Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa
File: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (raw, json)
Hash identifier: S0UelN4KVkqU3QsrPYjGFbixGaR+dwxcUsc+/2UXzCs=
Subject key identifier: 96:FF:FB:C8:0B:F5:AF:CE:86:4D:AE:ED:48:96:C5:44:61:B9:67:4F
Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial: 1EA746BE9895AD476561D641840C79AB9049C506
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa
Signing time: Thu 19 Dec 2024 04:01:29 +0000
ROA not before: Thu 19 Dec 2024 03:56:29 +0000
ROA not after: Thu 18 Dec 2025 04:01:29 +0000
asID: 138097
IP address blocks: 103.130.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a7:46:be:98:95:ad:47:65:61:d6:41:84:0c:79:ab:90:49:c5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
Validity
Not Before: Dec 19 03:56:29 2024 GMT
Not After : Dec 18 04:01:29 2025 GMT
Subject: CN=96FFFBC80BF5AFCE864DAEED4896C54461B9674F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:27:8a:9c:5b:09:a1:6e:df:6e:ff:ac:67:
53:45:0a:9a:51:8f:d4:9c:51:b8:d6:da:64:53:be:
cd:90:88:84:85:b9:38:63:3b:32:e8:0b:f9:a5:73:
b8:1b:fc:c0:f7:ed:b7:07:44:c5:6e:aa:42:6d:04:
67:76:b7:35:b1:c5:84:43:54:94:bd:16:9b:28:36:
67:35:70:78:d5:b2:5e:20:69:c9:7d:99:7d:ba:89:
4a:51:6a:d5:e4:71:33:9f:ec:9b:71:cb:07:83:6f:
ab:de:cb:3a:e1:32:cf:13:7e:a5:9a:3b:e6:dc:53:
3c:f7:a0:b6:8b:94:14:74:8c:00:f3:eb:d8:21:64:
35:26:a3:e0:62:fb:45:75:67:26:08:22:b9:79:07:
8a:39:10:5f:72:16:cc:bb:c0:5a:8e:e1:b7:9d:81:
e8:04:97:8f:0b:2d:49:fd:28:e2:00:3b:46:1a:25:
89:9b:4a:e4:24:d7:a8:b5:07:8b:02:c6:fe:4a:07:
77:ce:ee:27:c3:9a:68:df:37:32:d0:b9:ca:fa:36:
6b:f2:1c:56:ea:85:6c:c4:9f:b4:c5:a3:42:a7:f2:
09:55:b1:cc:51:ef:88:61:66:e7:af:8d:41:31:d3:
f3:bf:18:b5:24:f4:83:a9:d3:c1:c5:cf:18:ec:60:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:FB:C8:0B:F5:AF:CE:86:4D:AE:ED:48:96:C5:44:61:B9:67:4F
X509v3 Authority Key Identifier:
keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e5:8b:73:86:f9:c2:20:80:bb:40:5e:34:aa:48:a4:ca:cd:
b7:c8:ee:44:f3:3e:fc:ec:8f:8d:5a:41:c4:71:c0:ee:2a:ab:
95:3d:b7:b2:c6:3c:78:e6:c9:f4:2c:60:af:7d:4e:86:2b:0e:
bb:26:56:84:d6:fc:5c:5f:8f:54:ce:f2:dc:bc:80:03:5b:2b:
76:8c:c4:68:fc:c3:1c:3c:b0:55:dc:43:6f:bd:81:8c:43:a0:
30:ae:35:e2:db:63:cd:b3:59:ac:31:c1:07:f2:19:15:94:7c:
4e:5d:25:08:9b:3e:20:ae:66:6c:52:f3:6c:c8:d5:6d:e5:af:
25:b6:45:73:aa:3b:be:f6:db:bb:3b:c6:68:73:a5:45:b9:5b:
10:d3:af:83:db:bc:5f:4e:82:67:be:cf:df:7a:2e:1c:67:c5:
4a:7e:ac:3d:0e:49:d2:37:79:53:ba:e2:20:fc:1d:f0:a7:9e:
dc:86:d8:a9:ec:a9:c5:e8:7c:0a:13:72:c4:59:dc:58:2c:da:
9f:97:72:e5:20:a3:da:cf:bc:67:b3:9b:51:ed:6c:50:19:11:
7e:1e:e7:81:51:98:64:e3:a5:88:19:86:d7:b4:74:8e:43:5f:
00:fe:b4:f1:93:24:7b:49:5b:6f:e5:5f:30:aa:f8:12:36:aa:
d7:d6:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:36 2025 by rpki-client