Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
File: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (raw, json)
Hash identifier: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=
Subject key identifier: 58:93:11:15:13:A5:FF:2D:F2:8F:6D:F0:8B:F3:79:35:6A:69:12:72
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 039F01ECBA6F3AAA8943328DD30B2C38B4FAF3AD
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
Signing time: Wed 16 Oct 2024 11:00:00 +0000
ROA not before: Wed 16 Oct 2024 10:55:00 +0000
ROA not after: Wed 15 Oct 2025 11:00:00 +0000
asID: 139433
IP address blocks: 103.144.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9f:01:ec:ba:6f:3a:aa:89:43:32:8d:d3:0b:2c:38:b4:fa:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Oct 16 10:55:00 2024 GMT
Not After : Oct 15 11:00:00 2025 GMT
Subject: CN=5893111513A5FF2DF28F6DF08BF379356A691272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fa:6f:01:65:4a:b6:fa:e1:e1:3d:d6:dc:5a:
1d:b3:c7:f7:de:97:e9:b3:5d:ba:6c:77:8a:ee:20:
5c:be:b5:25:30:e6:bc:19:61:cc:70:af:d6:4e:d1:
b8:cf:13:0f:ac:24:ed:f4:08:85:6e:58:a4:a0:86:
e5:45:bd:d6:58:2e:cd:8f:12:1e:13:df:c1:d6:c5:
ce:05:f7:ba:4b:f5:74:25:22:30:0d:1e:34:c6:32:
3e:9a:df:aa:bc:b2:3b:4d:b4:db:6d:c1:ba:14:7b:
5a:40:e5:b9:03:66:c1:6b:cb:da:f7:3d:cb:76:04:
93:7d:fe:90:65:d9:8a:5a:c1:e4:f9:da:46:64:8c:
0e:83:81:86:84:ee:a8:87:90:ab:13:28:10:5c:1f:
8e:0e:cf:b6:ab:4a:ff:e5:2e:34:44:b3:a3:a4:65:
27:53:61:64:59:2c:01:3c:f0:ff:e2:5b:a6:93:07:
48:7e:d0:a1:bb:b4:a1:27:8a:5a:26:c0:36:f6:82:
a1:62:6b:36:64:34:cc:be:aa:47:74:e4:4a:a1:a8:
0c:25:fa:40:1e:ad:3a:71:ca:a6:82:e3:f2:b1:8a:
bf:5d:1c:86:f7:52:17:31:26:64:49:87:41:17:28:
2e:89:83:17:5c:33:7a:6e:d7:1b:c8:b5:32:f9:b8:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:11:15:13:A5:FF:2D:F2:8F:6D:F0:8B:F3:79:35:6A:69:12:72
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.128.0/23
Signature Algorithm: sha256WithRSAEncryption
07:88:93:70:43:b3:97:71:a4:3d:80:b3:75:0e:5e:d4:e6:63:
36:ab:73:82:a5:f9:01:d3:ad:99:12:f7:ac:71:95:8d:d1:9d:
7f:e8:93:d2:bd:6b:cb:c8:39:fb:b8:e9:5c:ae:2d:ea:9f:2a:
3a:fa:7e:2e:f0:ff:24:dc:7c:3b:97:4e:d1:0b:29:04:eb:bf:
64:b9:16:fa:3f:63:a3:bb:31:5e:12:90:9d:41:0b:7d:eb:0e:
4a:d5:66:f1:64:ec:fc:7c:04:40:91:65:12:ee:69:9f:e2:d8:
23:e8:4d:29:3e:7a:3f:d3:e5:02:ae:60:aa:9c:42:2d:d4:24:
be:89:56:ae:1f:32:70:ad:53:a1:27:24:be:2f:e2:8c:97:d7:
f7:5f:f4:3b:03:ce:5f:3b:42:c0:ba:73:60:77:27:f7:62:be:
6a:73:fa:ac:e0:8e:b0:30:1b:f0:9f:98:58:79:9f:03:5f:59:
5f:8e:2e:20:1c:ca:73:61:92:9d:29:28:ee:fb:1b:fd:3c:a1:
71:82:22:6f:b4:a3:34:86:32:35:68:5f:44:86:1f:a2:db:d9:
98:65:47:e9:69:90:e5:67:ef:0c:e4:26:7e:69:09:6a:67:33:
c7:78:33:fb:6c:06:7c:f9:29:dc:53:80:ca:05:5b:0d:bb:93:
10:48:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:20 2025 by rpki-client