Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
File: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier: 9VCQxiZQ6uQVxpVIt3DfXxPQylWYJU9tTsKyqA1F1Ho=
Subject key identifier: 5A:3A:4F:C3:89:95:57:EC:7D:85:EB:39:A6:2D:0F:70:EE:F1:24:22
Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial: 71863639DC9F290F72983C034BD7D615AA3CD0FD
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
Signing time: Mon 09 Sep 2024 02:00:00 +0000
ROA not before: Mon 09 Sep 2024 01:55:00 +0000
ROA not after: Mon 08 Sep 2025 02:00:00 +0000
asID: 138886
IP address blocks: 103.141.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:86:36:39:dc:9f:29:0f:72:98:3c:03:4b:d7:d6:15:aa:3c:d0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Validity
Not Before: Sep 9 01:55:00 2024 GMT
Not After : Sep 8 02:00:00 2025 GMT
Subject: CN=5A3A4FC3899557EC7D85EB39A62D0F70EEF12422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:b9:0f:25:5d:56:e9:7f:56:bb:66:75:03:
7f:37:c8:57:08:a6:8e:ee:c7:d7:28:db:e8:b4:5f:
33:15:79:d0:b6:7c:a1:90:2b:47:78:2d:eb:e0:aa:
34:01:cf:e1:64:a0:e2:f3:93:c4:cb:b8:3d:70:84:
75:b9:c4:03:a1:90:95:92:4b:ff:66:7b:59:89:b0:
cc:9e:87:0c:ce:eb:95:d4:47:cb:27:5e:83:c0:e6:
c2:58:38:95:ed:5f:79:82:6b:90:82:7a:a5:31:2e:
c3:f5:47:35:9e:3a:c6:4e:43:43:d6:2d:5c:56:06:
04:a4:ea:bd:cf:31:41:c2:86:c8:55:43:c9:98:ab:
b6:4a:83:f8:e9:48:55:de:11:87:52:4a:af:ef:68:
11:94:c0:86:d2:55:5e:81:69:c9:a9:40:15:22:09:
82:a4:8f:97:9a:32:c8:40:b1:65:24:9b:cf:01:d2:
c8:90:c1:d9:1a:86:f2:0f:2a:ef:26:f5:d4:0b:a2:
7a:84:f2:b8:89:2c:9a:98:72:8c:7d:63:97:53:9c:
4a:ab:d1:85:25:a6:99:66:66:f3:68:b3:7a:5d:f6:
ca:c2:bb:10:4f:d4:e0:ce:ea:ea:72:6b:a6:db:32:
83:e3:ca:40:24:d2:41:aa:25:71:46:d6:79:37:24:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:4F:C3:89:95:57:EC:7D:85:EB:39:A6:2D:0F:70:EE:F1:24:22
X509v3 Authority Key Identifier:
keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.108.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:96:4d:71:32:03:35:cb:fe:30:cb:9f:e5:f3:d7:26:df:7a:
be:ff:f9:56:56:11:3f:b7:32:11:2b:68:6f:45:d4:4a:3b:06:
63:3b:81:b8:82:a7:1a:30:52:d7:2a:6e:73:71:89:22:80:d8:
28:12:75:23:18:ef:d7:64:05:75:ba:58:a9:7f:b8:34:da:c5:
d5:3f:6b:83:34:3c:21:52:c1:88:2a:ab:98:0e:e6:c1:e6:f2:
e4:ee:1f:f8:67:42:d5:08:9f:18:d9:f3:b4:18:6b:ad:c6:c6:
fa:d8:3e:cc:91:00:bb:8b:85:ce:45:57:86:27:72:82:10:ee:
3e:95:58:7b:a4:ef:26:c9:9e:d7:ec:18:43:4b:7e:51:28:f4:
bb:9e:e0:5d:6b:01:39:f9:ac:89:c6:34:a5:fe:1f:30:b7:c2:
59:0d:ba:59:ed:f1:91:41:d2:b3:7e:f2:32:f7:5c:95:c6:b4:
f7:26:09:df:46:06:d8:85:28:9c:3e:c8:31:b5:40:d5:23:0b:
fd:28:95:e0:3e:50:f3:f8:71:09:ac:a2:4e:66:df:94:d0:41:
9c:bc:4e:1c:11:4b:51:df:11:7b:07:bf:08:26:2f:45:5b:25:
4e:72:de:3a:72:4b:6e:94:7a:b7:19:96:db:07:bb:34:16:9e:
27:cc:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:31 2025 by rpki-client