Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa
File: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (raw, json)
Hash identifier: N8s8dFq4TNpWQyxUl9/UrWeAB+JY477G2vxj4+Vdmj4=
Subject key identifier: ED:A4:01:FD:68:13:29:E0:BA:05:10:60:D0:E8:0B:3D:C8:1D:B9:62
Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Certificate serial: 40F78B4D02F539DFB10A31A5D7B0A6F2191BF808
Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa
Signing time: Mon 15 Apr 2024 08:00:00 +0000
ROA not before: Mon 15 Apr 2024 07:55:00 +0000
ROA not after: Mon 14 Apr 2025 08:00:00 +0000
asID: 136112
IP address blocks: 103.92.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f7:8b:4d:02:f5:39:df:b1:0a:31:a5:d7:b0:a6:f2:19:1b:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Validity
Not Before: Apr 15 07:55:00 2024 GMT
Not After : Apr 14 08:00:00 2025 GMT
Subject: CN=EDA401FD681329E0BA051060D0E80B3DC81DB962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:a2:d9:77:49:84:dd:2f:9a:7d:f0:ce:a3:
13:a9:3a:1c:b0:06:78:1f:59:4b:64:32:14:d2:d7:
bb:07:e3:aa:b4:74:80:7d:e6:94:30:e8:e0:81:9f:
6f:41:0f:d0:bd:f7:49:bc:4e:9b:a3:19:62:dc:de:
cb:5f:06:45:03:ac:39:61:87:fc:09:79:56:10:4a:
7e:4b:e1:c7:a2:c0:92:ed:22:4c:25:c1:15:62:8d:
4c:f5:89:16:bb:07:f8:07:e7:5a:3f:14:78:ad:1e:
b7:e6:ec:26:a1:f7:78:f0:8a:b5:1c:f9:3e:e5:7d:
4e:3f:ba:0e:74:70:29:d4:9c:9e:6a:0a:40:0a:c8:
1a:e0:d7:35:ed:4e:7f:05:a2:9f:61:41:ac:94:da:
a0:6e:49:5c:31:bc:db:62:2a:df:c1:7f:58:c3:b6:
2a:71:39:98:c1:8a:18:2d:43:04:fd:7e:e3:47:5e:
91:5e:e8:51:cc:b0:d9:bd:8d:47:ad:46:e7:df:e7:
57:f3:db:6c:93:ae:03:22:8a:76:c9:dd:64:5c:d3:
61:ca:54:c4:86:0e:7b:c4:f8:f7:bf:01:3d:07:0a:
a2:ee:2b:ba:f6:b5:36:83:d5:1d:4f:56:91:ed:c3:
70:20:02:8b:d5:b0:ef:27:51:7c:56:ad:9f:ec:53:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:01:FD:68:13:29:E0:BA:05:10:60:D0:E8:0B:3D:C8:1D:B9:62
X509v3 Authority Key Identifier:
keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.92.232.0/23
Signature Algorithm: sha256WithRSAEncryption
81:05:6e:0a:8c:6d:60:46:b4:5c:88:63:76:2f:e4:09:b8:1f:
a4:7e:fa:cd:b4:03:72:58:c0:08:bf:2c:f2:db:54:70:51:1c:
a7:f9:14:0c:e5:c7:3a:49:f8:f7:56:e2:4e:89:16:37:f1:e0:
c7:6f:95:a6:6f:49:f7:15:ca:d1:52:63:3d:a6:43:48:cf:aa:
22:aa:9e:0c:07:33:d4:57:8a:77:ba:d7:30:90:f2:7b:6e:7f:
32:a0:72:a7:8a:92:c7:5e:d9:1a:9d:fd:cd:45:70:fe:bc:96:
3f:5b:84:27:22:e5:ee:da:03:8d:c4:56:c5:bf:0a:97:c9:3c:
1d:9e:08:53:97:a6:e5:03:a2:31:2f:42:10:22:b2:91:77:ff:
02:3d:cd:ab:9b:e3:5e:aa:6d:ec:cb:05:7d:03:64:69:b4:ea:
68:8e:d1:60:80:34:84:f0:a3:36:89:e9:09:70:51:80:e9:b7:
05:6d:c3:7e:25:99:c2:8d:4c:d6:c5:49:c8:5b:5a:1a:2c:b7:
07:98:95:6f:5b:96:a6:ae:6e:cf:14:56:b4:8b:79:24:07:59:
8e:0e:6d:b5:db:04:a4:ee:8a:e4:23:8f:14:15:c5:f4:fd:3e:
f9:bb:bb:8e:3a:78:0b:59:00:3b:96:c2:33:25:8a:27:92:df:
38:78:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:09 2025 by rpki-client