Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa
File: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (raw, json)
Hash identifier: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=
Subject key identifier: 7E:36:04:43:1E:79:C3:A2:A6:30:6D:39:94:BB:27:3A:5D:65:BB:56
Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
Certificate serial: 353F05E9EFCF96E49C179496403738836F979E57
Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa
Signing time: Wed 25 Sep 2024 04:00:00 +0000
ROA not before: Wed 25 Sep 2024 03:55:00 +0000
ROA not after: Wed 24 Sep 2025 04:00:00 +0000
asID: 140444
IP address blocks: 103.153.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3f:05:e9:ef:cf:96:e4:9c:17:94:96:40:37:38:83:6f:97:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
Validity
Not Before: Sep 25 03:55:00 2024 GMT
Not After : Sep 24 04:00:00 2025 GMT
Subject: CN=7E3604431E79C3A2A6306D3994BB273A5D65BB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:ec:b9:70:58:75:eb:68:af:00:76:fe:41:
e1:20:8a:c9:64:15:63:89:2c:ec:43:8b:81:0b:b8:
58:10:6c:dd:90:4f:2a:0c:39:ba:8c:85:7f:05:d5:
36:83:3c:3a:14:43:77:c9:64:25:3c:f0:72:09:cc:
cb:b3:4a:b0:45:a5:a7:37:5a:ff:e7:95:cc:fc:ff:
9c:da:ef:6c:60:78:17:1a:1a:af:ed:ce:94:15:2d:
fe:d1:b6:0b:ea:49:e9:73:63:b6:9e:e8:62:f7:87:
6b:26:00:d7:03:d5:2a:0f:b9:a5:fd:a4:39:20:ae:
b3:c2:00:47:fa:dd:52:7b:b0:87:f0:04:ad:47:36:
3b:51:b7:68:a0:7d:cc:cd:9e:7e:28:78:99:de:ad:
50:a4:2a:fb:60:7d:e4:21:ea:92:fd:eb:4b:3d:a9:
e2:31:fe:69:7f:85:56:d2:a3:2f:b1:9e:b5:03:52:
47:6d:79:98:a4:a6:b1:57:ff:19:a4:b0:c1:14:d6:
dd:58:ee:0b:77:ee:24:7c:f3:3a:d4:11:76:eb:87:
72:2b:10:47:c7:bc:d8:bb:13:f1:b4:71:83:58:ef:
b2:ec:40:d9:75:70:62:db:02:86:06:4c:ed:36:53:
23:7d:73:3c:ed:50:0c:48:bb:94:a6:9d:b1:0e:07:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:04:43:1E:79:C3:A2:A6:30:6D:39:94:BB:27:3A:5D:65:BB:56
X509v3 Authority Key Identifier:
keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.43.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fd:7b:d2:4a:39:09:b3:87:8f:bd:5f:cd:b7:dd:1d:98:ea:
e1:7c:61:30:03:b7:ec:7f:02:e8:12:f5:c5:e7:aa:59:6d:c4:
4c:70:33:ea:d8:0c:ad:49:4f:b6:b4:0b:f5:50:33:8f:d0:e7:
f9:dc:85:69:ae:13:a7:e6:35:bb:2c:d1:53:4b:95:92:c6:a4:
ed:95:c1:6f:8a:50:ad:e4:13:23:5e:1c:aa:9b:ce:65:81:ce:
ab:52:48:cc:1e:c7:ed:b5:57:f4:c6:0f:d6:64:c7:a5:08:70:
3e:76:0f:fd:d6:8c:67:d7:dd:2c:19:99:83:02:26:73:04:e2:
14:76:9f:ac:fa:ce:18:4c:82:64:9a:d9:9b:aa:53:b8:5f:c2:
01:1e:e3:9b:8e:43:2b:8d:5c:d1:bd:e3:31:42:63:43:39:2a:
45:6a:9a:0c:4c:0a:4e:9d:87:28:ee:3e:a4:d0:50:ce:76:ea:
17:6e:28:10:e8:3b:dc:bf:56:20:5e:3f:6f:e1:3e:64:c5:ff:
22:4d:d3:75:3a:dc:f5:2a:24:ef:fa:cc:cb:9a:e4:85:12:aa:
77:22:56:b4:d7:33:5b:52:14:79:7c:6c:a2:f4:d0:79:95:12:
b7:16:ff:b3:79:5c:3c:1c:7d:88:07:38:95:c7:5f:e1:63:26:
75:58:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:03 2025 by rpki-client