Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
File: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (raw, json)
Hash identifier: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=
Subject key identifier: 36:10:A8:87:86:29:70:A9:D6:96:D8:2E:8E:4C:EB:AD:A9:4A:1A:48
Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial: 45F384EABE4315816FBBF9DF1298A4F502BE8F03
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
Signing time: Tue 29 Oct 2024 09:00:02 +0000
ROA not before: Tue 29 Oct 2024 08:55:02 +0000
ROA not after: Tue 28 Oct 2025 09:00:02 +0000
asID: 142352
IP address blocks: 103.1.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f3:84:ea:be:43:15:81:6f:bb:f9:df:12:98:a4:f5:02:be:8f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Validity
Not Before: Oct 29 08:55:02 2024 GMT
Not After : Oct 28 09:00:02 2025 GMT
Subject: CN=3610A887862970A9D696D82E8E4CEBADA94A1A48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:0c:84:85:58:70:4e:6e:3d:9c:4b:f4:18:
f8:05:2f:67:f4:8f:90:ad:9f:4c:39:1a:8d:f7:09:
50:1d:d0:2e:84:93:79:a9:79:d3:4d:37:31:80:6e:
5a:40:98:e5:21:93:bf:b9:02:af:f7:89:68:07:f7:
b7:68:7b:e5:ec:f6:2d:8e:cd:ac:1b:1f:de:5a:37:
58:93:e0:65:b1:6d:60:21:b7:f4:6f:15:85:5d:8f:
ab:1d:bb:b2:a0:1d:77:fb:f9:41:4a:7e:6e:15:1d:
7b:4c:27:86:a7:c7:3b:61:10:61:99:08:5e:d1:8d:
03:ae:b0:61:b1:3e:a2:82:40:24:6e:43:99:be:c7:
e1:9e:6f:33:8e:7c:f1:bd:26:24:39:7a:52:87:23:
35:7f:ff:d7:bd:56:bd:58:98:22:d6:f6:e1:83:b2:
5f:1a:b2:7d:3e:db:03:97:0f:db:50:86:32:9e:33:
7a:9f:c9:38:e7:cc:69:d0:28:ee:5c:00:db:1e:99:
3c:fb:b8:4a:82:aa:62:50:0f:2e:a8:ca:3c:16:bd:
9b:ac:c7:75:dd:5f:84:45:82:33:7b:ea:4a:6c:38:
63:66:fe:b4:77:8c:75:f5:a9:18:78:47:1a:a9:8c:
97:98:52:11:0e:d2:a2:c5:92:d1:df:76:c5:5f:29:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:A8:87:86:29:70:A9:D6:96:D8:2E:8E:4C:EB:AD:A9:4A:1A:48
X509v3 Authority Key Identifier:
keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.1.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:3a:46:5d:63:47:82:2f:b3:ac:b2:4a:d4:ed:d1:8b:b5:22:
e3:1c:f2:08:cd:67:1d:d2:43:72:34:7c:40:57:82:42:2f:37:
44:d0:92:97:d6:35:e7:07:9b:95:66:6e:bf:2f:43:e9:71:ab:
b0:4a:a9:2c:06:6e:43:1c:79:72:61:43:a1:f9:1d:32:0f:3a:
c3:21:03:79:27:06:92:13:20:cd:27:23:23:56:ac:e6:81:87:
c6:8b:82:07:01:c8:c5:8a:78:d6:db:ef:c3:ef:b4:ee:35:1c:
50:41:cc:90:f3:f3:09:36:07:de:a2:5f:c7:79:aa:19:b6:9f:
12:3a:67:5c:fa:1f:dc:0a:1c:38:66:2f:71:9c:1f:b0:06:e9:
38:bc:27:f4:10:11:58:8c:41:35:af:00:3d:a3:62:66:38:a7:
3c:e0:ab:ee:fb:4b:de:4c:29:92:a0:0e:dc:0d:f1:54:52:16:
36:a1:00:dd:85:7d:ce:cb:52:17:53:e4:85:2e:ea:6b:05:f6:
14:27:b7:0c:92:02:cf:83:82:d7:ae:88:66:ed:42:f1:ab:02:
e0:ee:cf:e8:fe:b3:2e:d2:d2:60:67:be:24:96:cd:ad:ba:ae:
9b:50:04:14:dc:5c:b7:bc:b3:35:13:ba:cd:dd:6a:1a:1d:6c:
25:e5:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:54 2025 by rpki-client