Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
File: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (raw, json)
Hash identifier: 75Wta+uwJrqDvHsVCmnRjVlduNfxnIK2f2jA8o86w1U=
Subject key identifier: 4E:6C:0D:12:1F:AB:B6:2E:CA:86:E3:73:47:C7:07:40:3D:05:2F:2D
Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial: 086F8AD8B2255EA35BCE6E1A2671D2430D7D2F99
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
Signing time: Fri 31 May 2024 04:00:00 +0000
ROA not before: Fri 31 May 2024 03:55:00 +0000
ROA not after: Fri 30 May 2025 04:00:00 +0000
asID: 9326
IP address blocks: 103.148.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6f:8a:d8:b2:25:5e:a3:5b:ce:6e:1a:26:71:d2:43:0d:7d:2f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Validity
Not Before: May 31 03:55:00 2024 GMT
Not After : May 30 04:00:00 2025 GMT
Subject: CN=4E6C0D121FABB62ECA86E37347C707403D052F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:e2:ef:4c:af:71:f3:b2:51:21:7f:c3:a2:
2b:b5:59:ca:b6:a0:24:94:71:9d:71:3d:97:65:78:
8b:f0:85:3c:f5:b8:5d:e4:d4:6a:ff:ad:dc:17:3f:
5e:a3:e2:ac:a0:9a:5c:fa:3d:89:0f:73:8b:a1:74:
d1:52:dc:6d:a5:3d:43:fd:ba:fc:31:48:f6:f2:55:
0a:3c:59:82:44:73:8e:ff:24:d1:61:a3:18:cd:02:
d0:40:ec:32:0e:f1:f2:28:d0:fa:a5:9b:95:58:17:
f0:dd:7e:7f:b7:cd:e5:ef:f8:8f:59:7b:bb:b8:40:
37:a2:71:66:ad:bd:fc:24:06:97:91:85:1a:bb:33:
56:e3:d4:07:b2:eb:08:2b:4e:49:2e:44:6c:a9:f1:
7d:ce:73:73:86:72:25:6b:08:81:f9:92:2e:0a:3e:
49:77:92:29:fb:af:33:50:e3:1a:c9:a3:a9:c8:5e:
f4:25:de:08:2d:1f:46:7d:f7:37:e1:4b:7d:59:07:
f9:ec:0b:af:f3:c4:99:5c:6f:66:ba:73:93:5e:bf:
fd:7b:ed:16:8a:15:3f:32:14:07:2c:57:b4:50:f8:
23:72:67:51:ee:c6:7c:fc:86:53:d5:37:39:06:e1:
f9:32:a4:5e:3f:64:12:0e:1d:97:da:52:27:64:d4:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:0D:12:1F:AB:B6:2E:CA:86:E3:73:47:C7:07:40:3D:05:2F:2D
X509v3 Authority Key Identifier:
keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.110.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:8f:8f:32:ac:cd:8b:d1:32:0c:5b:84:f5:47:d3:a5:56:05:
fe:9e:25:7e:f9:16:32:0b:e7:a5:a2:e9:fe:77:53:c0:5b:e0:
80:bd:75:e6:2e:53:35:39:83:c4:91:9b:18:89:b4:54:28:18:
a1:53:67:9e:ae:bc:04:b5:ff:4c:b4:0e:39:a0:5c:cf:63:28:
d0:29:99:8f:cb:72:7a:f0:d1:d8:e0:04:f6:13:86:9c:e8:d8:
13:3c:33:a7:0b:eb:de:d0:f5:1e:30:c9:73:2b:e7:40:27:3d:
a7:96:54:2e:ba:e0:e2:ba:ed:78:5c:24:77:8d:cb:f6:05:53:
53:45:0b:71:a6:7a:19:f5:a0:d0:13:e8:f6:48:74:19:34:16:
ae:db:b9:44:59:e4:67:05:67:73:c9:d2:67:49:00:ee:ec:28:
8a:eb:f7:5e:f6:a4:e0:51:4a:51:90:53:3d:68:95:b8:7e:be:
b0:e5:7f:db:1f:67:85:52:bf:2d:97:0d:e8:99:b6:95:59:cf:
ae:88:3a:9d:e1:e4:3a:10:bd:50:41:f6:09:61:a1:16:32:30:
86:fb:82:be:bc:9b:73:fc:2a:00:35:44:a3:45:c7:ce:cf:1f:
a8:02:8a:ef:0d:4f:7e:dc:41:13:bc:eb:5f:67:aa:00:92:51:
78:e1:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:31 2025 by rpki-client