Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
File: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (raw, json)
Hash identifier: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=
Subject key identifier: 20:32:FA:4E:E3:09:4B:DB:47:8A:33:5B:E0:98:CC:3D:1C:CA:74:0C
Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial: 188BA493FF70DDF2B6EE335E5FB2F2B42FC432BD
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
Signing time: Fri 01 Nov 2024 08:00:33 +0000
ROA not before: Fri 01 Nov 2024 07:55:33 +0000
ROA not after: Fri 31 Oct 2025 08:00:33 +0000
asID: 149333
IP address blocks: 103.179.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8b:a4:93:ff:70:dd:f2:b6:ee:33:5e:5f:b2:f2:b4:2f:c4:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
Validity
Not Before: Nov 1 07:55:33 2024 GMT
Not After : Oct 31 08:00:33 2025 GMT
Subject: CN=2032FA4EE3094BDB478A335BE098CC3D1CCA740C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:fc:9e:e6:9a:57:a1:21:d2:b0:45:fb:a2:
0e:a2:2a:59:46:95:c8:cc:c3:bb:84:2a:f7:fa:ba:
21:3d:0c:0f:3a:ac:3d:ae:8d:eb:c2:f5:b8:eb:f0:
92:5b:bb:00:c4:fb:94:cc:7f:88:7f:aa:ed:01:b9:
c8:fd:71:52:fb:7c:7e:ad:28:bb:fe:c1:2f:9c:04:
7e:f1:c5:54:9c:31:1f:c6:03:0a:2a:b8:3c:91:49:
18:8c:b3:1d:76:c8:ed:ae:0d:61:d8:f4:12:e9:ca:
8d:1c:c4:01:82:06:a7:50:f5:d5:4c:ab:71:9e:2b:
d5:d0:98:7c:04:f1:d9:df:8a:72:ed:f9:11:76:d1:
43:96:d6:98:46:08:7b:9f:28:2b:75:ee:db:c3:ba:
b5:6d:60:f7:4b:b1:da:db:25:43:f2:a7:fa:cf:05:
4a:16:f1:de:f1:84:a7:88:27:7e:eb:8c:ca:e5:66:
57:49:fe:4b:f5:4c:35:cc:a1:8e:4c:38:7b:e8:35:
ac:55:42:cd:1a:54:64:df:bb:1f:c3:c0:01:38:c1:
a4:8b:8d:64:47:05:63:aa:f9:6d:f2:ea:ab:61:df:
e3:ef:72:4e:0c:44:eb:03:c8:55:87:cf:4b:48:cc:
95:6e:94:66:d9:5e:91:ee:19:0e:a6:ff:73:bd:d3:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:FA:4E:E3:09:4B:DB:47:8A:33:5B:E0:98:CC:3D:1C:CA:74:0C
X509v3 Authority Key Identifier:
keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:f2:33:02:13:51:b1:fc:29:44:98:57:2f:ee:12:f7:0a:c6:
26:d3:48:86:18:86:f1:15:fc:6a:be:c4:4a:22:58:d5:1d:14:
aa:24:af:0f:39:9a:bc:06:41:f0:70:6a:82:34:ef:ce:09:75:
7e:ba:ff:4a:83:46:47:18:bf:18:71:5e:f6:a7:f7:90:15:42:
1c:f2:6c:15:e0:58:9c:fb:a0:04:67:2c:c3:be:22:b0:f1:e8:
62:4e:d2:9e:b4:ba:52:a0:e8:ce:51:68:38:5a:24:8a:c1:e1:
f8:35:8c:ed:fb:1f:74:59:c9:b4:03:13:99:82:77:54:01:56:
fb:35:ba:9a:18:9d:56:22:d2:0c:a7:cf:02:bd:69:bb:db:7f:
0f:76:44:7b:d1:ca:36:a1:14:a0:8c:5d:71:9e:09:04:6c:a7:
df:0d:e6:b5:90:5a:7b:df:ec:c5:11:b9:46:cf:5f:85:5b:9c:
c4:21:21:64:c0:bb:c6:cd:bb:b2:61:c5:4f:2f:30:e3:e5:de:
79:20:a0:89:7f:a1:78:76:bf:4f:87:bc:a2:33:3a:56:d9:48:
06:93:54:c6:ba:c5:9c:09:f5:e2:e4:ca:a8:5c:0b:1b:ae:1d:
f5:64:75:49:5f:a1:3c:9c:bc:b9:8a:f0:ac:08:02:81:35:8c:
43:85:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:46 2025 by rpki-client