Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
File: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=
Subject key identifier: B7:23:5F:12:4B:1F:CD:1E:10:9F:50:FC:8F:7D:26:83:5C:2D:F9:36
Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Certificate serial: 15E2AAF6B9E4806A368548229DDF328FED8A2F76
Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
Signing time: Tue 28 Jan 2025 10:01:07 +0000
ROA not before: Tue 28 Jan 2025 09:56:07 +0000
ROA not after: Tue 27 Jan 2026 10:01:07 +0000
asID: 9341
IP address blocks: 103.180.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e2:aa:f6:b9:e4:80:6a:36:85:48:22:9d:df:32:8f:ed:8a:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Validity
Not Before: Jan 28 09:56:07 2025 GMT
Not After : Jan 27 10:01:07 2026 GMT
Subject: CN=B7235F124B1FCD1E109F50FC8F7D26835C2DF936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:2f:e9:c2:bd:d1:c4:cb:d9:59:7e:bd:57:
d8:57:d5:7b:66:5b:e8:6c:96:31:4e:cc:26:02:74:
c6:dc:b0:a2:eb:41:73:d2:f5:38:ff:8a:43:52:3c:
6e:ed:a6:cd:2e:89:55:2b:f7:93:ee:fa:8d:91:3e:
e7:c6:56:df:6c:77:2d:2a:ed:1b:3d:af:20:d0:7e:
66:c2:52:63:05:97:a9:48:f0:5d:e2:aa:f0:af:c5:
64:99:72:e1:0d:c1:a6:b1:35:91:34:b2:a8:09:d0:
7a:c4:5b:cc:ca:88:79:fd:e4:ce:08:84:c0:41:14:
d8:82:aa:fd:9c:5c:24:87:3d:b7:63:c3:7a:cb:9c:
48:11:2f:0f:62:17:9b:de:3d:81:60:8f:d3:29:df:
2f:86:aa:ef:de:3c:4c:e0:42:75:6e:89:bf:93:a9:
a8:fb:2a:af:0b:22:26:fd:5a:ee:fa:2b:97:9e:4a:
a6:ea:f3:13:55:33:b2:6e:a1:b2:a0:55:4e:5c:17:
d5:e8:d4:76:31:ea:5c:8c:18:57:d9:ea:31:1b:63:
51:be:b1:23:e1:92:be:28:cb:2a:32:7f:e3:16:9c:
e4:52:b7:17:de:bd:8e:88:58:03:1d:92:e6:6b:f4:
94:f4:92:28:4a:cb:5f:d4:56:bd:95:60:51:62:44:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:5F:12:4B:1F:CD:1E:10:9F:50:FC:8F:7D:26:83:5C:2D:F9:36
X509v3 Authority Key Identifier:
keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.58.0/23
Signature Algorithm: sha256WithRSAEncryption
53:dd:08:7f:ca:7c:c6:71:46:b2:cc:f6:ae:b6:5d:c3:b0:d6:
fd:8e:c7:4d:36:2c:f3:36:09:c1:8b:40:0e:d5:a7:11:83:2a:
d4:92:77:ab:d3:14:a0:58:b9:a6:48:93:cd:9f:93:47:36:3f:
d6:d1:5e:08:7c:b1:b6:e1:ab:c5:34:66:c7:17:0a:18:7f:45:
a6:10:55:d9:71:f3:e6:30:86:50:b5:d8:4b:27:71:94:b1:52:
e3:aa:74:b1:5f:b7:06:ab:76:ff:63:c9:43:e8:f9:f4:26:04:
e7:d7:5d:54:33:9a:ad:41:17:bc:f4:52:0f:7b:1c:a9:24:65:
04:fa:1f:0e:36:11:cf:9c:d6:ec:6e:65:ef:10:13:c7:51:96:
90:2e:ea:93:27:1c:0e:60:65:14:15:f0:49:5c:75:8e:42:4a:
4b:db:11:30:eb:bf:23:c7:cc:d0:3a:2b:a5:53:a4:a6:61:c9:
76:6a:58:6d:b8:98:9e:70:53:40:36:19:47:5a:c0:07:06:a6:
5e:2c:d6:fc:72:f4:32:64:08:23:d2:68:13:b4:bb:64:55:54:
d7:ca:13:d9:3d:a3:61:f7:36:6d:e2:33:21:61:3f:b0:9c:24:
fa:7a:ef:49:82:a5:c4:02:36:15:83:3f:be:0e:e2:e9:d9:0b:
13:56:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:35 2025 by rpki-client