Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa
File: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (raw, json)
Hash identifier: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=
Subject key identifier: 57:C5:EE:56:A3:E9:87:7E:CD:0C:4D:36:66:7E:17:67:19:62:67:6F
Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Certificate serial: 05173A7A13274AA01C432366A0511D906506128B
Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa
Signing time: Mon 20 Jan 2025 09:00:07 +0000
ROA not before: Mon 20 Jan 2025 08:55:07 +0000
ROA not after: Mon 19 Jan 2026 09:00:07 +0000
asID: 150513
IP address blocks: 103.195.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:17:3a:7a:13:27:4a:a0:1c:43:23:66:a0:51:1d:90:65:06:12:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Validity
Not Before: Jan 20 08:55:07 2025 GMT
Not After : Jan 19 09:00:07 2026 GMT
Subject: CN=57C5EE56A3E9877ECD0C4D36667E17671962676F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:b1:bc:b0:12:f9:2c:e4:66:26:69:36:6b:
fc:b2:21:bd:e6:f6:bd:8a:68:c4:3e:63:31:57:dc:
98:80:7a:1d:42:b1:f5:7d:76:d2:d4:d0:1f:a2:15:
27:3b:ba:fb:22:90:e7:e4:cd:54:7a:66:e7:38:8f:
08:d3:a6:75:15:45:56:40:58:a8:7c:fc:fc:fd:64:
61:6a:0d:86:e0:af:53:c8:9f:ec:f4:f0:df:00:b5:
a4:01:85:03:d5:dd:9e:cf:b2:d6:21:e0:a9:05:34:
8c:f7:70:42:b4:8c:de:89:9d:f1:cb:b2:f3:44:a9:
1c:a1:0a:7a:ee:fb:ac:80:03:2f:dd:af:a4:75:02:
a9:aa:08:17:90:68:b1:bb:f7:6f:03:33:c6:0c:dc:
b3:37:b1:d5:fd:b2:f7:31:7f:d6:66:18:b2:6e:8f:
b3:9f:7f:48:27:5a:44:a7:e4:e9:1a:e1:d0:1e:17:
c1:af:42:c8:45:a2:52:2f:68:f3:47:76:20:dd:93:
11:dd:9d:4f:18:d7:ff:ad:96:c3:4a:4d:97:1d:a4:
40:4a:33:d3:1b:d3:36:f5:81:86:88:ec:8d:8d:01:
42:14:64:d7:86:c3:8a:4a:26:50:fb:bf:1c:ec:39:
0a:ae:ad:fc:27:73:1a:ea:41:74:53:98:fc:4c:4e:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:EE:56:A3:E9:87:7E:CD:0C:4D:36:66:7E:17:67:19:62:67:6F
X509v3 Authority Key Identifier:
keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.195.28.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a0:07:a9:0f:bd:be:f6:0e:e5:62:67:7c:b2:f4:b2:e8:38:
5b:37:6c:dd:70:2a:31:0c:5e:52:51:0f:24:a5:07:3d:e5:8f:
04:8e:57:54:69:cc:b9:d7:fb:29:55:c2:08:3e:15:c0:d0:07:
23:00:b1:bf:0a:3e:5d:b5:e9:14:19:92:d6:24:64:bb:39:00:
6c:aa:a1:3d:cc:db:0c:e5:c7:32:63:56:80:90:42:8a:51:17:
03:d0:5f:21:45:fc:30:e4:a6:a7:d4:54:9b:84:b3:88:fd:00:
c3:a1:f7:0f:af:7f:aa:e8:a6:14:f3:c7:c0:ef:11:c8:d1:fa:
f9:56:84:f6:7b:67:0b:05:1e:c2:af:97:06:a0:9d:91:82:da:
4d:1f:c0:6a:b4:2d:0e:09:28:33:40:ea:dd:d3:e5:70:f2:d1:
74:2c:a0:85:aa:bc:09:c1:67:55:6b:39:38:4a:ed:2e:bf:29:
5a:e5:3d:30:b5:2b:a7:f1:36:98:8c:df:4b:c9:4a:7d:a0:8c:
27:6e:46:7a:ff:e9:45:ab:e6:6e:53:7a:d8:79:e8:6a:da:cc:
52:cc:de:98:d6:98:19:2d:06:4c:e5:97:f3:83:dc:8d:ce:80:
11:4a:7b:98:d6:d4:ca:31:d9:32:c8:4d:50:8f:af:21:88:38:
f6:da:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:21 2025 by rpki-client