Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
File: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (raw, json)
Hash identifier: BJOYnvd1kI93LqXvD5Dizkqb0Y5tIFm/8WJ0xqjG4RE=
Subject key identifier: 93:B2:ED:01:8B:59:95:33:BC:6D:79:61:83:FC:C2:46:DC:15:01:FF
Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
Certificate serial: 4662A2FC1F011F7AEEDE95012E95FA073953AE91
Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
Signing time: Mon 20 May 2024 07:00:01 +0000
ROA not before: Mon 20 May 2024 06:55:01 +0000
ROA not after: Mon 19 May 2025 07:00:01 +0000
asID: 149412
IP address blocks: 103.191.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:62:a2:fc:1f:01:1f:7a:ee:de:95:01:2e:95:fa:07:39:53:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
Validity
Not Before: May 20 06:55:01 2024 GMT
Not After : May 19 07:00:01 2025 GMT
Subject: CN=93B2ED018B599533BC6D796183FCC246DC1501FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:3a:c2:a2:06:d1:39:8b:f9:8e:94:fb:88:
02:60:9c:f2:54:28:51:9a:92:f6:c1:0f:ad:5a:6a:
fb:49:e4:a4:96:dc:18:d3:01:82:39:94:67:10:d3:
76:fe:9f:18:18:e8:69:4e:2d:72:98:1b:b0:3f:91:
12:3c:ce:c5:90:a4:b0:e0:5a:a3:af:4a:3c:4e:d4:
72:5d:cd:1b:8c:bb:7c:f3:89:b5:6b:85:65:9e:6f:
9c:a5:fb:bd:a6:f5:20:a7:8c:9f:f6:0b:02:de:7b:
46:fa:18:04:6c:bc:44:d8:6a:ab:c8:2c:95:42:4e:
49:5a:94:e1:c6:26:d7:dd:d7:3a:93:76:86:7e:a8:
ca:a6:88:ec:ba:50:83:f6:03:71:fb:53:0f:0e:80:
48:2d:e1:0e:15:71:50:a5:42:a3:35:7c:e1:b9:9a:
7f:4a:96:71:07:57:06:b8:5c:b1:c9:9e:97:5f:b6:
39:1c:40:30:ed:b1:0e:6f:63:02:fa:c6:9a:88:f3:
aa:ae:a1:8e:55:f7:fa:46:db:85:51:31:bf:e0:03:
71:17:69:f6:38:6d:9b:0b:bb:55:60:30:c1:70:b6:
6d:11:73:f8:a0:e9:59:00:a8:55:eb:f3:93:a4:ce:
7b:35:83:b9:58:c5:0a:c2:4f:e9:05:bf:21:d3:92:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:ED:01:8B:59:95:33:BC:6D:79:61:83:FC:C2:46:DC:15:01:FF
X509v3 Authority Key Identifier:
keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bc:7f:8e:23:e6:56:53:0a:01:36:63:c9:ed:d2:09:ee:00:
f6:ed:41:89:c9:f6:ff:45:42:99:65:a8:69:56:1b:e1:3c:f8:
34:fd:19:b9:64:4c:c8:78:3a:1c:ed:cc:a2:76:3d:d4:17:02:
9a:fe:cc:4d:8d:68:bb:09:1f:32:94:4b:41:93:ee:0f:ef:a9:
cc:81:5e:0c:6a:cd:2a:2e:0c:25:f4:27:24:ea:59:bc:0e:d6:
36:bd:f3:bd:86:05:f1:98:63:0a:ee:d2:52:e6:84:89:3c:60:
0c:ba:08:e7:0d:01:e7:16:ba:01:7c:08:f5:d8:36:07:a9:f4:
b7:e3:fb:94:72:41:44:e4:b7:3c:5b:c6:cf:25:90:e1:13:84:
d1:14:9e:a8:ae:d5:51:29:2c:29:84:37:8f:83:58:2f:9f:dd:
ef:b8:07:e9:e1:ca:22:34:71:11:3a:74:c9:93:d8:e5:f1:18:
45:14:44:5a:db:d8:3a:4d:8e:d1:e8:d0:a3:f3:33:61:4f:52:
e1:3a:a3:3d:c1:99:05:e9:ff:28:0e:88:07:8e:f3:09:99:97:
52:1d:ca:06:33:d3:d3:e7:dc:d3:10:76:ff:47:59:1a:14:8d:
f7:58:cc:2c:d3:e5:a3:a3:1d:43:a5:97:54:76:70:19:bb:93:
95:b8:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:07 2025 by rpki-client