Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
File: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=
Subject key identifier: 56:4A:D1:6B:C5:A7:EE:80:A6:C1:F7:70:7E:B1:D8:24:7D:4F:97:C6
Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial: 462987914650ABCA928311D85C94229BAC18922E
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
Signing time: Fri 21 Jun 2024 07:01:16 +0000
ROA not before: Fri 21 Jun 2024 06:56:16 +0000
ROA not after: Fri 20 Jun 2025 07:01:16 +0000
asID: 9341
IP address blocks: 103.190.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:29:87:91:46:50:ab:ca:92:83:11:d8:5c:94:22:9b:ac:18:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Validity
Not Before: Jun 21 06:56:16 2024 GMT
Not After : Jun 20 07:01:16 2025 GMT
Subject: CN=564AD16BC5A7EE80A6C1F7707EB1D8247D4F97C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:fc:cb:8c:d1:c6:f9:7c:2b:67:46:65:9d:
65:9d:b9:0f:fa:b2:ec:82:2c:74:45:22:af:24:40:
ed:f4:1c:27:eb:40:df:39:7e:f1:02:4d:04:e8:d2:
3f:e2:4f:f4:d4:63:a3:72:8d:d5:87:29:b6:a7:ee:
be:69:1f:e9:bf:42:c3:cb:91:a4:76:7b:22:89:5a:
8f:e9:02:59:2b:af:52:97:1b:a4:c4:00:ef:6d:b0:
6e:11:ff:b4:80:99:32:d4:a7:aa:37:03:d7:49:65:
ba:bf:0c:34:fa:0b:79:25:64:05:12:7c:4d:a5:be:
67:a8:6e:31:a8:d1:d4:b2:ed:3d:13:3d:28:df:08:
90:02:dc:f0:84:6f:10:ad:cc:48:f8:4f:4c:68:6d:
0f:9f:58:46:f6:2b:ff:f2:33:6e:49:7d:7c:28:76:
3d:90:1a:8e:7a:8a:7d:a2:ff:8f:29:89:f3:c9:2d:
26:d9:44:2c:4d:1d:5f:80:4d:1e:aa:aa:ea:37:ca:
d3:c0:e5:ef:ec:0d:c0:ef:1c:16:c0:d9:ed:7c:af:
04:bd:77:bd:ad:21:f5:a4:9f:72:ff:28:09:03:c2:
93:a5:83:ff:17:62:61:4f:19:9a:ae:dd:bd:80:57:
7c:74:24:86:06:8f:e4:cb:22:5c:6a:fa:36:49:af:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:D1:6B:C5:A7:EE:80:A6:C1:F7:70:7E:B1:D8:24:7D:4F:97:C6
X509v3 Authority Key Identifier:
keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:94:04:01:d3:b2:c0:b7:d9:7f:9b:90:5a:7d:b7:27:7d:26:
63:ca:c3:fd:35:0d:12:29:80:d8:3a:98:38:cc:d9:9b:b7:95:
2a:47:34:25:4d:61:c9:a0:61:6f:7e:45:d6:eb:ef:b0:00:46:
fd:1e:76:01:6b:ae:c9:03:e0:bd:68:7e:93:3e:36:f5:da:f5:
e3:8b:39:1f:5b:13:f3:b2:83:f7:68:e9:77:70:a5:04:ac:f9:
02:1c:4c:d5:9a:fe:b7:ac:1a:5d:d3:69:9d:8b:39:bf:2c:af:
c9:e9:79:bd:ef:d8:2e:24:8e:72:d5:cb:df:5c:4b:68:b1:58:
82:f5:4d:8c:e8:83:a9:d6:f9:1e:a1:b7:b1:ca:0e:08:60:f0:
20:6d:2b:7f:24:fc:c6:f2:b3:f1:29:d0:df:6a:7f:15:24:05:
b9:a6:cc:2f:cc:9c:ba:6f:a5:03:b6:ba:c7:a9:f4:92:d3:ba:
54:b2:4d:2b:55:ed:8d:21:cc:2c:18:bc:17:16:ce:ea:0e:c6:
39:01:6e:7e:21:8c:dd:07:44:74:3b:e2:fa:df:fb:df:36:8c:
bd:c9:45:2d:45:f3:cb:3d:cc:39:19:28:09:3d:9c:60:49:41:
a6:f1:d7:60:c8:c9:c5:8f:a1:cf:12:9c:03:dc:e6:da:c3:4a:
ed:a2:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:21:34 2025 by rpki-client