Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa
File: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (raw, json)
Hash identifier: LuBQKTkimT7+EDQZ+tqIKNHyr1wOetZ2aOUyG/CeiE4=
Subject key identifier: 5E:B1:EE:2E:2D:5F:0F:8D:4D:B3:C9:1E:41:E5:43:90:FF:45:9C:95
Certificate issuer: /CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1
Certificate serial: 0A7544AECE1E195C720128DAFE4773459D5DE6DD
Authority key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa
Signing time: Tue 31 Dec 2024 07:00:01 +0000
ROA not before: Tue 31 Dec 2024 06:55:01 +0000
ROA not after: Tue 30 Dec 2025 07:00:01 +0000
asID: 136889
IP address blocks: 103.104.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:75:44:ae:ce:1e:19:5c:72:01:28:da:fe:47:73:45:9d:5d:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1
Validity
Not Before: Dec 31 06:55:01 2024 GMT
Not After : Dec 30 07:00:01 2025 GMT
Subject: CN=5EB1EE2E2D5F0F8D4DB3C91E41E54390FF459C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:7e:b2:ee:f6:d6:3c:23:7d:f3:df:38:55:
aa:11:6a:ef:b1:61:6f:3d:84:58:bc:0c:1e:32:d8:
7b:df:ef:85:ab:3a:65:08:e0:df:bf:ce:a0:8e:03:
4a:41:1d:fd:af:01:3d:22:1b:e2:a9:b1:cb:53:c0:
a0:d0:99:11:90:49:74:56:5a:68:ca:82:79:f7:aa:
98:b8:d2:79:82:3c:ae:85:1d:75:3a:e2:88:22:3a:
8c:f6:20:eb:48:ba:e4:8c:40:a8:36:aa:72:ee:00:
4b:ee:64:fe:b2:37:ec:3e:a1:bf:9e:40:27:9b:7c:
20:1a:dc:c2:1b:31:8f:e4:37:db:c8:20:e5:11:2c:
96:7c:fc:ce:55:c3:c9:0c:25:ea:a8:0e:f7:64:58:
f7:79:d9:f2:28:f5:da:e6:57:8f:7d:00:15:87:a7:
b5:8e:de:32:9f:55:a5:2b:c5:9d:71:cb:51:5c:42:
32:45:13:86:2e:1f:d2:1e:e0:06:c8:94:8e:f7:9d:
bb:2c:c2:b7:be:fb:de:4f:0d:8e:ab:c6:14:df:a3:
8d:62:98:91:67:03:c3:2a:6b:18:e5:25:83:cf:8c:
f0:2a:c9:9b:b9:85:dd:98:32:89:c9:5e:9d:3e:45:
f4:6b:44:b4:e7:9d:78:7a:f3:16:18:fe:71:ea:94:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:EE:2E:2D:5F:0F:8D:4D:B3:C9:1E:41:E5:43:90:FF:45:9C:95
X509v3 Authority Key Identifier:
keyid:A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5b:4c:e4:62:4e:c4:a7:61:96:93:c2:53:d0:00:85:1d:f0:
a9:94:6d:b4:a2:1b:bd:0a:fa:71:2f:f3:b8:9d:02:92:f7:d9:
4e:5e:05:41:68:47:cb:0c:c7:a8:f1:33:ed:87:d6:83:37:c7:
d1:ba:1b:2a:67:e8:66:37:01:2c:54:11:95:dd:5f:00:86:fe:
49:af:d9:e5:f4:08:43:11:97:75:80:00:aa:c7:da:81:3e:37:
6c:07:c8:67:0e:d8:9a:3f:38:f1:cf:4d:7b:b0:c9:1e:43:1e:
68:b0:10:0a:c8:c5:2a:55:46:97:7e:5c:fe:a4:0c:84:94:82:
40:df:a7:47:55:2f:f2:3d:7d:2b:c7:59:ee:d3:da:32:f0:26:
d1:2b:26:a4:52:99:7a:b4:11:64:98:d2:58:9f:cc:00:7d:1f:
37:af:a0:07:9a:43:d1:9b:dd:50:41:91:33:07:2e:28:8e:9c:
82:c1:17:f5:e7:82:7d:ca:6f:d0:73:56:37:a7:7b:70:7a:66:
1e:d0:5c:5c:49:61:d1:bb:ba:11:12:39:1c:42:c1:9c:4a:e6:
12:09:b5:e5:85:97:e8:50:a2:29:b0:35:bd:34:64:eb:8a:5c:
bb:46:c2:64:66:52:02:37:8d:90:73:96:c8:93:e5:af:b3:4e:
28:80:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:13 2025 by rpki-client