Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier: 8/ITWjqRZUL5iM9Mvik/rTJfLq+NT1sqJoOk49tnyps=
Subject key identifier: 13:BF:2B:B0:5F:2C:5E:44:FF:04:10:51:3A:88:24:D3:9F:00:9B:7D
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 66EF7185BE5878F31CA501A4E6E3173EFDFF99A2
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time: Fri 08 Mar 2024 15:16:20 +0000
ROA not before: Fri 08 Mar 2024 15:11:20 +0000
ROA not after: Fri 07 Mar 2025 15:16:20 +0000
asID: 139982
IP address blocks: 103.148.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ef:71:85:be:58:78:f3:1c:a5:01:a4:e6:e3:17:3e:fd:ff:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Mar 8 15:11:20 2024 GMT
Not After : Mar 7 15:16:20 2025 GMT
Subject: CN=13BF2BB05F2C5E44FF0410513A8824D39F009B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:bd:91:b1:25:e2:07:49:40:ed:a3:3a:db:
29:21:47:7e:39:31:26:24:09:f6:98:c6:df:30:be:
44:d0:a8:f9:0f:50:ce:57:1b:55:53:e6:47:f8:2a:
4a:fd:2d:9a:1f:82:00:a9:30:c0:7e:ce:e2:c8:27:
f4:6b:a3:7e:69:67:2d:9c:bc:1e:e6:82:6c:9f:b3:
5d:91:e2:7d:89:f5:3a:84:75:c5:6b:fc:0e:0d:35:
49:66:92:7a:ff:7e:82:df:69:46:f1:72:2a:fd:d2:
f6:cc:e7:49:8e:bf:5e:95:6f:a1:6e:4a:49:da:08:
04:d2:91:37:d0:8d:0a:8f:b6:dd:e1:62:a5:47:76:
5c:af:38:be:a8:87:70:29:9f:72:59:f8:26:12:81:
e5:59:a8:ac:b4:78:bb:92:73:fc:71:f8:69:78:f6:
4d:00:af:20:bc:79:83:b0:0b:af:c1:5e:f9:bd:58:
dd:cb:20:7e:14:d5:ce:0c:83:9d:dd:66:d2:4f:e2:
e2:14:39:d6:bc:79:00:e7:09:3c:7f:00:df:f5:e5:
76:4d:fe:ae:86:25:f3:00:6b:02:c9:85:6f:76:7a:
d8:73:d4:13:59:95:72:fd:ef:d8:d9:74:77:a2:ae:
13:dc:25:23:59:c0:f1:a5:0d:db:25:e8:eb:73:e3:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:2B:B0:5F:2C:5E:44:FF:04:10:51:3A:88:24:D3:9F:00:9B:7D
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:39:02:26:bc:0c:4e:3a:4f:5f:79:65:6a:57:42:bc:b7:66:
e3:1c:fd:20:43:69:d3:05:11:d6:b2:10:8c:4f:d1:28:39:46:
74:c9:ed:43:67:2b:f6:ac:c1:a2:c2:14:2d:78:5d:5d:b5:ba:
06:59:aa:3a:d2:6e:f5:cb:f1:dc:71:73:59:8a:95:30:15:50:
ce:e9:ac:b6:cb:cf:02:16:73:e7:ce:53:70:a1:fe:5c:d6:df:
55:44:5a:2e:61:ab:76:eb:10:26:54:ec:f4:68:55:53:65:ac:
91:08:b2:8e:d9:36:97:9d:c0:a8:5f:91:b1:d1:5a:bd:af:1c:
92:89:b9:c7:ed:21:ea:ad:7b:ef:56:39:b8:f8:ff:99:98:7d:
0e:d0:eb:6d:f5:e9:e1:ec:af:c8:94:32:c9:c1:58:e0:80:0a:
7a:04:f7:3f:9d:34:1a:54:7d:78:df:b8:2e:e0:45:2e:e0:d6:
03:60:1f:c5:ff:27:5c:12:43:ce:bd:07:59:f3:73:5c:5f:9a:
87:c6:bb:93:88:d8:63:60:95:25:e5:5b:55:1b:e9:89:86:79:
cb:b4:63:0d:6d:2f:1e:22:0c:66:6c:96:2f:42:6c:15:f0:9e:
03:e4:48:16:59:55:60:76:e3:39:5e:cf:1d:e6:eb:99:bd:56:
05:96:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:41 2025 by rpki-client