Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
File: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (raw, json)
Hash identifier: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=
Subject key identifier: C3:01:D2:86:94:6D:CA:C1:BC:B8:C8:1B:05:1E:2C:EA:83:98:F5:57
Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Certificate serial: 14692C6AE8E503A60F739519EECFF969DB21ECB9
Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
Signing time: Tue 17 Sep 2024 18:53:17 +0000
ROA not before: Tue 17 Sep 2024 18:48:17 +0000
ROA not after: Tue 16 Sep 2025 18:53:17 +0000
asID: 141139
IP address blocks: 103.159.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:69:2c:6a:e8:e5:03:a6:0f:73:95:19:ee:cf:f9:69:db:21:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Validity
Not Before: Sep 17 18:48:17 2024 GMT
Not After : Sep 16 18:53:17 2025 GMT
Subject: CN=C301D286946DCAC1BCB8C81B051E2CEA8398F557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:0d:24:d7:ab:12:7b:0c:b9:33:9c:3f:30:
13:e1:c9:12:d8:ad:a7:ad:53:9b:4a:fb:a2:b7:6d:
9d:70:51:fd:3d:56:6a:06:a8:27:e9:af:bd:ce:16:
a9:fb:19:59:b3:d0:3e:77:43:e3:c7:06:3d:a3:36:
4a:83:fc:9c:be:0f:5c:c4:0c:d6:8e:fb:ee:2a:f0:
b5:e4:03:55:b9:ab:37:32:b4:0b:00:80:a0:7f:cd:
2c:dd:81:d1:e5:1f:33:e1:bb:65:01:ee:59:ce:1b:
c7:c0:4d:66:bc:79:b2:13:6a:e7:3c:9c:52:2c:1e:
01:89:b8:12:49:17:78:1d:95:5e:2c:e8:e4:d5:1b:
ca:89:47:53:81:07:a3:95:32:a9:3e:d4:fb:8a:27:
e9:0c:0f:6b:be:61:41:fa:f5:a5:e5:f7:bf:fb:be:
41:74:31:41:6d:ec:2d:e1:f8:2e:a1:ea:87:e9:ed:
02:87:b7:d4:19:58:c3:30:b1:e9:79:6a:01:3c:7d:
8c:1e:77:35:46:cf:36:8b:37:19:59:d5:30:cb:e8:
c2:f0:bf:6a:15:91:07:81:9e:79:3b:08:f1:71:97:
e3:97:0f:ff:e0:03:69:94:c3:d3:05:9a:ac:11:d4:
fb:a8:ee:e8:18:af:60:c0:59:13:3c:89:b8:d3:6a:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:D2:86:94:6D:CA:C1:BC:B8:C8:1B:05:1E:2C:EA:83:98:F5:57
X509v3 Authority Key Identifier:
keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6b:6d:e1:10:93:61:94:99:c9:aa:9f:44:62:a0:f6:47:51:
42:a0:49:93:46:7f:51:02:5e:b9:62:d1:4d:01:0a:d5:7e:90:
7a:8f:ff:63:eb:d0:cf:1d:fa:a9:3e:8c:19:04:71:67:a6:66:
60:d5:6f:02:e9:cb:56:00:69:8c:d5:07:84:5c:13:0a:8e:17:
77:04:b4:a6:34:db:5a:e8:91:38:39:74:4d:30:a2:e4:2d:c2:
b8:73:2e:3b:30:32:58:19:50:e8:5d:53:1d:f0:3b:a0:90:6c:
cd:1c:1a:fe:b6:f7:78:37:f1:3f:d7:54:67:d7:5a:8f:8a:36:
98:e4:ce:0b:2c:9c:e0:c1:77:08:5c:f4:f6:49:28:52:9d:85:
8f:ae:9b:dc:64:66:07:4b:ce:b6:76:14:59:71:0d:b1:5e:f2:
77:49:99:e2:e6:aa:dc:dd:2d:ea:4c:87:56:75:5a:c0:b6:ca:
bd:ea:3a:69:4f:92:0e:8e:ed:dd:1e:64:da:c7:f4:4e:1a:4d:
0f:0a:11:80:e5:6c:6e:a0:74:40:8d:6c:ae:2b:e1:0e:d5:c8:
50:4f:33:53:40:32:f4:b0:15:40:88:05:b7:fa:dc:ae:30:e8:
d1:e3:a7:57:ec:db:39:63:47:2d:43:26:01:a3:4d:11:5c:13:
20:58:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:43 2025 by rpki-client