Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa
File: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (raw, json)
Hash identifier: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=
Subject key identifier: 48:48:6A:5A:9C:D9:43:45:8C:3D:92:90:4E:3F:A0:99:DC:BB:3E:77
Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial: 33AA75F004A446FB4A885B78BC1E25735999E8C5
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa
Signing time: Fri 15 Nov 2024 10:00:01 +0000
ROA not before: Fri 15 Nov 2024 09:55:01 +0000
ROA not after: Fri 14 Nov 2025 10:00:01 +0000
asID: 138087
IP address blocks: 103.125.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:aa:75:f0:04:a4:46:fb:4a:88:5b:78:bc:1e:25:73:59:99:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Validity
Not Before: Nov 15 09:55:01 2024 GMT
Not After : Nov 14 10:00:01 2025 GMT
Subject: CN=48486A5A9CD943458C3D92904E3FA099DCBB3E77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:ac:41:dd:31:98:f3:73:40:c6:c9:ea:f1:
da:32:d9:ef:6d:58:5e:63:bf:ee:ef:32:fc:75:6c:
66:ff:cf:f6:1d:f7:5e:e1:3a:24:07:15:7a:f0:f9:
cb:8e:07:b6:d0:30:3f:fe:7b:f3:ec:ac:43:10:42:
ef:c0:2b:3f:59:e6:68:12:18:fe:11:69:e0:47:b2:
9c:29:02:e6:d9:ee:dd:91:01:68:81:16:79:2e:b6:
86:eb:bb:2b:9f:01:2f:3b:61:f5:97:90:63:dc:d7:
fa:9e:ce:34:07:2c:06:35:d3:f0:40:b6:70:37:51:
4d:d0:f1:bb:02:55:2b:55:6b:b8:a5:f4:49:30:0e:
6b:d4:c1:0a:86:eb:8d:25:f2:79:75:61:89:98:d6:
0c:18:b3:78:a4:d2:3c:95:1a:ac:e4:ed:06:cb:71:
54:54:c4:14:27:25:0b:92:68:02:a8:88:a3:16:c3:
71:be:cc:12:48:e5:5a:20:8a:ea:c6:f2:3b:7b:17:
93:1e:25:ef:93:79:85:47:f0:da:80:2c:35:78:31:
d7:f3:bf:24:b1:70:75:65:76:22:a4:8e:6a:7a:ec:
26:9a:89:56:21:22:3f:1a:6b:bd:62:b1:55:3b:3c:
3b:22:6a:74:7a:dd:9f:b0:96:d4:55:49:c4:8f:1c:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:6A:5A:9C:D9:43:45:8C:3D:92:90:4E:3F:A0:99:DC:BB:3E:77
X509v3 Authority Key Identifier:
keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.19.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ef:50:71:77:2f:1c:df:b8:b0:b5:7b:a0:5c:3d:41:f7:34:
ec:46:16:23:76:a7:c4:fc:23:8d:2d:19:6d:2b:43:34:ce:4a:
75:d4:e9:17:44:b8:27:29:56:1e:69:5b:2f:3f:72:76:54:4f:
82:9c:8c:fe:ed:96:fb:9b:1e:de:bf:5f:f7:9b:4e:b1:78:4d:
56:c9:ae:14:27:c7:02:bb:94:00:3f:77:ac:e3:14:61:42:4a:
1e:20:4e:01:39:bf:35:fe:f4:28:65:07:a9:50:60:69:c5:e2:
89:45:40:64:49:a5:9d:c7:96:5e:bd:a6:40:14:1a:16:51:6a:
f2:e7:d4:e6:bf:61:b0:08:2f:d6:4c:38:4a:fe:40:70:8f:12:
f8:60:38:64:24:22:3b:c9:25:68:aa:89:42:5e:36:45:84:8d:
c3:ad:20:ee:82:9a:da:c4:be:45:b7:0f:7c:b6:8f:f9:4a:7e:
fa:12:4e:73:95:54:36:5b:ec:73:7e:ae:40:51:37:69:fa:b6:
6f:6e:24:85:08:6f:87:38:9c:66:87:a8:ac:39:66:20:72:7f:
0c:66:65:08:e6:c8:b2:e7:51:9a:ca:94:2c:98:99:58:7c:fb:
36:e2:88:0d:b7:67:17:37:c1:20:04:13:27:2a:d7:8c:29:d4:
ce:13:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:29 2025 by rpki-client