Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=
Subject key identifier: AA:D7:E1:55:2B:EF:42:18:5F:3B:83:32:24:3A:24:B6:05:09:D6:93
Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Certificate serial: 2A7E69481D223B264778151B28A93A69F7F47146
Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 09:00:00 +0000
ROA not before: Wed 04 Dec 2024 08:55:00 +0000
ROA not after: Wed 03 Dec 2025 09:00:00 +0000
asID: 135478
IP address blocks: 103.129.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7e:69:48:1d:22:3b:26:47:78:15:1b:28:a9:3a:69:f7:f4:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Validity
Not Before: Dec 4 08:55:00 2024 GMT
Not After : Dec 3 09:00:00 2025 GMT
Subject: CN=AAD7E1552BEF42185F3B8332243A24B60509D693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:a3:78:b8:cf:f2:63:1f:e9:54:6a:7e:e9:
b8:84:02:02:db:41:96:9d:32:d1:45:97:ef:42:9c:
94:f1:47:50:c9:68:9f:ca:9d:5b:28:f3:e3:66:89:
ec:23:3b:a3:d4:98:5f:28:9d:c3:6d:9b:8c:77:d8:
4a:62:d4:80:66:46:e7:d0:bb:4c:18:0e:3d:bb:a4:
ab:dc:93:fa:f9:e6:6e:7e:0b:53:e6:92:52:c0:3b:
1f:80:15:90:e1:1a:92:83:34:31:ab:de:cb:27:6b:
18:88:f1:3e:0b:cb:b5:3c:1a:14:0c:4e:72:54:e2:
0e:cd:9c:bf:d0:22:b8:28:25:31:71:28:a2:04:77:
54:3e:88:eb:9f:44:39:d7:f3:3e:eb:c8:02:e3:4a:
3f:04:90:f1:62:a9:52:ca:73:b9:b5:59:f0:66:c6:
28:a6:13:2c:f7:4c:77:fc:c6:92:99:ef:96:70:bf:
e4:f0:8f:1e:98:ed:8a:34:49:e0:c5:26:97:d8:9c:
af:ff:7c:d7:c9:29:bc:ab:6f:13:f8:67:c4:50:0d:
a6:17:14:8e:19:35:ad:27:f9:7f:7e:0c:a2:9e:c9:
e3:05:b5:04:24:d1:34:8a:c0:63:f3:18:fe:7a:87:
46:7a:f3:35:d7:40:d3:0d:48:51:85:c2:54:d5:42:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:E1:55:2B:EF:42:18:5F:3B:83:32:24:3A:24:B6:05:09:D6:93
X509v3 Authority Key Identifier:
keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.22.0/23
Signature Algorithm: sha256WithRSAEncryption
76:a4:54:52:cb:47:c3:af:a9:f4:40:dc:76:5f:e1:47:0d:c8:
e8:35:21:29:fb:57:d1:a8:d1:98:fc:30:54:0d:00:ac:ee:1d:
d2:29:2c:e0:51:0a:af:79:b9:fc:fb:26:0b:4d:a9:37:e5:17:
3a:70:98:d0:e8:fe:20:b5:a0:39:ef:f0:36:77:db:0c:a2:03:
55:4e:6f:ee:25:9c:f6:84:b0:fb:47:77:a5:ee:3e:b0:aa:ac:
81:d2:e6:bc:72:8c:6e:57:30:8c:24:be:c2:04:7b:03:35:8f:
2a:02:af:53:e0:95:8f:e7:f1:b4:8a:3a:dc:c7:2d:25:f9:7a:
a6:77:76:e7:73:0e:3a:73:e0:a8:78:1d:6a:2d:0c:ce:f5:4b:
c2:08:a4:ff:68:54:89:94:31:3d:d0:ab:1c:23:43:9e:20:eb:
4f:29:07:06:bf:10:58:20:b4:4b:74:e3:d1:bd:2a:c4:9b:1d:
a3:28:98:36:e7:f3:f4:92:9d:a9:30:f4:40:69:f1:4b:35:63:
6d:f6:d8:65:d0:58:0e:35:2c:dd:66:05:f1:c4:9e:35:ba:be:
d9:09:47:0e:fc:bb:22:67:a7:6b:75:4e:04:fe:eb:9e:ec:7c:
d3:d6:02:60:ba:75:84:ad:8d:3a:c8:01:8b:5c:79:16:98:e6:
cf:01:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:56 2025 by rpki-client