Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa
File: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (raw, json)
Hash identifier: vw974+b7S4AeCMOfLxwb8dIT4RkLZFi3f5lsXumywts=
Subject key identifier: 25:6A:14:35:D8:9A:1C:A4:EA:E4:57:58:4E:73:D6:D0:A2:E1:AC:EE
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 3AFA42DFB0E761AAA57C525084A69B2F5C735B89
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa
Signing time: Sun 29 Sep 2024 13:45:13 +0000
ROA not before: Sun 29 Sep 2024 13:40:13 +0000
ROA not after: Sun 28 Sep 2025 13:45:13 +0000
asID: 141071
IP address blocks: 103.97.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:42:df:b0:e7:61:aa:a5:7c:52:50:84:a6:9b:2f:5c:73:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Sep 29 13:40:13 2024 GMT
Not After : Sep 28 13:45:13 2025 GMT
Subject: CN=256A1435D89A1CA4EAE457584E73D6D0A2E1ACEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:ae:ef:b8:db:e3:29:4c:a5:f2:d7:69:d1:
4c:c8:c2:df:b1:df:f4:62:49:21:7f:c8:e2:0f:21:
6e:98:70:96:54:a6:24:c2:80:54:8c:fd:29:40:40:
45:b1:98:f0:f8:48:13:15:b4:de:da:6e:19:49:15:
2f:2f:f9:aa:a3:12:8d:83:37:ba:a9:5a:f5:84:24:
49:c9:f9:7e:a6:ec:0d:25:77:64:15:ff:12:45:3f:
55:1d:20:76:09:e3:fa:9a:d7:87:ff:72:b0:3f:20:
ca:10:b2:9a:fd:1e:82:ae:a7:a7:fb:16:43:72:87:
23:23:66:bf:a7:bf:0d:3a:8e:8e:26:f3:75:4b:02:
cf:7b:18:56:d5:dc:58:42:35:55:59:aa:c4:a7:39:
66:79:e2:4a:c0:0f:d4:48:31:64:74:ff:47:ac:2c:
5c:22:0c:11:0c:41:76:da:f8:7a:db:3d:b9:24:5f:
1e:d1:08:fa:ac:2d:a5:00:36:41:fb:27:d6:f2:af:
8d:c9:a8:c2:28:ef:98:6d:90:87:4a:f5:f4:52:06:
31:8d:aa:7a:59:7e:32:ab:16:11:62:62:1a:ba:68:
8d:6c:c9:ae:66:6f:b5:57:7c:de:a8:c2:0e:60:90:
60:13:98:73:5e:0f:0a:f4:0c:b2:74:8d:f7:ad:2d:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:14:35:D8:9A:1C:A4:EA:E4:57:58:4E:73:D6:D0:A2:E1:AC:EE
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.141.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4d:05:74:f7:3e:49:53:5d:4e:38:a2:6a:2a:22:9d:08:7f:
35:41:62:88:36:8a:d9:c4:8b:d8:33:9b:37:14:4d:cb:f0:de:
94:d5:b8:4b:ad:41:8d:49:f7:cd:e7:3a:11:b0:12:46:13:1b:
47:ff:d4:c8:9b:40:ff:ad:ac:a9:59:85:1f:0a:d1:c0:b0:bd:
c5:fe:58:98:8e:d4:d7:d5:c8:03:89:e6:b4:a7:ea:d5:d0:20:
e5:88:4d:61:4d:e3:54:d1:13:96:9c:b4:6c:cd:68:3c:d0:e7:
36:73:6c:2f:08:c5:95:4a:e4:4e:9f:26:e7:b7:15:27:cb:9e:
fa:b2:20:93:de:b2:e0:6f:03:bb:ad:69:c8:8e:6a:0a:6c:d7:
d5:57:84:4d:15:e4:09:0a:3a:8c:46:0e:3e:30:55:65:0a:ed:
13:3f:1d:99:a4:a8:a9:07:64:e4:46:e9:ff:f8:26:f1:51:fd:
11:c2:7a:3a:c0:eb:50:74:45:59:12:81:7e:b0:55:ab:b9:1e:
10:d5:16:2d:a7:5b:55:73:f0:5a:fa:ce:35:03:a2:70:99:02:
4a:57:fb:a5:ca:12:3b:4b:25:57:39:d3:94:bf:ea:da:bc:dd:
bb:94:33:c0:9c:39:cc:4a:38:b9:bb:34:e3:52:16:ed:e3:b9:
9d:98:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:58 2025 by rpki-client