Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
File: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: R3fPbPLGZiRzy17EKK0wwpepbuagvyGwkQgUHPVbRMw=
Subject key identifier: 9F:71:AA:9E:52:79:95:61:58:39:79:D2:79:0A:F3:68:70:E7:1C:31
Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
Certificate serial: 723525D361D40B25973D7BCFF131969370A0378A
Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
Signing time: Wed 15 May 2024 06:00:00 +0000
ROA not before: Wed 15 May 2024 05:55:00 +0000
ROA not after: Wed 14 May 2025 06:00:00 +0000
asID: 38320
IP address blocks: 103.135.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:35:25:d3:61:d4:0b:25:97:3d:7b:cf:f1:31:96:93:70:a0:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
Validity
Not Before: May 15 05:55:00 2024 GMT
Not After : May 14 06:00:00 2025 GMT
Subject: CN=9F71AA9E52799561583979D2790AF36870E71C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:f5:00:46:07:5d:cc:de:b9:c3:06:4b:49:
94:2c:2e:83:71:34:ef:45:7f:e8:b1:be:b2:68:1f:
88:f8:19:9a:bd:75:87:1c:84:d7:07:9d:2d:a8:00:
d7:97:48:9a:db:4b:e6:9b:cf:29:c9:ca:aa:1c:bc:
93:f4:9b:2b:88:1f:bb:81:6b:73:7c:91:dc:ab:c2:
fe:c9:a0:a0:39:51:96:f6:bf:bb:02:95:61:6d:8a:
81:9a:f9:22:07:b3:3d:fd:4d:ce:1c:1c:d4:33:22:
0a:da:1b:5d:d9:32:bd:dd:c1:85:72:05:00:cf:41:
1b:ba:dd:3e:dc:3d:cb:0c:23:eb:96:02:3b:b4:e4:
b5:1c:8d:8a:3d:f9:3b:96:32:88:36:7b:67:a7:f7:
85:7c:55:ac:7e:78:77:2d:6a:58:3e:bf:32:2b:65:
07:de:e9:93:e2:c8:1a:c5:9b:33:21:03:31:d7:19:
4c:6d:32:73:f3:11:1a:ba:31:a7:ec:ab:62:59:c5:
6b:28:1b:2f:6f:d9:06:24:be:f0:08:3f:b8:b1:f5:
c7:f7:13:1c:33:22:b0:81:9c:34:1d:f2:00:59:31:
e9:c0:9f:fc:20:6b:2e:dc:2e:63:b2:09:f7:69:9d:
33:b3:65:7b:e6:f4:86:32:f5:9b:47:b7:f3:fe:0c:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:AA:9E:52:79:95:61:58:39:79:D2:79:0A:F3:68:70:E7:1C:31
X509v3 Authority Key Identifier:
keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b6:7b:61:78:eb:f8:5b:41:ff:ea:dc:3a:1c:8e:5b:a9:70:
b4:de:e0:94:8d:c3:02:87:e6:2b:49:33:3d:db:25:06:4c:92:
e0:66:49:94:07:47:b4:7b:c1:4b:de:32:08:49:d3:ca:7e:b3:
36:5f:1b:3d:fb:f8:d1:20:e4:7f:9d:d5:b9:26:49:d7:b6:a6:
90:10:c9:ff:87:a5:f4:b6:cc:9e:73:3a:c5:17:3e:24:98:bf:
af:22:5e:40:9b:f6:0a:8f:ec:87:b2:9f:3b:0c:83:af:fa:7d:
80:c3:e5:8f:90:22:85:73:ea:50:ea:94:8f:ff:a1:4f:3a:d7:
3a:d5:7e:a2:fd:aa:7f:9b:7b:6e:79:dc:9f:e0:2b:08:b4:23:
da:60:c7:4e:f0:e1:1c:b2:88:bb:60:9b:95:b7:d1:f2:41:ad:
b6:7f:f5:20:71:48:ff:49:36:a4:01:48:01:a0:12:b7:c4:53:
63:f2:34:82:53:d7:50:c3:73:9c:ae:d8:8d:70:d0:8a:4f:61:
35:eb:65:15:2c:fc:7e:f3:b8:c7:ab:84:e2:34:c1:f8:84:63:
52:e9:27:3d:13:3d:42:69:33:3d:24:4a:59:47:1c:1f:6b:d5:
e5:e6:0e:c3:34:5f:41:4d:45:c9:7a:65:04:97:d3:91:31:03:
e0:73:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:06 2025 by rpki-client