Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa
File: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (raw, json)
Hash identifier: Yi+osz8wQ+Z3luO3SLERqa4o3Y8p2TKbf0JCW1w6sHU=
Subject key identifier: 3F:88:7C:36:81:51:24:4C:94:41:BA:51:71:8B:11:B9:08:28:2F:7B
Certificate issuer: /CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Certificate serial: 039C349CC2D73AF36305060F1E3E03A4291674B0
Authority key identifier: 05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa
Signing time: Tue 31 Dec 2024 06:00:01 +0000
ROA not before: Tue 31 Dec 2024 05:55:01 +0000
ROA not after: Tue 30 Dec 2025 06:00:01 +0000
asID: 150283
IP address blocks: 103.102.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9c:34:9c:c2:d7:3a:f3:63:05:06:0f:1e:3e:03:a4:29:16:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Validity
Not Before: Dec 31 05:55:01 2024 GMT
Not After : Dec 30 06:00:01 2025 GMT
Subject: CN=3F887C368151244C9441BA51718B11B908282F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:74:1d:64:3d:da:71:1f:06:c0:dd:78:58:
82:65:88:c2:2a:25:96:d0:5d:dd:a7:d9:e9:bc:62:
dd:7e:84:e6:54:c3:b9:f8:41:4b:75:b8:ce:0d:c9:
d1:ef:24:6d:93:ee:1c:c4:f5:54:95:12:89:0e:00:
7f:e9:51:f0:13:01:13:54:47:42:32:44:9b:70:5e:
59:0e:cc:77:89:9c:55:90:c1:d9:af:da:ad:10:9a:
43:eb:54:48:56:51:be:3b:80:a7:aa:e0:5a:01:70:
90:15:65:a7:d7:7e:05:ea:c0:e8:90:f8:74:20:c3:
df:2f:5e:2c:5e:50:f1:2d:6b:95:c4:7f:62:8e:0e:
a8:be:0c:c2:b0:f8:6c:13:cc:c0:69:9e:4a:d7:05:
77:99:b8:f5:eb:29:5b:eb:65:e2:3d:6a:53:8f:8e:
2d:7b:65:08:87:8a:2d:b1:98:7d:91:8f:b5:99:f4:
d1:35:38:4e:6e:fe:3e:e5:14:ff:b7:57:51:d3:55:
8a:dc:2d:ea:79:2f:11:22:16:31:d1:ff:cc:da:64:
fd:f5:eb:5e:1a:16:26:58:23:36:4b:1a:19:6c:7f:
79:bf:06:c1:7f:5f:ce:c1:50:19:ee:cb:c2:f6:44:
30:24:13:a9:b3:3f:06:77:86:f9:54:90:24:32:6a:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:7C:36:81:51:24:4C:94:41:BA:51:71:8B:11:B9:08:28:2F:7B
X509v3 Authority Key Identifier:
keyid:05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:65:7e:50:dc:92:49:18:e1:d4:64:66:a8:6f:b1:ff:f4:00:
78:1f:5d:85:e6:df:ff:3b:67:7d:c9:1b:36:ba:85:36:22:e3:
e7:fb:cd:40:be:86:11:04:3a:d8:6d:da:65:59:07:0f:cd:f4:
5c:cf:96:8f:df:c8:26:d6:50:54:c6:59:4e:55:1a:1d:70:1f:
19:7c:e0:22:0f:aa:6e:ab:dc:fb:e6:95:aa:97:64:66:83:a5:
67:7a:ac:fc:42:c0:ff:a7:c9:c2:41:38:2c:0c:32:ad:fe:14:
d4:48:26:31:e4:f6:07:6d:fa:29:0a:a8:fa:0c:4d:e8:ec:da:
8b:da:b7:d3:ef:8c:cc:ec:8e:71:e2:b3:7e:d3:cd:22:37:87:
02:c4:c0:d9:a1:b5:9b:b2:a0:ba:5e:1e:7d:6c:99:6e:21:cf:
66:3e:40:99:93:95:2c:c9:d4:5e:4e:8c:c2:8e:8c:e5:d3:ea:
ec:cd:42:4f:6a:62:2d:40:68:de:37:18:7c:e3:a1:b4:ff:ae:
fe:f0:9c:25:53:ac:59:f0:01:e4:84:e8:ee:12:fc:b0:f3:81:
bb:21:2d:64:a1:c9:2b:2e:ac:82:ae:db:c8:6c:e9:df:68:9f:
06:34:ca:0c:4b:4b:f2:a7:23:5a:93:36:cc:33:2c:11:0d:64:
a6:86:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:38 2025 by rpki-client