Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
File: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier: CD9wJONsaZwvJXuVX9EIASMR2Lv/jupr7Ncfz7emG/c=
Subject key identifier: 06:A7:42:CF:92:49:CF:DA:54:E9:66:E8:E9:DA:A7:70:C5:7A:27:EC
Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial: 2EB05D4CEAB309E32034B79F021052D346405752
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
Signing time: Wed 04 Sep 2024 10:02:24 +0000
ROA not before: Wed 04 Sep 2024 09:57:24 +0000
ROA not after: Wed 03 Sep 2025 10:02:24 +0000
asID: 138886
IP address blocks: 103.189.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b0:5d:4c:ea:b3:09:e3:20:34:b7:9f:02:10:52:d3:46:40:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Validity
Not Before: Sep 4 09:57:24 2024 GMT
Not After : Sep 3 10:02:24 2025 GMT
Subject: CN=06A742CF9249CFDA54E966E8E9DAA770C57A27EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:54:6e:d2:c6:54:0d:94:5a:00:b8:e8:fa:
13:fd:5f:05:6b:07:1f:77:c1:01:11:af:b7:7d:1a:
47:cc:54:77:11:7c:78:6a:f5:4a:8e:b9:35:3d:c8:
6a:0d:b7:f9:23:45:0c:8a:e4:fb:82:10:b7:f0:96:
c0:ef:1f:d1:79:29:73:e2:da:57:23:b0:a7:9e:9d:
62:65:03:5d:05:14:d5:83:30:17:6c:af:7a:b1:9f:
35:94:8e:1f:d7:f3:71:ce:1f:16:b6:2d:98:32:3a:
98:13:f0:38:69:4d:ec:9e:45:39:92:71:c9:9a:66:
7d:20:35:22:86:56:1c:dd:c7:e4:6f:15:8d:a4:ab:
17:ed:9c:9a:41:34:eb:ea:75:d1:f9:58:8e:d5:34:
6c:a2:05:46:4f:55:b5:6a:38:0a:dc:e9:80:0f:a3:
da:dc:48:a3:4d:9d:22:9b:38:6d:6f:88:1d:d0:4d:
55:41:2a:65:11:06:d9:d6:d1:bd:69:2c:d5:db:d8:
fa:b6:a2:4c:a6:b2:58:6f:27:7b:5b:a0:30:04:6e:
29:89:71:af:70:17:47:ba:9b:be:3c:7e:f9:53:9e:
5a:44:37:84:dd:26:da:64:40:37:08:7a:96:ea:16:
29:bd:1d:4c:4a:68:a0:49:7a:b2:b4:c5:7a:0c:ee:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:42:CF:92:49:CF:DA:54:E9:66:E8:E9:DA:A7:70:C5:7A:27:EC
X509v3 Authority Key Identifier:
keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.120.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f1:3e:95:29:4d:aa:12:52:4c:97:12:31:07:bf:97:e6:44:
f9:b3:aa:a3:af:50:bb:9c:4b:6d:f7:fb:e7:c3:74:8a:b6:98:
fc:ae:2e:f9:86:27:10:2f:60:a2:6c:20:1f:40:70:fe:ec:59:
79:b2:50:86:ab:19:1e:27:99:86:6a:2c:da:a7:11:ae:29:b0:
44:8f:ec:31:90:c5:18:fb:b6:59:24:81:77:4b:a7:9a:42:ad:
e4:51:b6:7f:3d:6e:1b:06:95:12:14:38:3a:69:71:7e:ba:cd:
85:f2:1f:27:8c:ea:aa:16:65:ff:52:cb:11:a9:45:e9:9e:1f:
fb:37:b9:6d:9d:72:8f:9c:a9:c6:02:ed:60:9b:12:5a:fe:5c:
fd:e0:fd:1f:52:b0:6a:2d:25:85:ef:cf:b1:01:a1:fb:1d:d3:
29:72:21:fe:b6:09:b0:a2:88:4a:b8:7a:af:c8:b8:30:f6:0c:
8a:d2:0b:81:7b:be:7b:a8:34:13:74:45:d8:3d:d2:f4:63:0c:
31:f1:4c:7c:78:2b:41:18:cd:c1:4f:97:83:43:7f:2d:1b:f5:
a7:98:43:da:b6:aa:9d:a7:18:b1:22:ee:7b:29:e8:2f:82:72:
58:fd:a3:a2:88:9e:68:24:16:87:b4:8b:07:28:8b:25:28:e3:
aa:5e:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:37 2025 by rpki-client