Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: i87TyACWQ7ZhbVvoIz5FiY6rt+QM7cK6vcvZ8nf5D/w=
Subject key identifier: 6D:AE:8B:6E:92:9E:ED:04:90:B9:4F:F2:EB:A0:43:2E:BE:2B:50:72
Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Certificate serial: 78164DD90B6A2042E8DCB4ED25B91BACEEE2482A
Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
Signing time: Tue 02 Apr 2024 05:02:50 +0000
ROA not before: Tue 02 Apr 2024 04:57:50 +0000
ROA not after: Tue 01 Apr 2025 05:02:50 +0000
asID: 38496
IP address blocks: 103.91.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:16:4d:d9:0b:6a:20:42:e8:dc:b4:ed:25:b9:1b:ac:ee:e2:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Validity
Not Before: Apr 2 04:57:50 2024 GMT
Not After : Apr 1 05:02:50 2025 GMT
Subject: CN=6DAE8B6E929EED0490B94FF2EBA0432EBE2B5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:19:72:69:b0:01:f2:21:8e:1f:a5:19:9c:
3b:e1:f6:62:29:b5:c1:b0:d0:dd:0e:47:93:5f:7e:
69:0d:d2:d5:d9:09:ae:9a:74:95:e0:f7:4f:87:be:
da:30:83:f9:1b:c5:ef:3e:32:a6:8c:04:ed:7e:2b:
f3:93:58:0d:f0:cd:96:e5:11:af:f8:f3:94:26:97:
80:17:3c:86:5e:88:75:4e:d3:89:5b:46:b4:27:ce:
12:54:fe:98:87:4f:b8:be:9d:1a:44:9f:f4:d6:a8:
11:93:a8:48:01:f5:b3:c6:94:96:32:67:aa:cd:74:
17:b2:24:56:e5:92:41:a0:81:d3:4e:87:37:30:2f:
09:40:cd:d7:a4:8d:83:57:fe:1d:f4:85:39:7d:3c:
b3:dc:b1:21:ba:86:4b:7d:12:39:31:eb:88:4f:c8:
21:f6:a3:7d:c2:7a:41:db:39:1c:42:44:e7:44:f3:
d7:e6:9d:f0:7f:25:47:8d:b8:26:27:1d:4f:69:40:
94:8c:3b:36:52:0b:47:0a:2a:a8:58:42:2c:03:f8:
4e:3e:6f:e6:f2:e1:9d:83:d7:73:51:6f:0b:1e:73:
b9:1b:85:e6:fb:2c:66:72:72:61:a8:97:1e:ae:b5:
1f:fe:ec:df:eb:19:16:d7:5f:0f:a8:c6:de:1c:35:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:8B:6E:92:9E:ED:04:90:B9:4F:F2:EB:A0:43:2E:BE:2B:50:72
X509v3 Authority Key Identifier:
keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:78:c2:54:a3:b8:c9:dc:7d:5c:ab:50:9e:0e:7e:7c:28:a9:
60:c9:5f:3e:86:35:f7:9e:b3:fa:ff:54:0e:19:16:a4:9b:d6:
22:85:2a:20:86:20:22:e6:dd:75:f1:77:07:4d:b3:e3:8d:29:
cc:26:4b:f0:70:fb:d8:fe:42:c1:33:91:3e:26:9f:6a:c3:d1:
6f:e8:6d:17:c4:23:2f:5c:d1:69:4b:d0:39:d1:b9:99:3e:af:
f4:db:1d:ea:1e:ae:24:92:f1:be:57:35:29:1b:2d:95:52:4f:
44:ba:d0:cf:ee:98:2a:b3:36:bb:e1:14:c5:ee:ce:59:41:12:
6d:51:94:84:fe:89:e2:7c:94:04:58:18:88:d5:1b:55:76:cd:
d2:3b:79:f9:3b:d9:63:34:9c:e0:0d:73:b3:34:ca:8b:6e:da:
ce:89:c9:9b:e6:8c:4c:30:e4:d3:6e:26:b8:05:62:be:b0:9e:
de:64:06:0d:1e:4c:aa:c5:c7:88:68:cd:ad:ba:03:f5:dc:6b:
01:7b:67:bc:73:36:28:15:c6:ba:13:8d:02:f2:6a:9e:b9:37:
48:02:44:a4:aa:c2:43:5f:d2:8d:9d:ae:3e:4d:50:5f:63:de:
8f:d2:6b:6f:0b:f9:33:a8:4d:3a:f6:9c:bf:7a:00:71:f4:80:
9a:1d:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:26 2025 by rpki-client