Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa
File: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (raw, json)
Hash identifier: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=
Subject key identifier: D5:DA:14:FD:72:7B:7C:E3:5F:33:67:44:1B:D9:0C:C0:B2:20:CF:90
Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
Certificate serial: 7F41A86AEDCE5E6F69008E6FAFCA9F56E2577B39
Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa
Signing time: Tue 06 Aug 2024 03:00:01 +0000
ROA not before: Tue 06 Aug 2024 02:55:01 +0000
ROA not after: Tue 05 Aug 2025 03:00:01 +0000
asID: 141130
IP address blocks: 103.158.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:41:a8:6a:ed:ce:5e:6f:69:00:8e:6f:af:ca:9f:56:e2:57:7b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
Validity
Not Before: Aug 6 02:55:01 2024 GMT
Not After : Aug 5 03:00:01 2025 GMT
Subject: CN=D5DA14FD727B7CE35F3367441BD90CC0B220CF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:4e:de:52:65:12:7f:d2:58:5f:ac:58:37:
98:cb:2c:44:98:0a:32:e0:c8:2d:8f:df:4c:0a:47:
1d:20:82:60:a1:81:c7:2d:43:0b:13:be:d3:b6:0f:
cc:b3:46:0d:74:c4:99:2e:93:a3:f1:f9:aa:4c:52:
0f:d5:60:40:19:5e:75:27:50:cf:13:85:d8:04:79:
74:ab:17:e6:04:f6:22:d5:3a:c3:58:01:21:2a:c9:
60:7b:f2:4e:c0:fc:d6:63:02:c3:cf:1e:40:4c:8f:
89:4b:1a:68:42:97:91:2e:0a:33:f5:3b:30:56:24:
a2:5e:5a:37:44:0c:07:96:75:30:a1:63:ec:78:19:
2c:4c:44:9b:a4:84:b5:92:e8:ab:1e:d6:76:c5:2a:
8f:09:08:fe:24:50:16:53:d4:bc:d9:09:f4:7c:c5:
f0:a3:68:65:66:ef:b8:8c:d0:b7:1f:e3:b0:34:4f:
d8:7d:cf:df:6e:1f:dd:6a:23:8d:ad:0e:9f:13:dc:
00:e9:91:62:dd:e6:e0:ba:25:3a:ec:a5:5e:95:2a:
5b:06:72:fc:9d:10:78:15:bf:5a:ad:0d:01:51:fb:
1c:21:28:dd:52:4b:d9:ea:3a:43:6d:7f:9b:1d:62:
ec:1c:66:8e:48:94:39:17:9a:21:ef:fc:37:8d:77:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:14:FD:72:7B:7C:E3:5F:33:67:44:1B:D9:0C:C0:B2:20:CF:90
X509v3 Authority Key Identifier:
keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c8:1f:af:97:8a:3e:47:c4:c6:0c:93:59:21:53:ee:48:87:
cf:7f:f4:10:1d:77:00:e6:02:e0:96:5f:85:44:27:4e:de:6d:
1f:ed:19:88:ee:63:50:3c:b9:63:d4:c4:1b:61:6f:df:e1:b5:
d9:14:5b:86:b3:08:6b:36:ba:93:41:1b:07:fc:95:b1:52:4a:
8a:71:cf:91:bf:a2:30:58:47:1b:b6:d1:64:0d:f5:42:f5:2e:
8c:a1:e2:93:8e:b3:4f:f4:06:bd:7c:14:3e:1b:1e:c2:ef:b1:
67:d5:57:a7:cc:97:8e:9e:fb:92:93:85:a2:f5:55:b8:b7:b3:
f1:d0:2d:83:f5:cb:87:c6:ba:6a:7c:3b:e0:46:3c:4c:5f:6b:
4f:63:b8:b2:01:79:e3:77:83:55:83:aa:56:dc:72:71:94:89:
34:24:80:fc:b4:ef:a9:1e:56:61:41:43:5d:71:c1:be:ea:84:
0f:17:28:ff:0f:94:e0:74:51:24:c8:8c:f1:e9:41:ae:26:8e:
fc:40:bc:97:7f:24:43:d2:25:fe:50:7f:4e:03:d5:4b:13:1b:
6d:cd:b7:2f:ca:1c:6b:b7:66:ae:5f:1a:5b:07:a6:76:cd:e7:
7e:cd:d5:fd:45:af:2f:ad:d4:c2:a7:79:4f:93:db:11:d0:6d:
c8:4d:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:21 2025 by rpki-client