Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
File: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (raw, json)
Hash identifier: Bp8Mfjyw5kTlwKqZsS0YcdD0zxqotHGHvN6sZewOpvY=
Subject key identifier: F2:24:91:33:7B:07:67:C5:0C:03:8D:F7:66:DA:05:9B:96:E7:95:D0
Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938
Certificate serial: 7340890A7B6D98EB1F8FB84823FD6765B7531E27
Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
Signing time: Fri 13 Sep 2024 13:00:01 +0000
ROA not before: Fri 13 Sep 2024 12:55:01 +0000
ROA not after: Fri 12 Sep 2025 13:00:01 +0000
asID: 138842
IP address blocks: 103.138.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:40:89:0a:7b:6d:98:eb:1f:8f:b8:48:23:fd:67:65:b7:53:1e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938
Validity
Not Before: Sep 13 12:55:01 2024 GMT
Not After : Sep 12 13:00:01 2025 GMT
Subject: CN=F22491337B0767C50C038DF766DA059B96E795D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:32:d7:0d:a0:15:eb:7a:b5:68:ed:c3:53:
13:4f:a7:98:c1:5d:b2:ce:8b:8e:c3:39:1b:d6:e5:
90:db:0f:6c:13:94:4a:cb:c3:73:28:a5:19:cd:a5:
6c:2d:de:7a:24:d0:c0:39:fe:02:de:27:99:76:c9:
7c:72:41:d9:85:23:b9:74:bd:f0:62:c0:31:1d:53:
12:ce:4e:5a:b1:a2:10:92:b3:85:a6:06:a0:b1:d1:
9d:39:22:04:82:6c:5c:9f:0f:c2:30:3c:8d:50:30:
75:39:d7:24:e5:3e:67:71:16:27:81:93:e4:f5:b6:
b3:0e:05:9d:30:b5:7a:8f:f7:f4:0d:f0:51:69:38:
cc:a2:bd:9d:9e:90:a0:83:51:32:59:86:72:df:c1:
ff:68:33:4c:9d:cd:56:5c:51:ab:b6:5d:cd:4f:92:
fd:b9:52:e6:f2:24:9f:3d:9a:81:a7:09:2d:44:7b:
8b:fa:e3:ca:2a:8d:42:74:e0:e8:5a:5e:c4:f3:00:
6a:4d:33:32:a1:f4:72:56:cf:c1:f4:7b:c4:77:4e:
33:b1:10:68:10:ee:ea:77:9d:83:61:b6:bb:58:da:
bf:f3:ab:c2:c1:e4:35:ba:cf:a1:3e:e3:bd:f7:4e:
be:32:df:de:3c:bc:0f:13:43:f4:8f:0f:55:3e:fd:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:91:33:7B:07:67:C5:0C:03:8D:F7:66:DA:05:9B:96:E7:95:D0
X509v3 Authority Key Identifier:
keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.68.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:4a:87:49:54:f2:b6:5c:57:e8:a3:91:cc:ab:f6:1d:86:c8:
62:de:43:78:5b:60:4d:5b:cd:67:09:0f:55:95:dc:a3:f4:c4:
25:b0:35:b6:fd:39:69:bf:0b:d3:5c:93:65:b1:0e:ce:23:61:
e4:48:09:d3:c8:83:71:1e:22:32:06:eb:d4:8c:a5:14:79:47:
8e:40:8a:c9:7e:6a:ce:b4:dd:ee:26:75:7a:df:3c:4e:09:3a:
2f:d5:69:ce:8f:66:cf:76:33:36:62:44:4a:29:33:49:d9:ca:
e4:b7:07:aa:81:35:59:dd:79:bf:ee:e1:40:f6:20:3a:a7:31:
2b:49:b1:7d:e0:1b:bf:f3:61:e7:06:f9:c6:eb:e0:e9:8d:b1:
79:e6:b5:27:b4:40:4c:fb:0f:59:76:b1:3b:73:ad:cb:b7:47:
fc:df:0d:18:89:a1:a8:41:74:cd:17:a3:45:e6:ef:22:c0:6c:
65:c8:56:6d:00:a8:f8:ec:31:9a:00:25:e7:91:9c:36:9d:df:
c8:1e:0f:7e:29:e6:27:92:07:55:09:e7:f6:0e:c5:8b:ac:d6:
ef:5a:be:63:f7:f4:30:63:2f:ad:1f:eb:ff:b2:9e:bb:30:d8:
59:ff:ca:0b:24:73:9b:44:8a:8a:c9:d7:7c:40:b9:16:a0:79:
70:13:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:52 2025 by rpki-client