Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa
File: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (raw, json)
Hash identifier: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=
Subject key identifier: EB:BB:B6:1D:2A:93:D2:20:FC:0B:35:94:63:CF:9C:D6:5B:9B:A3:37
Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535
Certificate serial: 562FE808499047A15BCB9359BBAFF83190263026
Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa
Signing time: Tue 03 Dec 2024 02:00:01 +0000
ROA not before: Tue 03 Dec 2024 01:55:01 +0000
ROA not after: Tue 02 Dec 2025 02:00:01 +0000
asID: 63884
IP address blocks: 103.35.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2f:e8:08:49:90:47:a1:5b:cb:93:59:bb:af:f8:31:90:26:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535
Validity
Not Before: Dec 3 01:55:01 2024 GMT
Not After : Dec 2 02:00:01 2025 GMT
Subject: CN=EBBBB61D2A93D220FC0B359463CF9CD65B9BA337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:0a:e7:b6:34:34:a1:07:16:17:62:a3:30:
ab:84:7d:d6:dd:d3:95:a8:77:6f:6a:6e:eb:e4:34:
b3:4c:68:2d:98:ee:d6:65:7a:0e:84:75:07:bf:3d:
54:4a:0d:7f:ec:03:6e:db:c2:00:16:49:fa:d4:d8:
3d:4b:ed:c8:02:03:35:67:f9:42:a2:b3:1b:63:f7:
f4:7a:84:1d:53:6b:33:8f:a5:c9:ac:77:fe:2b:d5:
e8:43:b6:2d:d5:41:d0:d6:47:9c:77:0a:aa:53:f2:
8c:aa:95:6f:3f:9f:d0:56:a5:53:a2:ee:9f:a1:1d:
a0:1d:67:11:d1:53:8b:cf:a0:a1:aa:6e:1d:dc:5a:
e7:1c:b0:71:1d:67:43:f7:8b:b9:7b:4f:9d:4d:2a:
65:e7:ae:10:5e:4d:15:cf:b1:45:5e:c3:3a:d6:88:
eb:a8:a4:de:04:fb:b7:eb:9c:13:fe:6b:99:a9:3f:
eb:f4:c9:d8:f5:4b:33:36:92:22:20:12:29:0f:84:
d6:b4:be:05:1d:ee:39:fb:cb:be:2b:6a:72:0e:af:
6e:b9:e4:91:71:4d:02:3e:a5:77:2c:15:49:8f:99:
7e:df:81:a1:36:6f:ea:e6:58:ee:dc:e8:48:7b:03:
87:98:8c:84:ba:bf:e5:93:6e:4a:ff:dd:0f:7c:78:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:B6:1D:2A:93:D2:20:FC:0B:35:94:63:CF:9C:D6:5B:9B:A3:37
X509v3 Authority Key Identifier:
keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:41:34:92:19:f3:b7:72:14:00:5b:3f:fb:e5:86:52:6c:e1:
90:09:bd:0c:fa:b7:40:25:42:ff:4f:70:a1:e7:bf:ef:67:12:
d1:3c:a9:5a:9b:b5:ed:00:d6:f9:06:1b:ad:b4:76:bb:25:4b:
65:dd:c9:ef:a8:3b:fb:fe:d2:4c:57:50:a2:fc:8d:f3:54:4b:
12:d9:6e:e1:d5:f6:02:c0:7c:95:4f:b7:c2:13:55:ea:ae:6c:
45:ed:aa:a8:67:9a:89:19:23:19:f4:44:04:80:fa:0d:4f:20:
d3:b9:b2:4e:00:e1:c1:81:b8:bd:ab:9e:ea:10:58:83:e8:0c:
75:ea:9f:02:a1:ce:a8:f2:f1:0c:8d:5e:11:05:17:f8:e6:0d:
7e:aa:6b:02:82:53:2c:ca:9c:db:c5:00:31:21:e0:71:7a:43:
45:68:b5:22:38:37:59:92:56:14:00:fb:c3:0a:82:c2:04:49:
1a:c5:f5:87:71:67:56:58:1b:05:13:72:bc:79:ef:86:71:b8:
28:22:04:93:c0:80:90:b8:95:ed:c6:2d:de:23:a1:32:7d:af:
2b:c1:e2:34:12:48:a6:81:55:b2:e1:a1:87:d3:af:c6:bd:d7:
c0:13:cb:84:0a:db:59:74:e1:7d:38:ba:03:d0:dc:00:0e:d6:
7f:20:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:09:01 2025 by rpki-client