Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
File: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (raw, json)
Hash identifier: PS1BhTpFCm3WSEPx0BSWdx2apjX4KaO+e/LyGvpSmtQ=
Subject key identifier: 01:8E:CF:D9:2F:A0:66:67:58:6B:57:22:34:1C:C2:40:6A:94:93:CC
Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Certificate serial: 443187FA9EF720738B8E306F154BCA0644E5FBD5
Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
Signing time: Fri 05 Apr 2024 04:02:33 +0000
ROA not before: Fri 05 Apr 2024 03:57:33 +0000
ROA not after: Fri 04 Apr 2025 04:02:33 +0000
asID: 150970
IP address blocks: 103.132.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:31:87:fa:9e:f7:20:73:8b:8e:30:6f:15:4b:ca:06:44:e5:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Validity
Not Before: Apr 5 03:57:33 2024 GMT
Not After : Apr 4 04:02:33 2025 GMT
Subject: CN=018ECFD92FA06667586B5722341CC2406A9493CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:a3:8f:68:f4:55:e5:6c:91:74:1b:2f:e7:
6d:af:42:f9:a8:4b:12:a3:ea:69:bc:80:e9:dc:88:
3c:8c:be:8b:dc:53:e2:40:aa:22:2b:e9:83:cc:34:
67:91:53:fd:36:50:16:10:f7:cf:52:09:ae:88:36:
b1:c5:49:a3:e8:a6:c0:62:01:77:6d:7d:5d:eb:96:
d0:85:ee:9d:ba:e3:11:60:6d:90:cd:e9:0b:a5:26:
0b:05:1c:b9:60:ca:46:d9:a9:91:6d:69:59:7e:ce:
a2:ed:7f:4e:ec:42:8b:6a:44:2c:da:bd:10:13:df:
28:be:79:3f:1e:72:66:26:f9:82:9c:70:00:18:18:
e6:42:89:eb:d9:95:10:20:78:9d:7f:1a:ba:32:b8:
6b:35:b4:a6:db:ab:de:77:a9:5f:b3:9a:48:12:9e:
59:1a:97:bd:2b:9a:64:ab:e9:2f:c6:99:8f:11:5c:
a6:55:6d:ec:56:86:97:78:08:6d:ed:2a:1b:df:32:
76:52:b5:98:32:7b:de:d0:d6:2d:af:58:fa:e6:bd:
6c:a6:09:7f:a6:9d:35:65:62:ff:70:56:cc:36:77:
21:c2:38:ed:d2:10:b5:2a:d3:3f:08:f1:23:34:8b:
94:36:0a:df:58:dd:b2:29:ae:5d:27:3a:2b:02:31:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:CF:D9:2F:A0:66:67:58:6B:57:22:34:1C:C2:40:6A:94:93:CC
X509v3 Authority Key Identifier:
keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bf:d2:74:ad:d9:ed:b5:5d:c2:20:38:bc:e2:83:ff:01:7a:
a1:03:c3:f5:a5:73:7b:57:4f:2d:1c:07:8a:5f:96:65:33:5c:
f2:79:e0:45:6d:8c:2f:a2:39:2b:b7:15:70:60:22:63:fe:5c:
fc:73:ac:38:0b:aa:84:48:dd:87:99:4d:93:51:02:15:84:01:
78:e2:7e:8c:29:fe:90:79:2d:e8:28:a7:61:66:4f:2c:0d:02:
a5:f3:46:53:8d:84:a6:7c:f9:c6:45:79:cc:e2:c9:d5:4e:b6:
e6:db:7f:7c:d4:68:7c:69:01:49:06:ef:23:1b:c0:6d:df:58:
23:4e:ae:28:64:a1:a0:68:f8:b0:28:ce:53:55:29:23:c1:d0:
0d:b7:3d:69:e6:4b:60:4f:fc:38:c7:c0:48:91:0c:ed:6e:72:
9b:83:f5:df:6e:1e:e7:d2:7c:66:64:e9:5c:75:ca:2c:76:99:
b1:b0:8b:f7:29:82:e6:fb:c4:5c:e8:d6:46:74:f1:08:3c:45:
52:98:af:ad:34:c3:6c:4f:92:f1:b4:96:ac:10:e2:95:37:c6:
c4:3f:1f:a0:0a:ec:74:9c:70:94:e6:e1:94:f3:5e:15:a5:a3:
3a:20:5d:4a:11:44:c1:07:fb:74:bc:b2:17:fa:68:01:f5:11:
32:22:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:18 2025 by rpki-client