Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa
File: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (raw, json)
Hash identifier: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=
Subject key identifier: AE:48:CA:A7:5B:94:5A:E9:AD:DA:F9:CE:7D:10:B6:58:F6:88:E7:3D
Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410
Certificate serial: 1D5CB7BF688CE309B8439B290C73C32C9176ADFC
Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa
Signing time: Sat 05 Oct 2024 09:00:01 +0000
ROA not before: Sat 05 Oct 2024 08:55:01 +0000
ROA not after: Sat 04 Oct 2025 09:00:01 +0000
asID: 141071
IP address blocks: 103.155.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5c:b7:bf:68:8c:e3:09:b8:43:9b:29:0c:73:c3:2c:91:76:ad:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410
Validity
Not Before: Oct 5 08:55:01 2024 GMT
Not After : Oct 4 09:00:01 2025 GMT
Subject: CN=AE48CAA75B945AE9ADDAF9CE7D10B658F688E73D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:d7:8c:20:78:2f:15:9a:45:14:a5:f3:b5:
05:ff:67:8c:08:65:91:f4:6c:11:c3:95:48:41:61:
c4:2b:a4:7c:69:94:9d:13:19:02:b7:67:28:44:0f:
39:69:96:fb:43:83:e2:f5:a1:e2:6c:40:f4:b0:48:
37:8d:f3:69:d2:88:17:40:b0:93:b2:98:98:b5:c4:
cb:f0:7e:a1:78:31:e9:85:fe:ce:f5:00:a6:77:e1:
ea:b7:60:f9:65:da:46:91:88:3a:06:1b:07:a3:5a:
b4:24:b8:de:bb:31:01:af:36:07:48:cd:7d:8d:dd:
81:cd:7a:d4:1a:d4:f5:0c:b2:98:52:f2:b9:6b:a6:
73:31:b2:72:3c:63:ac:c4:00:e6:6e:f5:ee:6d:ab:
ea:32:ee:43:b9:df:37:00:20:87:70:94:1d:f8:b9:
a7:85:d2:74:b6:78:ab:cd:75:84:a1:e7:f9:40:1c:
27:ec:67:31:ec:61:dc:b7:01:63:97:69:ec:03:c0:
32:96:4b:c7:df:32:e3:3b:0c:b0:5d:ef:db:f1:70:
35:b0:dd:87:51:ed:e5:87:e4:55:72:80:8a:3e:3d:
e4:7b:04:14:8d:d5:7e:30:3c:52:85:d5:6b:69:e2:
49:f6:58:00:90:92:54:a6:33:2d:1c:09:49:f1:99:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:CA:A7:5B:94:5A:E9:AD:DA:F9:CE:7D:10:B6:58:F6:88:E7:3D
X509v3 Authority Key Identifier:
keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.196.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ab:24:fd:31:13:cb:91:03:09:bb:cc:51:15:3c:02:3d:76:
43:81:f5:a4:ba:64:39:15:d0:5f:04:96:16:dd:07:4c:6f:82:
a8:e8:44:5e:aa:c1:8d:53:18:86:94:1c:6e:bb:7e:1b:60:64:
fe:b0:82:aa:9b:73:d1:41:13:8b:5e:5a:63:8e:2d:b6:7e:8c:
2b:f8:f4:d7:7c:3d:70:50:14:6f:99:fb:d4:1f:7a:37:d7:99:
64:7c:32:68:19:af:c4:bf:73:99:96:22:38:c7:c7:00:3a:7d:
34:67:40:65:ca:cc:a7:8e:8d:de:d5:94:e0:6c:aa:d0:5b:65:
45:0f:21:3f:4a:b3:0a:59:1e:49:33:e9:57:48:cd:c2:d2:b8:
cc:48:11:dc:79:ee:e4:16:00:64:38:13:4f:91:8f:18:bf:c6:
da:56:ab:15:59:e6:8d:fb:2d:bb:c4:83:20:d0:c3:3c:85:82:
05:b3:7c:c5:77:67:63:9e:f9:f0:af:a7:97:25:6f:50:c8:0e:
3c:e7:37:5c:c0:d6:2e:84:6b:a4:be:d4:3a:cc:bc:e2:66:fd:
80:41:4d:28:0d:3e:cf:42:ad:96:7d:73:4a:94:68:cf:e2:2a:
85:ad:3a:8e:05:d6:91:69:90:cb:de:6b:f0:e2:42:02:86:d4:
eb:20:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:53 2025 by rpki-client