Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
File: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier: K/5Dzu4jNae+Slea0CiA7fq+A02KSzQ2CreNdMd0XbI=
Subject key identifier: F5:2B:FF:0D:B1:8A:7C:7F:18:BB:F1:D9:91:5F:1D:71:6C:21:48:3F
Certificate issuer: /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial: 7A8EA64F3608256131393D199C1FAE69386277CD
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
Signing time: Mon 01 Jul 2024 01:04:52 +0000
ROA not before: Mon 01 Jul 2024 00:59:52 +0000
ROA not after: Mon 30 Jun 2025 01:04:52 +0000
asID: 38758
IP address blocks: 103.231.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8e:a6:4f:36:08:25:61:31:39:3d:19:9c:1f:ae:69:38:62:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Validity
Not Before: Jul 1 00:59:52 2024 GMT
Not After : Jun 30 01:04:52 2025 GMT
Subject: CN=F52BFF0DB18A7C7F18BBF1D9915F1D716C21483F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:17:41:b4:95:e0:8e:de:ae:4a:05:91:f9:
a6:72:05:79:5c:6b:bb:52:fd:6d:d2:ca:f1:0b:28:
ac:f8:02:3d:01:ea:d7:33:c7:1f:5e:92:4b:15:6d:
d8:35:af:d5:2b:51:f8:33:b6:11:2d:e9:7a:2a:3f:
b3:cc:f5:a2:ac:b3:70:7b:13:b5:d2:a1:08:0f:2e:
b7:4b:c0:f6:8a:a8:9f:c7:eb:7c:bf:8d:bc:e7:5f:
f6:44:75:27:8e:b1:d8:e0:29:b9:82:c9:c0:b3:c3:
71:68:ce:80:76:da:f5:ec:ea:cf:2d:74:80:65:2e:
2e:3b:74:92:6c:c3:65:dc:fb:c3:52:d0:49:87:1d:
83:56:c0:18:0a:19:27:b4:94:31:ea:8b:86:ea:2e:
06:53:17:09:ec:d3:bf:6b:70:93:5d:0b:35:6d:cd:
0a:28:15:8f:09:e1:41:cb:c4:a8:b8:0f:b9:a6:40:
ce:b9:c5:98:36:54:23:62:78:35:4f:63:7f:60:6b:
ac:11:5a:7c:1d:cf:62:2f:a9:eb:78:a0:2b:70:6b:
b7:d2:69:b1:e7:9b:3b:4c:0d:39:bf:78:e6:aa:27:
a7:8f:7b:5e:79:d5:6b:30:3b:11:1a:68:49:c3:24:
c1:c0:79:7e:7f:0f:64:1d:ce:71:8d:8e:6f:41:cb:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:FF:0D:B1:8A:7C:7F:18:BB:F1:D9:91:5F:1D:71:6C:21:48:3F
X509v3 Authority Key Identifier:
keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.196.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:56:90:83:4c:d8:54:1e:ab:c8:1c:ce:8d:fe:0d:70:75:af:
b8:4c:3c:e7:93:ce:76:09:52:f9:ea:ac:ea:9b:46:d4:17:32:
49:1e:21:7c:62:c0:04:93:55:3d:58:a1:3a:89:b7:47:06:4a:
36:1c:c3:c2:16:7b:62:cc:89:13:11:e2:c7:c3:67:78:2a:ba:
3f:37:74:dd:6c:9e:36:d9:ab:7d:b5:dc:a7:cd:be:45:ed:33:
aa:a2:4e:33:d6:3e:57:d2:6a:8e:2b:e4:a7:11:d6:f4:a3:6a:
d0:b4:79:5d:84:f5:98:fe:bc:11:7c:6a:ea:3f:33:d1:89:89:
30:91:53:d7:ec:79:49:f6:27:80:3d:be:42:b6:61:26:c8:3b:
c9:dd:82:df:4b:4d:f9:ff:00:33:52:71:fd:5d:06:a8:77:ea:
06:bc:6f:1a:97:eb:84:9d:d0:1c:1a:1e:6e:96:30:86:8e:09:
10:94:77:f3:51:62:5b:2e:7c:5c:3b:41:5c:5a:b6:13:ed:6c:
7d:dd:75:5c:11:3c:7d:ed:6a:67:93:1a:6f:38:2d:d7:b5:48:
c7:f7:86:2d:fb:d8:f1:c1:a7:d3:d9:e2:33:7e:1f:4e:02:ce:
5a:89:f1:9e:80:fa:28:2d:46:a6:c2:93:fd:3c:f9:d5:ff:8a:
27:18:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:05 2025 by rpki-client