Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa
File: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (raw, json)
Hash identifier: 4qLNGi/A/2Nusn9fOdkgGQAfH65+C/+F6uRVaqCMnSM=
Subject key identifier: 89:99:68:13:D8:CB:69:CC:FB:40:0D:57:D7:1A:D0:BE:1B:7E:D4:76
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 1A67CE93E49557F8CE1DABAAFD1167F6D2127307
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa
Signing time: Mon 01 Jul 2024 01:04:08 +0000
ROA not before: Mon 01 Jul 2024 00:59:08 +0000
ROA not after: Mon 30 Jun 2025 01:04:08 +0000
asID: 139982
IP address blocks: 103.148.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:67:ce:93:e4:95:57:f8:ce:1d:ab:aa:fd:11:67:f6:d2:12:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Jul 1 00:59:08 2024 GMT
Not After : Jun 30 01:04:08 2025 GMT
Subject: CN=89996813D8CB69CCFB400D57D71AD0BE1B7ED476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:24:b0:8e:dd:8c:ec:f3:c5:9a:22:34:22:
1e:36:2d:26:74:d5:a3:38:17:61:d0:4c:96:a7:46:
4c:e7:5e:f0:64:b8:39:d1:f2:01:21:38:64:ee:e6:
3f:87:59:17:ed:b6:0a:b7:98:7d:ac:98:fd:dc:cb:
ce:c7:3d:b7:c3:82:ff:66:09:0c:0f:c4:4d:28:46:
74:bd:49:fa:e8:b7:4d:52:e4:3e:4b:39:c9:ff:2c:
37:9a:db:f2:8e:ec:e0:1d:a8:de:68:b4:a2:a6:49:
d2:94:b2:e7:ee:68:70:b9:30:7f:ea:e4:99:9d:a7:
9f:90:08:a1:3e:5c:67:e2:fc:db:ee:1d:2e:0a:bc:
b5:4e:2f:be:49:00:37:36:cc:07:9d:df:62:82:0f:
a2:e6:62:57:e7:fd:f0:c2:16:e5:e5:9f:64:7f:a2:
50:07:c8:8f:91:d9:13:52:7e:3e:a1:ba:f2:4b:e8:
e0:05:8b:a8:b2:98:d3:4c:e3:b7:c8:a1:15:32:21:
ed:f3:13:80:f7:e7:21:d7:3c:3b:76:f2:d8:74:a5:
39:a9:31:67:33:ac:54:64:94:83:49:1a:6a:ec:40:
48:dc:5e:c1:0d:f1:26:0e:91:24:c6:a2:73:34:7d:
fc:74:64:06:4e:d4:d7:ac:bd:98:e0:5c:0b:b2:27:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:68:13:D8:CB:69:CC:FB:40:0D:57:D7:1A:D0:BE:1B:7E:D4:76
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:25:ca:71:01:3a:d2:4a:63:47:fa:3b:0e:7c:aa:52:ed:58:
46:4f:18:fe:80:97:84:83:cf:1c:f1:4c:30:ad:9a:40:de:8e:
ed:3b:75:55:35:73:7d:b3:6d:99:5e:f1:8b:fa:99:b5:d6:57:
0c:f2:76:b7:21:27:be:e0:e6:4f:fe:6a:91:6d:b6:6e:1c:20:
71:3d:75:ed:3b:3a:18:89:b8:c9:47:4d:30:34:d3:04:ed:54:
96:69:f8:63:7a:ba:1f:a9:6f:ce:f8:85:e3:9a:65:6e:ac:e5:
5a:19:db:75:e5:6b:b8:3f:3c:87:28:ed:2d:43:d5:41:f4:6c:
d6:b4:6e:6b:5c:33:8c:f0:6a:23:34:05:a2:a7:82:44:78:7f:
4e:91:47:e3:71:56:80:cc:72:d5:22:7c:c9:be:31:9d:2b:08:
9e:94:1f:43:94:64:09:c4:7e:89:e1:18:dc:e7:5c:38:c6:44:
4c:66:6d:8a:8a:ab:9a:a1:5f:18:5f:bf:2f:33:a6:c6:d2:1a:
02:76:46:1a:87:8f:c2:89:7e:16:ca:c8:73:18:75:50:9a:d8:
92:ce:e9:9c:cc:29:ec:c6:a8:b8:aa:0b:24:d4:d3:82:7a:96:
01:6b:96:00:66:e5:bb:9d:28:ba:c7:5c:00:a1:a8:b7:52:96:
96:1e:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:26 2025 by rpki-client