Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa
File: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (raw, json)
Hash identifier: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=
Subject key identifier: F2:B5:8A:90:3A:DE:FB:D8:22:0A:28:90:E8:B1:FC:FA:B0:C5:66:0F
Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
Certificate serial: 4F245A15744DB43D968619177A6DDC4D45E7C4F2
Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa
Signing time: Mon 02 Dec 2024 10:01:19 +0000
ROA not before: Mon 02 Dec 2024 09:56:19 +0000
ROA not after: Mon 01 Dec 2025 10:01:19 +0000
asID: 132678
IP address blocks: 103.241.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:24:5a:15:74:4d:b4:3d:96:86:19:17:7a:6d:dc:4d:45:e7:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
Validity
Not Before: Dec 2 09:56:19 2024 GMT
Not After : Dec 1 10:01:19 2025 GMT
Subject: CN=F2B58A903ADEFBD8220A2890E8B1FCFAB0C5660F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:09:cc:22:79:89:d7:46:f8:35:dc:00:bc:
ba:06:16:26:2e:05:0b:8c:5d:aa:29:c2:33:15:a6:
af:12:b7:14:33:af:9d:23:2d:39:6e:0c:cb:c4:1a:
9f:16:03:9b:74:c1:98:a3:fa:4b:21:2e:94:ff:fb:
13:1a:f5:2c:51:04:36:9a:9a:64:35:9d:cd:25:5e:
4e:a5:6d:2b:81:ab:f1:a9:81:99:72:39:8c:f5:9e:
e6:46:8d:18:6c:9c:34:62:6c:08:07:32:38:b4:8e:
6e:86:d4:8a:1a:cb:96:f8:d5:2a:6d:c3:f7:e6:e9:
2c:f7:6a:9c:e3:3b:07:99:dc:6f:2a:99:ab:3e:c5:
c4:9b:cd:9a:05:c5:ea:7b:87:8f:f2:2f:a2:9f:ef:
c9:1d:2c:69:9e:cc:73:c4:d0:cc:4f:71:78:ea:4f:
a1:e1:44:fa:3e:f8:c6:01:0c:50:d2:4a:e1:e6:65:
ee:d8:fd:f1:8b:c5:69:c6:c6:a6:43:b4:5f:95:cd:
ed:b6:3f:6c:08:0c:1c:57:19:9c:65:df:47:83:86:
df:33:03:ed:72:f0:4a:e6:65:97:3c:05:d8:fc:38:
23:b1:dd:8f:17:a9:7c:1f:9e:55:cd:41:fe:0c:24:
5b:6f:b9:86:37:c9:ff:6e:b5:d3:56:26:c9:25:4f:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:8A:90:3A:DE:FB:D8:22:0A:28:90:E8:B1:FC:FA:B0:C5:66:0F
X509v3 Authority Key Identifier:
keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c0:4f:f8:74:9f:94:01:90:d9:e2:5f:13:10:1d:49:79:3f:
66:b4:3b:c2:87:38:46:07:20:24:24:a2:71:78:0f:f4:88:0e:
c9:7f:ba:a5:80:a0:8f:f4:f2:42:9c:02:09:c0:ab:e2:2c:83:
3a:7c:b7:2e:03:40:7c:1c:a7:91:68:f2:22:74:76:13:9e:dc:
7b:f9:24:3a:21:9e:2a:68:93:fe:5e:7a:0f:e5:58:42:c0:e5:
be:57:6d:8c:6a:81:2c:66:a5:4a:ae:76:68:16:2d:0a:4a:b2:
90:77:4c:14:7f:2c:45:4c:de:df:f2:61:b0:84:99:22:d9:bd:
94:cd:28:c3:3a:dd:08:40:03:d1:0a:8a:45:82:a5:db:41:f1:
1c:9b:02:39:91:43:ed:e0:07:00:e7:92:e7:2f:ea:84:ff:4e:
67:76:2d:ce:0e:12:bc:ae:b1:8c:e0:50:bd:6a:7a:4b:18:b8:
a5:00:65:07:14:bf:ca:24:18:54:25:f5:51:e9:26:ee:78:e9:
33:51:1f:b1:0d:3f:ec:64:09:fc:4e:70:3d:d3:18:6c:0e:94:
cb:1c:09:89:fd:d0:0b:ce:14:6b:56:c4:c5:54:29:37:a1:07:
d2:12:03:90:97:8d:95:48:93:b8:7c:b6:17:22:56:59:70:f1:
6e:d3:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:51 2025 by rpki-client