Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier: inrFUM/5CwXojBI2sTkJRY2EzoHBVXYYugcwwrqYnSY=
Subject key identifier: DD:2E:41:61:F9:DB:07:E8:09:67:6E:8F:18:B0:F7:D4:3D:E3:72:3B
Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial: 281D0421666A647DEFD756A6D7D6DFA61CFDF500
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time: Fri 26 Jul 2024 04:00:01 +0000
ROA not before: Fri 26 Jul 2024 03:55:01 +0000
ROA not after: Fri 25 Jul 2025 04:00:01 +0000
asID: 149951
IP address blocks: 103.111.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1d:04:21:66:6a:64:7d:ef:d7:56:a6:d7:d6:df:a6:1c:fd:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Validity
Not Before: Jul 26 03:55:01 2024 GMT
Not After : Jul 25 04:00:01 2025 GMT
Subject: CN=DD2E4161F9DB07E809676E8F18B0F7D43DE3723B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:58:45:38:ce:bf:ef:f0:9a:bf:f4:37:fc:
2e:67:9d:83:17:45:83:0e:ba:a6:41:56:04:28:35:
93:e1:a6:e6:39:24:71:d5:b3:76:1f:04:23:4a:92:
e9:eb:94:c5:87:b7:ff:08:d8:3e:fe:db:08:f2:3f:
2f:24:51:ee:47:29:6b:c1:1d:d2:92:a9:48:ac:20:
0b:c2:13:0e:13:34:7a:d6:86:2e:63:12:ff:b6:42:
66:ba:7e:99:9e:93:ae:de:08:af:80:ec:a8:f2:45:
a2:01:e2:0f:ba:ad:83:46:a1:27:59:b6:60:04:58:
d9:b3:6b:a8:1d:a1:c0:74:9b:7b:41:5e:d4:aa:f4:
22:70:1b:1f:99:3a:69:80:6a:9b:c1:03:7d:55:8f:
e0:93:2f:ea:52:9e:e7:a8:23:89:d4:3c:68:37:1c:
fc:6a:19:d9:bd:d1:9d:ab:54:0a:1a:ad:40:2f:2e:
a4:4d:70:58:6d:2c:ed:eb:db:b0:c8:fa:c8:bd:52:
af:53:c8:c1:6f:6e:10:70:3b:05:d4:f2:4c:9d:ab:
f4:8c:d7:c7:a4:11:60:eb:83:da:41:cf:74:02:66:
26:db:28:48:a0:77:31:db:d4:cb:81:9b:42:4d:6c:
5d:3e:b5:a9:8e:d4:f3:f8:e6:30:b7:43:b9:f4:04:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:41:61:F9:DB:07:E8:09:67:6E:8F:18:B0:F7:D4:3D:E3:72:3B
X509v3 Authority Key Identifier:
keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3e:84:ce:7f:c8:5d:ac:fb:51:1e:f0:18:51:b1:1e:d7:a9:
ff:0b:e0:7c:92:5b:d8:60:6c:ca:f4:3e:16:0c:a9:a4:f7:6e:
47:ae:81:79:b2:c6:93:ef:93:b4:4a:40:58:86:9b:64:09:94:
a9:3f:ae:64:18:a1:07:d3:57:f8:31:85:79:83:ad:98:d1:e4:
4e:cb:7b:19:5b:8b:df:47:bd:71:4b:35:3a:70:b5:2b:99:23:
dd:55:3f:03:35:b8:bd:6f:07:ed:6b:28:29:5b:1d:e8:c8:99:
80:a7:b3:a7:f7:72:9b:74:1a:86:22:cf:1c:52:f0:44:51:21:
d7:1c:96:f7:0b:d8:64:3a:76:8b:7e:cd:cb:96:64:06:70:84:
e6:d8:cc:70:33:dc:98:a0:1b:e4:b0:88:09:63:eb:be:48:a0:
22:7b:1b:f8:01:11:fd:ee:16:28:7e:13:81:ef:43:bf:b2:f9:
ab:32:f5:16:02:6b:3a:ea:14:48:ec:d3:2d:58:7b:ba:a7:a5:
91:f9:70:e6:a5:d6:bb:d1:db:f3:a7:b0:a5:33:48:f6:16:fe:
f2:d1:df:8e:c3:71:db:ef:34:d0:a4:e7:8e:b4:1c:00:77:9e:
b5:c9:b1:4c:94:ef:5c:2e:ef:8e:11:7b:4a:03:a6:3f:b8:3d:
d3:7b:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:40 2025 by rpki-client