Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa
File: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (raw, json)
Hash identifier: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=
Subject key identifier: 6B:58:BD:57:91:C8:11:F4:6D:FC:58:84:3B:1E:81:5D:A9:4B:B1:D0
Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Certificate serial: 55EC1252B538A9B17B4514EDFD941C30A6A48FDA
Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa
Signing time: Fri 13 Sep 2024 01:41:25 +0000
ROA not before: Fri 13 Sep 2024 01:36:25 +0000
ROA not after: Fri 12 Sep 2025 01:41:25 +0000
asID: 149907
IP address blocks: 103.190.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ec:12:52:b5:38:a9:b1:7b:45:14:ed:fd:94:1c:30:a6:a4:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Validity
Not Before: Sep 13 01:36:25 2024 GMT
Not After : Sep 12 01:41:25 2025 GMT
Subject: CN=6B58BD5791C811F46DFC58843B1E815DA94BB1D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:29:6f:dd:3c:77:58:62:d0:ab:f8:e4:e1:
d4:2a:5f:dc:83:18:a1:76:ad:83:aa:e9:7d:f0:cf:
2a:c0:27:b6:8d:f1:20:68:db:1a:9c:c0:9d:73:1a:
69:a1:8b:94:c4:5e:8f:f7:ec:45:b0:de:75:4c:3e:
3c:ee:e0:b5:05:eb:eb:60:af:a7:23:d0:00:14:f7:
a3:5d:07:4f:6a:22:71:c2:78:1d:60:72:ca:fb:fe:
a4:b5:76:5e:52:01:3c:48:81:ef:0c:86:a4:37:98:
4b:14:71:4d:d6:73:90:e6:33:5e:8d:6c:ab:f5:a2:
9b:cd:e2:3d:47:ba:95:f3:93:53:21:63:c2:97:e9:
91:7d:a6:89:57:ba:0a:a0:6a:d7:70:9c:17:98:4b:
a4:4e:fa:41:e4:7b:94:e6:4d:fb:4c:b3:8c:65:d1:
c8:5f:76:24:06:e3:77:20:2d:f6:f4:0b:80:83:3b:
f9:9a:d4:b1:a6:70:d4:d5:f1:06:14:ad:fc:a7:75:
f3:76:76:a4:f2:f0:70:15:46:ae:ff:59:da:e0:81:
bc:63:78:9c:ca:d6:3e:d6:72:7d:b6:d2:9b:6b:e2:
23:ca:b5:0b:15:33:68:9b:26:58:56:20:57:fa:fb:
2d:2c:86:7b:f2:6e:e6:5a:09:68:cf:34:c0:5b:24:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:BD:57:91:C8:11:F4:6D:FC:58:84:3B:1E:81:5D:A9:4B:B1:D0
X509v3 Authority Key Identifier:
keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.112.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7f:df:0d:98:d2:14:07:a9:af:34:92:b7:3b:73:9e:89:90:
d6:8d:ea:32:28:19:2c:5f:60:26:24:03:60:10:fd:c2:58:83:
86:c6:8b:3f:a5:8a:5f:fa:e6:0e:4e:12:3a:4e:ef:53:5b:b6:
7f:33:1c:bf:fd:fd:47:f7:0b:0a:db:0c:13:e7:78:3a:53:12:
be:80:40:67:41:dd:df:48:dc:ae:e2:af:f2:43:45:61:dd:ed:
a1:6d:0a:82:72:d0:8f:3e:3a:b5:2e:f0:d3:66:b0:94:10:82:
d3:fb:12:7c:8b:db:07:10:ab:90:b5:d2:5b:77:5a:30:aa:a4:
57:a6:09:59:64:92:9d:ee:48:44:e0:eb:7d:2e:9c:c7:94:f5:
03:01:f5:2f:34:80:32:17:a7:9a:3d:70:04:89:65:2b:24:b8:
2e:b5:bf:47:f0:99:14:1d:d9:59:f9:e7:e5:4f:d2:ce:ab:0e:
42:48:64:16:66:ff:39:ba:a8:67:51:68:24:0e:1d:e5:bc:f6:
31:f1:98:f5:32:8b:3b:5b:16:f6:92:2f:c9:19:00:d7:6f:0d:
60:e2:8a:4b:09:4e:e8:e1:86:ea:c3:ab:42:3b:7a:88:b5:ae:
7b:ab:74:fe:4c:dd:b3:1a:43:2d:c4:f2:4c:8c:61:db:b4:97:
50:3b:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:13 2025 by rpki-client