Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
File: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=
Subject key identifier: C5:E4:BC:31:B9:B5:89:50:5D:C2:B8:4A:5F:25:CD:07:08:94:1D:C9
Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial: 282CB470F7A92863F9286B599F3B08D58E1C9C25
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
Signing time: Fri 21 Jun 2024 07:01:16 +0000
ROA not before: Fri 21 Jun 2024 06:56:16 +0000
ROA not after: Fri 20 Jun 2025 07:01:16 +0000
asID: 9341
IP address blocks: 103.190.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2c:b4:70:f7:a9:28:63:f9:28:6b:59:9f:3b:08:d5:8e:1c:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Validity
Not Before: Jun 21 06:56:16 2024 GMT
Not After : Jun 20 07:01:16 2025 GMT
Subject: CN=C5E4BC31B9B589505DC2B84A5F25CD0708941DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:9c:92:c5:4b:5d:16:b7:90:4d:71:59:96:
1c:c0:4f:bc:fa:a5:6a:64:4e:ba:28:f3:0d:65:fd:
0f:9a:4e:d7:80:a2:b2:04:5b:ea:8e:09:31:28:f5:
82:74:61:a2:ff:d1:b1:54:29:cc:f2:af:63:db:fb:
d4:1a:16:ac:c3:fb:bb:d6:df:02:ec:1f:01:34:8e:
ff:17:49:36:5c:9e:d9:3e:e7:8f:ff:25:fa:e4:0a:
14:9a:60:93:df:9c:db:3e:46:94:e0:1a:88:1d:61:
16:e7:82:07:21:98:64:67:4c:c7:43:51:b8:26:d2:
4b:aa:1f:15:b7:03:2b:4d:e9:3f:4d:49:1d:73:a6:
ce:21:31:3a:ce:00:90:00:ed:ca:4c:13:a9:ad:9c:
94:54:b0:04:6b:bf:07:7d:38:56:bc:df:81:74:d7:
19:70:da:e4:f8:ad:7f:c4:f3:1f:15:60:b5:4e:fd:
f1:a3:24:17:e3:81:d6:20:ca:14:c5:35:5d:4f:06:
59:24:77:51:8b:7c:3e:da:e1:59:33:9f:d6:ed:1c:
1f:07:77:04:71:6f:d8:06:8f:52:e0:11:73:57:9c:
79:57:37:4e:a1:50:e4:7e:c3:fd:52:c0:f5:8c:77:
4c:d2:86:03:f7:3b:81:83:a1:b0:cd:5f:a7:7f:18:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:BC:31:B9:B5:89:50:5D:C2:B8:4A:5F:25:CD:07:08:94:1D:C9
X509v3 Authority Key Identifier:
keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:06:b8:14:39:df:7f:6a:1d:e7:74:aa:99:54:87:d9:5d:a6:
16:31:e4:4a:9e:28:dc:30:85:26:ab:b6:d4:49:d0:84:a7:3c:
74:22:53:c2:d4:6b:4a:0e:bd:53:ba:ff:36:8d:f0:d6:6d:a0:
3a:03:bb:77:bb:fe:9e:a4:fb:e0:d9:92:a6:0f:5c:0c:6e:bc:
f7:34:8f:bc:33:9e:6b:33:05:9f:cf:0a:58:fe:0c:d8:89:fa:
82:a7:7c:c5:01:c4:79:1e:86:05:e1:e0:0f:d3:64:55:9a:80:
07:a9:04:00:e8:fa:d3:9a:b1:b2:bd:59:fd:5b:31:7b:46:5f:
56:d3:4c:0b:3e:39:58:13:14:47:18:55:42:46:3a:71:f4:13:
d6:71:8c:04:75:39:5a:a7:37:da:95:2c:65:a9:82:cb:74:60:
26:b3:9c:b6:80:57:79:6b:7c:79:21:5e:03:2e:91:cc:0b:17:
d3:6c:74:53:89:1b:41:98:e1:8a:1d:16:f4:48:bf:8e:fd:4d:
d7:93:11:c7:59:36:29:4d:c2:83:32:f9:4f:9a:0a:5e:ea:08:
b2:1d:83:80:3b:d6:f8:66:d5:6b:8b:5f:76:30:f3:11:56:f9:
33:0c:6a:2e:a7:83:50:53:d8:52:5c:3d:e7:6c:35:cc:84:bd:
43:ad:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:55 2025 by rpki-client