Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa
File: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: VsbfJ5LamH1LZgTZlkqTfKKnrHD6JMniVjqMc/sQ0Wk=
Subject key identifier: 33:5D:64:EA:E2:B8:07:A6:19:62:3A:35:E0:21:9A:97:97:37:26:D3
Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A
Certificate serial: 643B4A4BC5FF628BD70D9D66A0619B59D567ADB6
Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa
Signing time: Wed 15 May 2024 06:02:04 +0000
ROA not before: Wed 15 May 2024 05:57:04 +0000
ROA not after: Wed 14 May 2025 06:02:04 +0000
asID: 38320
IP address blocks: 103.135.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3b:4a:4b:c5:ff:62:8b:d7:0d:9d:66:a0:61:9b:59:d5:67:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A
Validity
Not Before: May 15 05:57:04 2024 GMT
Not After : May 14 06:02:04 2025 GMT
Subject: CN=335D64EAE2B807A619623A35E0219A97973726D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:b8:91:e4:29:c9:13:77:04:09:c6:19:bb:
6e:1d:0f:34:4b:c4:70:66:5d:21:7c:69:b6:92:a2:
ff:9b:a8:f7:79:5e:78:83:9b:aa:b6:d4:c9:14:c2:
f8:b6:9c:90:33:fa:cd:43:e1:70:93:0d:90:87:cb:
12:ac:98:c5:72:f5:d1:d8:54:82:b0:70:de:3b:5b:
db:e9:55:38:a7:eb:d7:5d:42:f3:e2:51:b1:77:ce:
1f:74:c4:2f:7c:a7:ee:54:15:03:61:47:89:9d:69:
04:70:d9:97:83:0f:ad:14:a8:d3:cb:0f:33:db:0c:
cd:03:9b:05:24:1b:b5:00:72:6f:2c:a6:ee:84:66:
d8:ec:f9:60:5e:0d:da:24:ad:46:e6:99:fd:45:3a:
c9:94:d9:81:5c:2b:dc:83:62:50:30:19:02:fe:90:
f2:14:1e:7d:9a:ef:bf:cb:1e:aa:77:d4:50:60:85:
c9:e1:bd:ec:ac:ec:ae:e9:00:74:18:9b:da:51:dd:
9b:fa:d0:1a:ae:8f:8e:5c:ce:8e:89:1f:6c:14:c2:
0b:68:d6:49:76:a4:af:f7:3e:ec:0f:1f:32:0f:39:
a9:a3:8b:af:23:c7:5e:1b:90:f5:6a:62:40:0d:69:
63:8b:8b:7d:0d:0a:93:a2:b6:d7:69:4c:cb:51:42:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:64:EA:E2:B8:07:A6:19:62:3A:35:E0:21:9A:97:97:37:26:D3
X509v3 Authority Key Identifier:
keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a4:9c:cd:6c:45:62:b7:b0:b7:06:28:a4:5a:81:34:b2:94:
db:2a:f9:fb:bc:a9:80:d9:e6:ca:ad:aa:ed:72:0f:fb:04:84:
41:12:81:2e:bd:a8:73:c0:79:00:39:fc:f2:ea:f6:61:e8:20:
01:d2:4d:36:14:e9:2f:73:4f:96:05:df:95:d0:f7:47:28:cb:
86:5b:33:7f:b2:7d:b1:b8:7c:8e:8f:2e:26:37:59:7a:69:f8:
0e:a6:0f:2d:1e:02:e6:9f:c1:25:05:cf:eb:33:62:85:a0:c3:
8e:97:34:9e:d4:9b:cb:e0:2d:29:07:78:ac:97:57:ef:76:7a:
fa:44:85:64:c4:e2:49:2f:38:71:d3:6f:7b:59:d6:06:cb:7a:
39:c7:eb:70:3f:18:34:77:fe:7f:31:35:f6:3f:b4:c5:8e:94:
b1:1b:5e:19:80:b1:b9:05:5f:ec:a7:3a:a4:be:b6:fd:0f:d1:
0c:4b:17:0e:18:fc:f8:25:65:89:dd:d2:1c:0d:78:bb:90:c1:
a3:2d:82:b6:04:02:7f:a8:6f:a7:55:35:5e:6d:92:9d:b6:36:
de:56:03:a3:41:86:df:8a:be:76:15:87:37:a9:f6:56:5b:70:
1e:f3:d8:25:c2:7b:81:07:98:4f:85:bb:5f:ba:96:dd:96:8c:
f6:26:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:27 2025 by rpki-client