Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa
File: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (raw, json)
Hash identifier: iBce8EmgyPopGL+H7wWheojmLLts3PdyHs2P5FPK4X8=
Subject key identifier: FE:6F:C7:A1:67:3C:6A:E2:3A:25:BB:FF:D7:C4:EC:32:67:9D:30:2C
Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554
Certificate serial: 315FB84693957AB148D452AC406D2CE0E5FC90CE
Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa
Signing time: Wed 13 Mar 2024 08:00:02 +0000
ROA not before: Wed 13 Mar 2024 07:55:02 +0000
ROA not after: Wed 12 Mar 2025 08:00:02 +0000
asID: 150955
IP address blocks: 103.79.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5f:b8:46:93:95:7a:b1:48:d4:52:ac:40:6d:2c:e0:e5:fc:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554
Validity
Not Before: Mar 13 07:55:02 2024 GMT
Not After : Mar 12 08:00:02 2025 GMT
Subject: CN=FE6FC7A1673C6AE23A25BBFFD7C4EC32679D302C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:30:b5:56:25:85:6e:8b:75:aa:3e:1a:33:
ae:3a:7b:d6:a2:a1:f8:c4:b4:7e:b0:7c:81:d4:1c:
23:55:72:b0:33:ac:bf:70:6f:56:11:f9:ee:e7:3b:
66:9f:c1:20:4b:d1:1f:64:65:9e:93:a5:81:9c:58:
bb:56:19:28:ca:69:9b:44:27:9c:31:47:aa:9f:7a:
90:8e:da:48:29:f0:89:b6:ec:d4:30:6c:a2:ed:0e:
d8:9b:4a:39:90:59:1a:fe:a4:7a:c4:91:f0:92:52:
60:23:f6:83:63:41:02:b1:0c:55:71:1a:a2:92:7e:
19:03:bf:8a:5f:4e:58:00:83:0d:25:60:b4:48:9c:
0e:29:9c:ff:90:42:f6:db:fe:08:72:84:fe:24:a1:
a0:d0:51:49:e5:9b:30:90:ba:fc:db:69:1c:10:ad:
f4:8a:e8:12:2f:bc:99:58:93:b0:19:37:44:83:88:
64:1d:71:e5:cd:1a:0d:73:7d:9c:fe:dc:f8:bf:df:
56:17:63:48:a7:d2:81:f4:56:cb:8b:c0:d2:50:a6:
e0:29:cc:9c:ae:ec:84:f8:ce:32:cd:99:b5:d4:02:
75:e4:df:9e:8d:5a:a2:6f:e1:17:aa:83:98:c2:79:
89:e8:b7:6c:3a:7c:03:35:3b:e9:01:40:f2:12:c5:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:C7:A1:67:3C:6A:E2:3A:25:BB:FF:D7:C4:EC:32:67:9D:30:2C
X509v3 Authority Key Identifier:
keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cc:17:37:2c:2b:fb:79:1b:dd:12:78:b8:22:bd:85:db:66:
78:81:30:4a:3f:86:ee:d8:72:0d:81:3d:47:73:aa:18:39:f3:
c9:5e:81:9d:ee:dd:e2:cf:11:aa:75:8e:8e:b1:2f:3b:46:1c:
39:b4:16:ac:b9:5c:53:23:65:41:b1:e4:0c:9f:4e:36:39:08:
ec:cb:6b:0d:9c:95:48:26:9a:1c:a3:76:54:89:04:a3:af:ff:
7a:49:b2:00:e6:b0:bb:2b:9f:2c:63:7d:e7:1c:c6:58:cf:00:
aa:e2:e2:d1:98:95:52:04:40:e0:c3:d3:9f:2d:11:54:13:33:
28:50:3b:d4:80:93:e9:54:aa:6d:e6:f3:7b:03:8e:c8:2c:63:
2c:01:7a:6e:cd:5d:5d:7d:c9:3a:e3:2f:16:41:3a:a5:11:dc:
b3:2c:34:d3:db:e1:5a:bf:4b:b1:4a:c1:0a:a7:43:b9:d1:1a:
99:30:d7:a7:f6:6f:80:0d:d2:18:d3:fb:c1:da:1a:54:de:80:
2c:42:26:db:8d:74:38:ea:76:6d:e5:6b:be:8e:fe:da:c7:c6:
17:7a:54:e2:7e:3d:e4:1b:62:e8:bb:ca:3b:ea:06:33:36:d9:
30:d6:9b:03:6f:dc:37:c7:55:00:4a:37:33:e2:c3:99:60:3f:
2f:93:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:11:49 2025 by rpki-client