4d:5d:32:3d:47:
83:03:59:c5:4a:3a:5b:92:55:38:de:ce:74:4e:11:
f4:4f:ea:30:a4:dc:42:95:20:28:78:43:5e:3b:91:
48:cc:dc:8c:59:22:a6:74:71:98:90:e6:54:ff:87:
cb:1f:80:dd:87:65:21:34:68:a2:a3:63:43:5c:71:
2f:00:f0:44:c6:70:74:25:62:fe:29:57:40:44:4d:
00:ee:88:54:af:51:46:b0:68:86:ff:50:15:ca:f0:
e3:17:a5:98:a1:fa:ef:9e:e5:46:0d:dd:f2:80:11:
a8:ab:29:9b:9a:b8:13:3e:9d:42:96:3b:09:06:a8:
67:f1:cf:b0:d9:ac:cd:79:90:44:70:4f:1e:72:ce:
73:4c:5d:0a:c5:d4:26:1d:cb:2e:90:52:68:7b:e8:
6d:1c:5a:07:d5:2f:45:fd:82:f1:2a:c2:0f:b0:2e:
74:8b:d1:50:64:55:de:61:c6:40:e5:b5:0b:11:7d:
45:02:05:c5:68:01:92:c1:b4:e9:83:92:0b:5a:2e:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:93:3F:10:57:0F:AC:FF:13:06:89:88:0A:12:13:E2:15:DA:B3
X509v3 Authority Key Identifier:
keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.136.0/24
Signature Algorithm: sha256WithRSAEncryption
24:99:3b:4c:3b:a1:29:b0:29:74:03:e8:36:2c:4d:1c:3f:8e:
86:b9:45:9d:86:89:74:1e:16:0a:d6:37:56:74:44:19:16:e4:
8a:67:e1:ff:46:3c:4b:74:5f:0d:a3:01:d2:09:2a:9f:74:a3:
cd:5d:b5:b6:73:f3:16:2a:d9:18:aa:11:6c:bb:09:d6:24:33:
22:c3:f9:a4:dd:20:7b:17:be:2c:6a:c7:b2:c2:80:7d:c3:c7:
46:dc:ce:c9:99:73:a2:bb:b1:4c:37:34:0a:3e:39:91:04:15:
f6:3f:14:fd:d7:49:17:4c:9e:af:41:6b:12:da:5e:00:e3:e2:
56:3c:f7:dd:c6:3c:6a:ff:7b:ae:91:96:05:36:eb:ea:8e:65:
3e:65:8a:c1:48:5b:36:ba:10:29:c6:1f:2b:7c:22:c2:bb:8d:
3d:51:44:cc:31:05:d7:09:40:71:c0:fc:8f:8f:1c:0e:8b:ef:
20:48:9e:d7:b4:ab:b6:65:83:ca:a9:46:34:63:f1:cf:72:74:
e9:d5:67:af:88:a1:ee:3d:4a:47:f9:88:9e:23:74:2c:3b:38:
1e:5a:37:ed:c7:fa:97:54:64:ae:5c:af:7e:0c:fa:0a:ed:24:
04:d8:88:6b:1c:39:d1:a5:c5:1d:49:48:da:94:ad:39:50:17:
c9:98:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:54 2025 by rpki-client