Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa
File: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (raw, json)
Hash identifier: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=
Subject key identifier: 32:1B:4E:1F:21:3F:7B:65:C3:3F:A0:C2:02:C1:3C:6D:95:8E:D4:C0
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 7ABF76A0B181A8803C974CD18024F895B2636CCE
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa
Signing time: Wed 04 Dec 2024 04:11:54 +0000
ROA not before: Wed 04 Dec 2024 04:06:54 +0000
ROA not after: Wed 03 Dec 2025 04:11:54 +0000
asID: 139938
IP address blocks: 103.18.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:bf:76:a0:b1:81:a8:80:3c:97:4c:d1:80:24:f8:95:b2:63:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Dec 4 04:06:54 2024 GMT
Not After : Dec 3 04:11:54 2025 GMT
Subject: CN=321B4E1F213F7B65C33FA0C202C13C6D958ED4C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:57:a4:ee:1a:e5:79:48:58:4c:c1:ac:0a:
43:7b:0a:e0:52:d4:59:f7:50:d6:1c:3b:43:9f:86:
c6:14:80:e9:4e:bf:e7:c8:6a:76:ad:92:bf:bc:45:
e5:e0:b5:ed:25:2f:af:5d:aa:10:1f:36:80:f8:a9:
7e:8c:f1:45:21:92:23:53:54:be:aa:6c:bf:c5:c5:
48:5d:1b:df:30:02:3a:8f:73:d7:46:e2:4e:73:96:
75:d6:f5:b5:91:53:3c:38:3c:85:be:05:f6:6a:93:
a3:3e:42:ac:2d:79:08:20:75:8a:62:8a:f9:02:c2:
d8:4e:f3:d8:95:df:b8:f2:a8:0c:f7:b3:77:5e:4d:
9f:02:90:1f:45:1f:89:f9:3b:93:2c:ca:b4:1a:d3:
d7:a5:d3:eb:3e:f2:7b:67:01:be:c2:a1:2c:e3:ea:
5a:16:d3:3b:d4:3c:00:e8:00:ab:79:60:be:0e:27:
c0:7a:e9:b5:ab:b4:87:41:34:3f:02:59:99:3f:a5:
31:f1:da:a1:ff:44:69:ef:20:40:21:f1:49:ed:9d:
18:be:c0:15:14:2c:48:3c:44:5f:02:76:89:42:bd:
c6:71:b8:31:fd:e0:2b:28:ab:b0:9a:9e:a5:51:20:
7b:ff:35:43:e0:64:a4:a4:19:f9:cf:9d:87:64:bd:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:4E:1F:21:3F:7B:65:C3:3F:A0:C2:02:C1:3C:6D:95:8E:D4:C0
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.28.0/22
Signature Algorithm: sha256WithRSAEncryption
43:fb:81:a4:6b:f6:37:f5:fc:aa:ea:e6:03:98:58:7a:af:67:
00:6e:76:dc:40:3c:62:94:cf:1b:5a:07:1f:85:80:81:70:18:
b4:b9:35:8a:cd:7d:cf:3e:20:72:f7:f8:7e:33:be:18:e2:27:
7b:03:1a:f8:c6:79:e8:bc:3a:03:bf:17:55:74:24:39:e1:a2:
98:7e:ee:be:58:18:0a:8b:17:2d:b5:64:c5:82:ee:33:c0:c1:
0d:17:e8:44:27:2f:f5:a4:0c:61:f6:7f:d9:7e:d6:1a:61:0b:
b0:0e:48:49:be:db:d4:e7:42:9a:ed:45:8a:41:7d:40:20:98:
d5:dd:f6:37:99:92:07:34:19:7d:67:06:d0:26:35:3f:37:5c:
36:e8:a0:56:9d:6f:53:d2:26:dd:1c:7f:fd:47:f4:ff:95:ca:
19:41:53:50:9e:df:d8:6b:a5:ee:93:51:f6:a0:0c:0e:83:f0:
ed:05:24:1d:6f:48:96:bd:d8:f8:e6:f4:a4:93:99:f1:77:93:
65:5a:85:d6:90:a1:ee:a3:f7:b5:96:80:a7:47:40:0d:b5:55:
d1:90:9e:6c:b1:08:72:15:ad:21:72:0e:e2:24:15:5f:c7:4a:
51:3d:57:2a:64:89:28:78:e5:83:a7:79:70:cb:64:ca:6f:a1:
e2:41:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:05 2025 by rpki-client