Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: d/HrqtNtfpXxAc5Y2EmIMkeYHkvz0XjUFQbRcDoBtKQ=
Subject key identifier: 31:57:BB:41:C5:CB:C6:06:43:1A:B0:6C:C5:F3:24:8F:B5:1C:0C:55
Certificate issuer: /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial: 210E4F375ECDE3E56182DF26775FDA9D52EF163F
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 05:02:33 +0000
ROA not before: Wed 04 Dec 2024 04:57:33 +0000
ROA not after: Wed 03 Dec 2025 05:02:33 +0000
asID: 135478
IP address blocks: 103.121.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0e:4f:37:5e:cd:e3:e5:61:82:df:26:77:5f:da:9d:52:ef:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Validity
Not Before: Dec 4 04:57:33 2024 GMT
Not After : Dec 3 05:02:33 2025 GMT
Subject: CN=3157BB41C5CBC606431AB06CC5F3248FB51C0C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:86:ba:18:25:cd:00:cd:18:ad:42:64:18:
fc:6b:52:ac:28:3a:87:6d:18:e3:ca:b4:6c:7b:ca:
8b:4b:74:6f:70:37:eb:dd:58:23:a1:8d:e2:f3:e0:
2f:d9:a8:3a:d2:fa:8c:e0:b6:dd:25:6c:95:b5:6a:
57:3f:ad:f8:11:e7:66:46:15:d3:d4:6c:d7:ff:8f:
1c:f9:21:9b:3d:29:1d:d3:b8:d8:ca:3b:ab:b2:03:
ec:ab:b8:88:f6:79:5a:b3:6f:a5:80:dd:5a:0c:c6:
73:ee:21:9f:26:1f:ab:fc:96:a7:0c:71:00:e4:8e:
96:14:3d:fe:61:96:9d:a7:61:bf:95:c8:c2:78:a0:
eb:d5:be:39:64:ed:00:3a:b2:49:16:2c:86:6e:0b:
2d:f1:9c:2b:22:af:e4:7c:89:9b:0e:21:ad:8e:d8:
74:df:96:e8:cb:ff:9b:70:d4:b0:df:d0:61:63:fb:
bd:b6:76:9c:e1:d7:42:9a:f5:a5:32:cf:09:57:75:
5a:86:eb:14:a5:cf:a2:aa:b0:b8:4e:40:e0:00:b5:
d4:0b:af:8e:d1:96:ef:17:79:31:a4:9d:26:88:67:
7b:6a:2f:01:27:59:d2:33:4f:95:b5:05:37:2c:08:
72:de:49:81:04:0d:15:80:b2:06:89:46:ad:e9:a5:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:BB:41:C5:CB:C6:06:43:1A:B0:6C:C5:F3:24:8F:B5:1C:0C:55
X509v3 Authority Key Identifier:
keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.100.0/23
Signature Algorithm: sha256WithRSAEncryption
27:97:ac:e8:d3:47:06:bb:58:81:21:2a:89:8f:d8:1e:d3:cb:
0a:35:62:88:eb:da:53:12:d4:dd:fa:19:f1:91:33:d2:86:f4:
c7:b6:c4:3d:84:ad:33:a3:ae:86:bb:b2:df:2d:5e:3f:01:d6:
40:77:39:98:d6:fa:ca:c6:da:4d:b0:94:ff:39:c4:63:0a:51:
5c:90:54:7e:5d:90:75:35:14:67:31:8c:38:48:23:29:37:ee:
70:f3:c3:5c:fa:a5:17:1c:20:37:e6:9a:e9:29:6a:d3:8e:a6:
48:5a:fb:38:2b:1f:9b:d1:02:63:0e:95:f1:93:dd:d7:74:1b:
e2:82:1f:1a:7a:10:31:b4:e1:67:29:a9:a9:09:e2:33:a4:ba:
4c:8a:58:60:63:c0:8d:4e:39:80:04:a0:e7:72:e2:89:68:a1:
e3:f2:a7:34:8d:d5:10:f6:75:aa:ff:e4:b0:ae:33:9b:97:5b:
63:fa:46:90:36:09:40:10:fd:3b:a7:e0:5c:73:b4:10:d5:fe:
77:b2:17:12:39:4d:30:ea:ce:90:92:98:00:a6:b0:9d:39:ba:
cf:68:01:ea:a7:89:cd:35:d5:4d:66:41:fb:fd:d2:81:a8:ff:
18:ba:52:53:31:82:f7:d6:ea:7c:ae:30:ad:61:16:e5:3e:0a:
17:b1:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:34 2025 by rpki-client