Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa
File: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (raw, json)
Hash identifier: gijCUxucdKPAfR8IZPnyVJTjCBFpS+iFvueSFcvPeQ4=
Subject key identifier: 0F:48:F6:89:7D:5F:62:93:0B:BD:6B:02:BF:84:E2:61:9E:15:7D:D5
Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial: 11BC9323BC131CE741B7234660419E83C6DF96B6
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa
Signing time: Tue 31 Dec 2024 07:02:16 +0000
ROA not before: Tue 31 Dec 2024 06:57:16 +0000
ROA not after: Tue 30 Dec 2025 07:02:16 +0000
asID: 142311
IP address blocks: 103.168.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bc:93:23:bc:13:1c:e7:41:b7:23:46:60:41:9e:83:c6:df:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
Validity
Not Before: Dec 31 06:57:16 2024 GMT
Not After : Dec 30 07:02:16 2025 GMT
Subject: CN=0F48F6897D5F62930BBD6B02BF84E2619E157DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:a9:ee:be:9d:b3:48:c7:9e:ce:7b:a1:1a:
df:7d:c0:26:f3:5e:86:a2:86:fd:45:2e:bf:2f:85:
67:1c:07:72:08:82:84:85:cc:4f:f1:6e:03:f6:3a:
0c:a8:87:bd:68:4e:f6:d3:7f:8e:43:bd:d0:72:9f:
35:a7:ff:e5:88:e8:12:57:44:57:bd:a3:09:53:3c:
96:39:8c:b9:a8:32:c5:5f:bd:5b:d3:72:96:55:d7:
fe:38:58:24:f2:8e:8f:15:6f:23:89:09:01:ad:eb:
87:0a:1f:6d:d8:3b:0d:c6:a0:dc:e9:12:34:fd:8f:
2d:a4:ee:1e:75:50:40:92:b9:26:e6:8d:54:aa:b9:
28:69:00:8a:f1:b2:bf:e9:cf:77:99:d1:14:e3:43:
c0:53:ca:fc:f0:e4:53:61:8d:4c:4e:be:9c:6b:4d:
d6:07:ed:bd:b7:33:26:09:47:99:58:bb:3d:21:80:
f0:26:b7:03:27:91:59:fb:58:11:26:6c:12:76:02:
cd:47:a2:3a:98:a8:8a:22:5a:48:a6:59:93:d6:53:
fd:a9:b3:bb:01:2b:24:2c:64:1e:1e:0c:be:f2:43:
79:93:54:c4:67:75:24:e8:94:17:42:56:0b:bd:93:
32:b8:92:bb:12:5c:48:eb:6f:0c:85:04:f7:c9:42:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:F6:89:7D:5F:62:93:0B:BD:6B:02:BF:84:E2:61:9E:15:7D:D5
X509v3 Authority Key Identifier:
keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:b6:9d:d7:78:66:9c:9f:12:e8:07:0f:5f:8b:4f:f1:21:
3d:4c:32:72:4b:72:dc:af:42:75:52:23:04:bc:54:96:a5:2f:
2e:2c:7d:73:be:9f:29:ce:02:f2:b5:02:27:da:d4:17:82:b3:
fb:af:2a:67:d5:b0:7b:ac:a2:49:30:fd:0c:b1:e5:d7:82:1c:
45:59:a5:1b:26:60:c4:48:8d:17:bd:1a:6e:48:29:5e:bd:c7:
a4:b2:2f:13:65:f4:59:e7:4a:f1:25:55:38:4d:b8:9f:f1:0e:
f8:03:1a:4b:74:cc:66:29:ae:52:a4:0f:81:63:d0:3a:d2:85:
2d:7b:76:c9:58:29:95:79:c3:d0:33:e2:02:21:d3:92:13:2a:
97:11:6d:2e:ba:d2:55:9c:16:e6:2e:fd:82:3e:9f:ea:e9:c6:
17:d1:f4:5d:0a:53:ab:7c:84:40:1d:b7:7c:11:9b:db:ee:2c:
f7:80:da:b7:4e:f4:04:8e:9d:43:8e:6b:97:a3:e8:4c:e0:88:
54:2b:fd:5f:a5:cb:ed:34:02:19:9a:7f:82:20:b1:d6:47:95:
91:0b:b3:31:2b:69:29:85:9a:f0:71:ff:06:80:79:c4:a5:e1:
6e:69:ab:ab:fc:1e:ff:df:42:3f:94:cd:75:47:d0:a1:d5:3f:
61:e8:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:40 2025 by rpki-client