Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa
File: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: kOFuSaWcp+Tj246w7gXWZs/JRQP0bIRuXOfYlDYSSms=
Subject key identifier: 31:AB:82:C7:2E:43:1E:15:4A:1F:5F:1C:90:47:46:47:F8:96:97:5C
Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7
Certificate serial: 3030F3479CAAA24227344749BDF9F794D1353F07
Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa
Signing time: Fri 26 Apr 2024 10:02:05 +0000
ROA not before: Fri 26 Apr 2024 09:57:05 +0000
ROA not after: Fri 25 Apr 2025 10:02:05 +0000
asID: 24534
IP address blocks: 103.149.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:30:f3:47:9c:aa:a2:42:27:34:47:49:bd:f9:f7:94:d1:35:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7
Validity
Not Before: Apr 26 09:57:05 2024 GMT
Not After : Apr 25 10:02:05 2025 GMT
Subject: CN=31AB82C72E431E154A1F5F1C90474647F896975C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:dd:16:75:9a:ea:de:7c:74:e1:cd:20:cf:
2d:0c:f7:e1:04:62:37:09:f8:4a:4f:b2:64:c9:1c:
74:43:6a:56:f6:0f:07:6b:7e:8c:af:f9:bd:72:4f:
c1:44:2b:75:43:74:8f:4a:ee:66:ba:18:a9:95:44:
a8:34:81:b8:fa:81:6e:e8:f9:36:11:1f:44:bb:56:
4e:31:23:68:01:f9:b8:f9:ba:bc:ec:92:08:1e:cf:
53:ce:76:b1:35:f1:1a:00:4a:78:0c:ac:30:4c:4f:
04:00:53:6f:70:a5:fc:10:9d:29:22:31:b6:ba:a6:
b5:9d:24:d5:20:e4:79:cd:dd:c7:0e:cf:90:2b:9e:
d7:a9:3d:88:a3:17:1d:77:36:d2:67:b2:40:f7:14:
f0:f2:f4:b7:3a:42:f6:7e:8b:5f:da:f6:fd:5f:9e:
65:26:6f:30:66:d4:7e:2b:46:b0:c4:11:91:34:53:
99:38:cc:76:33:0b:b1:88:3a:4d:05:aa:66:25:67:
42:af:3b:dc:a1:ef:1c:82:7e:99:92:1d:e0:c3:5e:
03:d5:a4:3c:6f:59:7b:3e:ff:38:86:cd:46:92:32:
44:c3:ae:e7:64:22:14:a2:41:a4:3f:2f:68:40:15:
f6:11:8c:8e:b2:39:e2:3d:6b:64:b6:29:06:a3:c6:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:82:C7:2E:43:1E:15:4A:1F:5F:1C:90:47:46:47:F8:96:97:5C
X509v3 Authority Key Identifier:
keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.35.0/24
Signature Algorithm: sha256WithRSAEncryption
17:95:cc:a1:04:dc:c9:58:36:c8:eb:72:08:a1:8b:9e:a2:4e:
0e:23:6f:d7:6b:43:3a:92:67:34:13:80:6e:60:e3:f2:62:91:
e5:61:0b:5e:8c:24:f5:5f:fd:48:80:d3:7a:dd:1c:97:ba:0c:
5d:80:d0:d1:58:3e:9e:73:04:56:e7:30:c5:c0:3e:7f:93:43:
b7:bf:83:a6:55:62:06:bd:fe:3b:13:69:dd:dc:91:9f:18:5a:
a8:99:2d:e2:77:d6:72:76:5c:1f:aa:11:2c:05:eb:ba:db:e9:
1e:31:72:13:37:7b:df:ac:62:c4:2f:af:64:16:37:2c:d9:ba:
33:9a:f9:29:23:11:07:d5:ab:1f:6c:e7:71:96:df:2e:61:93:
a5:6a:5d:ae:ed:c1:c2:4a:34:0b:46:5f:36:91:cf:0b:61:7b:
52:8d:a8:f6:56:bf:d2:ed:7d:ae:f6:3d:0d:fe:07:02:f8:0e:
78:f5:e6:e8:e5:45:e3:36:18:b7:95:e8:22:24:c9:2a:44:b0:
21:ca:62:50:c5:b7:be:77:f0:36:8b:dd:fb:4d:06:8a:a0:6e:
9d:6a:e5:3f:ca:9f:96:df:a8:60:9f:16:49:1a:e0:98:c3:32:
57:2f:77:53:a6:9a:26:98:c6:09:22:49:61:88:4c:bc:0c:27:
c5:f8:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:07 2025 by rpki-client