Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
File: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (raw, json)
Hash identifier: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=
Subject key identifier: FA:C9:62:E7:A4:1E:75:C4:B8:39:67:44:2F:C6:08:48:72:14:21:16
Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial: 15A7EECAEA2A958082EC18DC11428F4C6E6BCEBE
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
Signing time: Fri 13 Sep 2024 19:00:02 +0000
ROA not before: Fri 13 Sep 2024 18:55:02 +0000
ROA not after: Fri 12 Sep 2025 19:00:02 +0000
asID: 138598
IP address blocks: 103.134.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a7:ee:ca:ea:2a:95:80:82:ec:18:dc:11:42:8f:4c:6e:6b:ce:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Validity
Not Before: Sep 13 18:55:02 2024 GMT
Not After : Sep 12 19:00:02 2025 GMT
Subject: CN=FAC962E7A41E75C4B83967442FC6084872142116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:84:37:08:29:6b:85:7b:b0:9d:3d:69:f4:
6c:a9:f1:9f:bf:b1:6d:60:01:87:cf:fe:e7:44:cb:
cc:9c:dd:4c:96:10:16:b5:3d:d0:76:b8:eb:ed:5b:
0c:be:59:62:f2:a4:ac:7d:24:66:9c:7a:ab:26:e5:
48:40:0e:13:2a:c8:77:9f:5e:41:bb:03:90:f2:4b:
0c:70:38:38:d0:a1:dc:c7:70:84:d9:8a:e8:16:6f:
fd:5f:1d:d5:8c:4a:e1:36:5b:b7:c6:a5:e1:e4:a7:
ac:1c:e2:8b:ce:0a:bb:f7:58:78:33:6d:e8:35:19:
64:58:fa:0c:a5:fb:da:44:54:2d:1a:75:27:60:7d:
89:1b:5a:7f:50:1f:7c:33:ed:43:a0:c6:6e:94:63:
4f:fc:ac:62:8b:2d:ec:9c:f8:9e:8d:28:ce:0b:94:
47:60:0d:f4:31:5f:9e:79:f5:8a:a8:b6:22:02:9c:
e2:8d:1c:7a:59:d0:af:09:a2:71:01:32:c9:5a:e3:
5c:81:ea:6a:ce:f2:12:54:8f:e3:c3:33:fc:75:51:
d4:2d:e2:a5:b6:bb:7f:be:72:35:3d:0e:b8:ae:18:
a5:7f:c3:39:34:f4:7d:ae:4c:ea:cf:67:5a:33:a6:
50:9b:64:f2:3e:77:5f:1a:25:25:0f:9e:c3:fe:67:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:62:E7:A4:1E:75:C4:B8:39:67:44:2F:C6:08:48:72:14:21:16
X509v3 Authority Key Identifier:
keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.51.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ba:c7:10:b5:99:63:72:c3:12:8f:e9:54:39:a3:0e:0d:6c:
21:92:e1:6c:95:c8:48:35:91:b6:e0:11:ee:30:a3:01:28:4c:
49:2a:42:e2:f3:94:2d:db:3e:45:d1:90:9b:21:da:57:a6:8e:
b7:65:1a:3e:b4:5b:c5:36:03:3d:1f:a9:af:b2:bd:27:92:95:
4d:e8:c5:1a:83:0c:0d:b0:e7:73:8f:0c:65:5b:39:90:a6:b5:
dd:cd:67:35:1d:6d:5e:ee:f4:a1:10:20:66:df:ad:bb:10:e4:
83:f3:a2:ab:fa:e7:c0:14:58:dc:9e:57:05:df:b6:9e:9d:e7:
fe:77:c0:6a:81:d1:8d:5f:dd:a3:52:11:c3:84:71:82:e9:9f:
97:41:80:a5:fc:4a:41:a6:8d:a5:76:78:8f:c5:bc:ef:ab:81:
dd:64:43:83:ac:64:89:71:2a:4e:3b:84:8c:67:4e:bd:f2:16:
f7:1c:c5:36:06:0b:e2:d4:53:29:71:0d:69:58:e7:ab:66:71:
77:af:91:9f:82:4e:36:54:8b:05:d0:d3:1d:7f:79:9f:6a:cb:
5d:3c:c3:cb:3d:a7:19:db:5e:b8:4f:e9:7e:9a:95:9e:5c:67:
90:4e:33:91:79:01:13:3c:40:91:e5:4a:d0:1b:4c:84:5b:5c:
60:fe:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:40 2025 by rpki-client