Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa
File: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=
Subject key identifier: 59:11:C0:90:AE:40:15:6C:0D:8C:25:81:C0:05:65:13:5E:CF:DA:96
Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial: 52D7ACAF9943B77D0319937F3A57D5723E33FCC4
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa
Signing time: Thu 12 Sep 2024 08:00:02 +0000
ROA not before: Thu 12 Sep 2024 07:55:02 +0000
ROA not after: Thu 11 Sep 2025 08:00:02 +0000
asID: 149948
IP address blocks: 103.190.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d7:ac:af:99:43:b7:7d:03:19:93:7f:3a:57:d5:72:3e:33:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
Validity
Not Before: Sep 12 07:55:02 2024 GMT
Not After : Sep 11 08:00:02 2025 GMT
Subject: CN=5911C090AE40156C0D8C2581C00565135ECFDA96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:6d:52:30:b9:a8:8d:9b:c1:8f:72:de:66:
e3:6d:ee:6e:2e:74:02:fd:b2:b3:b5:a7:a6:01:2d:
bf:b1:e5:6f:bd:53:9b:5d:fd:7e:45:a2:0e:64:ae:
79:23:14:f8:b0:5b:eb:58:05:11:f9:24:ce:35:ab:
20:56:fe:3e:60:b0:1b:87:e7:43:c6:7f:88:72:8c:
c3:bc:7c:02:7a:37:2c:c2:43:0a:ef:e4:4c:c4:a3:
fd:3a:02:51:e1:09:dd:c2:83:56:02:42:56:21:38:
77:c9:16:7a:33:f1:bf:35:85:88:7c:bb:65:25:6a:
a1:1d:de:b3:42:86:cb:06:10:a2:fb:9a:a0:98:a4:
2e:70:a4:70:1e:eb:63:a8:42:be:99:07:2e:54:ac:
7a:26:55:df:b4:72:c0:ef:7c:2e:69:1e:ef:31:3a:
fb:e8:e3:72:34:69:eb:46:cf:44:cc:4e:1c:05:80:
4d:7a:a7:25:80:dc:6e:ab:83:9e:b2:24:86:e6:de:
21:ea:e4:a3:6d:8b:b3:9d:ce:0d:5c:38:f0:48:cc:
c4:97:9f:09:d8:9d:3d:c8:21:04:22:72:85:c5:93:
3f:47:f6:98:c9:7f:29:33:e4:82:a5:81:b0:af:6a:
47:96:38:57:79:44:8d:ae:57:87:25:99:33:65:bc:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:C0:90:AE:40:15:6C:0D:8C:25:81:C0:05:65:13:5E:CF:DA:96
X509v3 Authority Key Identifier:
keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:46:bc:29:25:87:4b:bb:cc:28:bd:09:55:df:60:2d:4b:d7:
a5:34:f7:7f:d1:c0:5d:39:ef:65:ec:53:ab:7d:03:5b:2d:80:
a1:58:1c:34:66:1f:ae:65:8f:5e:7a:81:8b:eb:22:0e:33:d6:
e1:e7:a6:ac:04:10:96:7a:79:14:f8:0d:cc:cc:69:bc:50:6d:
5a:66:4a:21:ca:39:93:a5:cb:4b:99:03:fd:b7:e3:b6:dc:3c:
eb:f4:57:23:10:b4:69:89:c5:e5:0d:47:7a:ff:de:60:10:d7:
06:57:d5:e0:b9:44:da:47:ac:40:95:cf:4e:f9:68:f8:2a:80:
70:10:25:5d:a5:d0:e7:b5:c3:0b:7c:65:65:06:7d:64:44:60:
2e:07:f4:12:14:e4:01:1e:a5:d0:01:d7:c7:58:25:73:36:e0:
98:26:ae:cb:d9:f0:1f:8d:89:12:ce:75:ba:c7:3c:dc:c7:91:
fd:36:56:14:9e:2b:01:f2:8c:42:4c:e7:54:ec:d8:15:6a:aa:
2b:0e:bc:d2:c1:96:ae:24:20:23:11:b0:38:cc:0d:01:25:ac:
fb:58:1f:95:c6:db:25:9d:df:cb:74:36:e3:ff:b1:29:a3:e2:
f6:35:36:24:5d:51:73:2f:76:0a:7b:16:5b:90:ee:19:ed:6d:
31:64:f6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:30 2025 by rpki-client