Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa
File: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (raw, json)
Hash identifier: ETGqi4em3d7iFPvTTbLzNEGHVb50jTVFKGpxmfQ15GI=
Subject key identifier: 32:42:9B:B7:57:68:FB:2E:D3:42:9D:69:13:A1:BE:FF:EE:C3:69:F8
Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial: 65903BE763BF2F6FF037F26CCC4262EE6332F5B9
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa
Signing time: Wed 07 Aug 2024 17:00:00 +0000
ROA not before: Wed 07 Aug 2024 16:55:00 +0000
ROA not after: Wed 06 Aug 2025 17:00:00 +0000
asID: 136055
IP address blocks: 103.81.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:90:3b:e7:63:bf:2f:6f:f0:37:f2:6c:cc:42:62:ee:63:32:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Validity
Not Before: Aug 7 16:55:00 2024 GMT
Not After : Aug 6 17:00:00 2025 GMT
Subject: CN=32429BB75768FB2ED3429D6913A1BEFFEEC369F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:21:01:56:d2:0c:cd:01:81:b6:13:f1:cd:
a0:a2:15:a7:02:23:a0:c5:99:cb:b2:b2:ae:98:e3:
3c:40:52:40:4d:8d:71:40:e8:29:ac:31:3b:18:fa:
65:ee:55:b3:f9:1a:aa:de:ed:08:e6:7c:84:c4:9d:
8d:a0:0e:58:41:9d:4b:7a:0d:f3:6e:8e:dc:0d:18:
d3:14:52:2a:03:37:18:5f:6d:5e:6e:37:ea:ac:ee:
3a:1c:9c:97:e8:d5:61:94:a4:eb:47:56:75:12:ea:
df:a5:bd:b5:dc:08:c3:f3:42:25:28:4e:76:46:d9:
9f:d2:19:9a:a8:c8:92:52:39:f0:c6:78:12:31:ca:
c0:31:56:24:02:26:be:76:1e:e6:6d:d3:a2:f1:50:
07:33:16:22:bb:0d:7b:f3:63:c9:d4:39:64:e6:3a:
41:07:48:50:29:ee:03:f4:bc:a2:8b:53:64:98:f8:
43:80:33:2c:30:32:be:f0:21:60:bb:14:34:2a:6b:
4e:eb:e1:51:c5:19:44:7c:d9:45:9e:9d:e7:10:e4:
ae:cb:5d:06:9e:d0:70:31:22:10:64:2b:7f:0f:14:
5c:0d:9a:80:6d:21:01:f5:34:ec:88:45:38:33:14:
44:a1:53:b8:04:a9:d1:07:53:c7:2a:a7:2f:55:27:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:9B:B7:57:68:FB:2E:D3:42:9D:69:13:A1:BE:FF:EE:C3:69:F8
X509v3 Authority Key Identifier:
keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.81.64.0/22
Signature Algorithm: sha256WithRSAEncryption
80:30:ea:0a:f0:c8:dc:a4:13:4f:79:05:ec:38:08:74:82:58:
e1:35:1f:06:c7:e0:d4:21:03:4e:c0:cf:41:36:54:f5:29:25:
67:57:79:c8:37:2c:70:a6:8f:7b:31:05:5a:72:ed:97:a5:35:
25:8f:07:f4:ce:3c:85:80:3e:b1:b3:0f:69:aa:81:52:54:b5:
fc:ca:95:d0:7a:db:9e:52:48:1a:51:69:97:06:a3:04:f2:96:
dd:a8:37:46:8b:0e:4e:6a:56:17:6c:b3:d1:de:1d:23:f1:49:
a0:4e:e1:41:4b:39:d1:56:51:12:48:e0:71:3b:06:9a:06:8b:
a5:2e:f9:e5:1a:4b:c5:46:ae:19:4a:1b:08:d1:63:74:ec:11:
18:e2:e9:1b:ac:ee:24:d4:b2:9c:8a:4d:d0:23:08:36:31:bb:
57:b7:8a:a1:3c:2a:03:35:89:41:08:ad:7e:8d:bd:24:72:9d:
b4:10:dd:ed:0a:cb:39:c5:49:b5:61:c3:bf:39:bb:21:d2:1a:
46:dd:19:4f:8b:9c:d9:ee:29:e3:5b:87:50:90:f9:f5:a9:bc:
fa:0c:62:af:97:85:1b:46:e7:9a:66:d5:f8:5a:2c:0f:7e:f2:
53:5a:06:d8:03:48:82:74:f5:a3:76:68:88:79:52:57:2d:f4:
d2:1a:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:43 2025 by rpki-client