Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
File: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier: 7Ve4/gwOAFGa+Z0beMky73pWklzGR6y82uhIQHzqb/w=
Subject key identifier: 8D:07:DD:51:02:2A:C4:3A:2D:07:E0:F5:80:7D:94:E0:E8:A4:2F:30
Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial: 131FBF07FD94DE93E4FB7AAA00CA8A683802C11A
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
Signing time: Sat 16 Mar 2024 07:00:01 +0000
ROA not before: Sat 16 Mar 2024 06:55:01 +0000
ROA not after: Sat 15 Mar 2025 07:00:01 +0000
asID: 150245
IP address blocks: 103.23.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1f:bf:07:fd:94:de:93:e4:fb:7a:aa:00:ca:8a:68:38:02:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Validity
Not Before: Mar 16 06:55:01 2024 GMT
Not After : Mar 15 07:00:01 2025 GMT
Subject: CN=8D07DD51022AC43A2D07E0F5807D94E0E8A42F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:58:77:67:5b:93:34:57:d9:4d:5e:ec:cd:
da:1e:47:ed:31:a2:12:09:3f:e8:9a:36:17:3a:96:
dd:11:26:1f:cf:d4:3c:85:46:11:d6:0b:80:a6:b0:
6f:c1:12:37:74:23:b3:58:d3:a0:45:b0:b5:12:a4:
ad:03:d5:86:f9:f8:09:74:54:09:d7:bc:54:22:72:
b8:30:27:d0:6b:fb:41:34:48:f5:c2:ae:a6:ad:35:
f0:f1:1a:ed:d9:62:ec:e6:8e:f3:20:07:2c:96:b6:
e4:ff:60:2e:5e:ae:68:6e:2d:fd:0c:eb:1f:37:1a:
df:ce:40:95:7a:29:64:c6:a1:d2:fb:f0:ac:bc:42:
91:ac:b6:06:2e:15:53:4c:6b:08:bc:f6:b5:bb:df:
4b:7a:1e:dc:fe:1d:fd:c5:ed:bc:cc:5b:c7:4d:40:
09:18:37:f9:0b:9d:4b:e9:be:43:d1:ab:bf:18:d0:
bf:bd:bf:be:c1:9e:42:01:43:8a:2b:2f:a2:15:8b:
0c:1d:68:66:e7:5c:2f:2c:79:ed:09:21:c6:fe:b5:
cb:e1:4d:6e:da:30:b0:4c:e9:f5:09:4b:ca:f4:23:
40:1d:1e:24:e9:a6:4d:8b:ff:81:34:e7:bc:9b:b0:
c4:45:71:fe:22:ce:9b:57:bf:a2:d1:81:c7:ee:84:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:DD:51:02:2A:C4:3A:2D:07:E0:F5:80:7D:94:E0:E8:A4:2F:30
X509v3 Authority Key Identifier:
keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
48:28:42:f5:78:c1:f0:7f:d2:19:7c:59:e9:68:0c:1f:36:ae:
62:d6:a9:ec:5b:90:fe:3a:40:5b:64:d1:52:42:ac:cb:19:3f:
00:97:50:cc:a8:02:b1:33:c6:d8:55:6a:be:7e:2d:38:32:89:
12:06:56:33:99:3e:49:5e:0f:28:5c:b3:db:3d:dd:b0:ad:a0:
3d:6e:43:cf:08:13:b0:eb:39:fe:4c:3d:68:e4:4b:37:c4:1e:
d7:c7:95:8e:02:c5:66:8c:14:51:a5:9d:48:b0:d8:40:3d:04:
9e:63:f1:d8:04:f2:91:a8:d5:ed:7b:16:01:8d:4d:31:f3:53:
4e:f5:ec:e9:dd:26:19:3b:b1:82:30:03:39:97:ab:b8:65:5a:
0f:82:1e:5f:5a:f2:f9:62:13:e9:a0:8d:32:0b:34:a3:1c:fb:
94:57:a5:50:aa:f9:74:07:e2:c1:21:9d:0c:41:24:e3:37:e9:
bb:6e:4a:cc:48:45:fc:63:fe:ea:cc:03:58:e9:93:10:63:fd:
48:f2:da:90:9b:e8:0c:ac:08:2d:4e:2f:07:65:6d:e4:62:c3:
55:bf:67:05:f1:32:66:cc:32:34:a9:76:9a:af:db:48:8b:89:
fd:c8:0e:c7:a8:af:f9:54:ff:19:17:03:f4:a1:5e:6f:07:5a:
38:00:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:50 2025 by rpki-client