Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
File: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (raw, json)
Hash identifier: TvLODdVnXuE2Yr2FRnlK05HAaGjB3EU+xIIX1UmnRZI=
Subject key identifier: 88:72:71:61:63:A2:20:2E:4E:F8:86:39:D2:BE:A7:FD:B8:A8:FC:69
Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial: 47C27CE9E70AC035B8761032048E559CEBD154B0
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
Signing time: Fri 12 Apr 2024 04:01:27 +0000
ROA not before: Fri 12 Apr 2024 03:56:27 +0000
ROA not after: Fri 11 Apr 2025 04:01:27 +0000
asID: 139455
IP address blocks: 103.145.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c2:7c:e9:e7:0a:c0:35:b8:76:10:32:04:8e:55:9c:eb:d1:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Validity
Not Before: Apr 12 03:56:27 2024 GMT
Not After : Apr 11 04:01:27 2025 GMT
Subject: CN=8872716163A2202E4EF88639D2BEA7FDB8A8FC69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:f3:68:c4:01:0f:33:13:0d:16:5f:a5:ea:
dd:39:9c:99:06:ad:16:70:7a:3f:28:54:8c:c7:3e:
32:e8:a5:bd:5f:d5:68:7d:15:09:b3:1a:17:51:be:
c9:84:89:88:0c:26:cb:0e:ed:b5:ba:90:be:1f:9a:
ec:f7:4d:db:36:eb:84:64:f0:ab:f0:10:7f:b6:b4:
11:e3:d9:ab:34:11:9c:2a:ed:db:fa:a3:0f:68:4d:
af:89:36:ae:27:97:bf:87:80:1d:f8:03:9e:df:9e:
6e:10:91:d0:9e:f2:24:49:a4:9c:37:f1:41:2e:95:
dc:13:75:cd:52:f5:b6:3a:09:80:4b:6e:d7:96:22:
11:c7:f4:75:b7:13:f1:b5:14:1c:20:8a:46:84:75:
79:33:06:de:54:40:f3:6d:7b:d4:f5:2a:f3:09:6f:
33:7c:60:11:3c:00:bb:17:f1:58:81:04:9a:c2:c1:
b4:e5:8a:ea:f6:db:1d:94:93:a4:5c:0b:7c:2b:c6:
d0:e5:8d:50:6d:97:d7:96:ab:4c:47:4c:e6:74:7f:
0d:35:f7:f9:2f:7b:10:e0:1f:9e:8f:c2:ff:04:f7:
af:24:e7:51:ad:79:41:4e:cb:50:3d:1d:f9:05:19:
12:34:1d:7f:4a:f5:8d:76:0a:43:38:1d:67:30:d3:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:71:61:63:A2:20:2E:4E:F8:86:39:D2:BE:A7:FD:B8:A8:FC:69
X509v3 Authority Key Identifier:
keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.52.0/23
Signature Algorithm: sha256WithRSAEncryption
16:60:1a:59:69:7c:e2:f8:ec:5c:f0:55:30:21:e3:bd:53:c4:
23:f8:c7:3c:8b:03:bd:e4:92:aa:7f:65:0a:14:ef:ec:cd:fc:
b9:9a:ab:b9:74:9c:2a:e6:fb:85:3d:43:3a:ce:42:2f:6a:3b:
68:8e:a4:12:e2:e1:51:b1:92:87:18:a1:97:c7:68:79:0a:8d:
fe:4e:49:25:6c:74:79:1f:33:8d:11:54:a9:ec:13:c3:0d:68:
78:af:30:f9:f7:91:cc:08:f1:90:fb:74:90:03:15:ec:7c:de:
e6:31:15:6d:0f:49:e6:4a:b7:cf:09:c2:8d:0f:3a:02:95:42:
30:af:31:da:b0:98:67:c1:d2:fe:d8:70:9c:da:d9:c0:3f:74:
88:e3:00:e7:52:29:64:8f:52:81:c2:e9:b4:18:b0:59:4e:77:
6e:4e:dd:a1:ae:ed:d0:d0:a7:67:a6:9b:1a:49:73:09:26:4a:
37:ff:d5:11:e7:77:5e:a7:79:2f:22:28:47:b8:92:12:e0:c3:
0e:a3:f5:ef:46:b7:aa:95:81:d6:ea:61:93:00:bd:4a:4c:22:
2e:cf:17:c0:8a:95:3a:8d:38:97:b7:65:8a:77:fb:48:d6:64:
0e:3f:d9:c9:22:b2:09:e3:0e:a2:9d:85:f0:19:a7:97:cf:80:
fd:2d:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:22 2025 by rpki-client