Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa
File: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier: kRIFZio38exK3BHLmfgjR+p7MGDva6afV6/G2wqCEYs=
Subject key identifier: 8F:52:2C:06:C5:D5:3D:55:16:AB:4B:4D:44:E1:81:DC:EF:68:DA:ED
Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial: 6888CCBE7D9B935ABD1E40DAB296D7CA18DD299A
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa
Signing time: Thu 06 Jun 2024 03:00:01 +0000
ROA not before: Thu 06 Jun 2024 02:55:01 +0000
ROA not after: Thu 05 Jun 2025 03:00:01 +0000
asID: 141675
IP address blocks: 103.158.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:88:cc:be:7d:9b:93:5a:bd:1e:40:da:b2:96:d7:ca:18:dd:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Validity
Not Before: Jun 6 02:55:01 2024 GMT
Not After : Jun 5 03:00:01 2025 GMT
Subject: CN=8F522C06C5D53D5516AB4B4D44E181DCEF68DAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:11:de:79:af:30:79:50:a9:db:db:dc:3f:
d9:72:07:33:99:23:93:14:b6:ef:ec:fe:36:66:49:
9b:b2:32:01:55:15:5d:11:e2:bc:0e:22:80:27:94:
05:b1:d9:dd:0d:d5:3f:81:6a:4b:05:67:ac:6d:85:
81:4a:89:a2:59:09:56:19:dc:c7:67:1b:bc:9c:e3:
35:d0:34:0a:ad:3b:99:09:6f:ef:a3:5d:b6:6f:09:
ed:8d:2b:93:e8:fd:5f:3e:98:25:77:01:2e:c0:68:
87:ba:71:72:80:2a:a0:f5:c8:6b:44:24:be:9b:06:
f8:39:4c:da:57:03:2f:c9:75:ba:53:d8:eb:e2:c1:
fe:e4:fb:ef:5b:c5:17:8a:94:5b:01:39:0b:8c:4c:
a5:1c:ff:25:55:1b:a5:f6:3f:81:d9:29:ae:8b:05:
e8:ef:87:0e:57:a6:b9:da:69:11:26:5c:ee:ca:38:
a1:c9:f1:34:e2:6a:2d:e1:07:87:81:b7:68:59:e7:
5d:9b:57:2b:23:d9:a0:57:31:5f:71:42:d3:bc:37:
4e:0e:4a:99:92:19:04:f0:db:e3:e8:d9:f9:4c:51:
7b:c1:95:44:dd:f9:d2:02:af:6d:4e:3b:17:47:0b:
82:4c:51:0d:1e:13:e2:1f:7e:0f:0d:a1:f8:61:04:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:2C:06:C5:D5:3D:55:16:AB:4B:4D:44:E1:81:DC:EF:68:DA:ED
X509v3 Authority Key Identifier:
keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b1:4a:9e:50:a8:f3:d1:13:1f:47:b2:f4:6f:94:ca:54:45:
28:dd:6f:3b:d7:37:b0:c1:29:1c:20:65:44:b0:ac:dc:7f:31:
c9:9a:a6:34:da:97:dd:82:52:e8:ab:8a:4b:20:a3:01:ce:ce:
4f:30:28:15:d7:66:15:46:6e:dd:1d:78:34:53:f1:f6:a7:ea:
a5:11:9b:26:db:a3:c8:09:5d:db:39:57:53:9e:77:4f:cb:f5:
e1:a2:88:aa:95:5f:97:7a:49:f6:ea:b3:03:67:16:21:53:a7:
7a:76:35:82:16:fb:ec:2c:67:5f:7f:46:29:45:24:8a:b5:11:
2c:51:b9:46:16:86:f9:f0:b2:2f:46:1e:18:32:27:04:4b:2f:
8a:7b:ed:0e:10:5d:92:2b:e6:54:58:8f:5a:33:83:c5:d2:ee:
06:78:6c:1c:f6:d7:df:d0:94:f8:80:1a:38:67:94:72:56:64:
00:db:a7:b6:17:82:a4:8c:25:ab:27:cb:22:7d:4f:77:82:d3:
66:1e:9d:4f:53:a0:99:c5:cd:4c:51:b1:ad:9b:0f:35:db:a5:
83:04:1e:72:6b:7c:7c:a8:73:bc:04:92:72:61:4e:53:3b:4a:
dd:39:0c:9f:01:aa:41:72:a5:50:aa:43:43:c3:34:64:aa:f3:
d9:61:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:07 2025 by rpki-client