Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa
File: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (raw, json)
Hash identifier: XrO+qd1BLoaQBLZxMj2i0RtL9NTY4yJgufeeYQXCG4g=
Subject key identifier: 08:67:DD:FB:10:F9:DC:03:1E:85:1D:E6:55:2C:EC:E0:A1:C8:06:BA
Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Certificate serial: 093492395867719E710E1CE1D9C376F9B24DA08B
Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa
Signing time: Wed 08 May 2024 15:00:00 +0000
ROA not before: Wed 08 May 2024 14:55:00 +0000
ROA not after: Wed 07 May 2025 15:00:00 +0000
asID: 142343
IP address blocks: 103.169.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:34:92:39:58:67:71:9e:71:0e:1c:e1:d9:c3:76:f9:b2:4d:a0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Validity
Not Before: May 8 14:55:00 2024 GMT
Not After : May 7 15:00:00 2025 GMT
Subject: CN=0867DDFB10F9DC031E851DE6552CECE0A1C806BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:aa:48:cb:3b:83:f6:a2:40:0b:c2:5c:47:
24:e3:d3:b1:1e:1e:d5:9d:78:68:6b:2f:43:aa:f8:
72:53:fb:da:c3:61:6d:c3:4c:b8:ff:24:d3:24:42:
09:1b:d9:94:6a:73:4b:b7:98:4b:9e:f6:9a:66:03:
67:c9:ef:5d:cc:0d:09:24:6c:44:4a:5f:74:92:5b:
55:9d:23:a0:4e:1e:1b:fb:e0:53:c8:1c:66:ac:da:
cd:3c:b6:6d:00:a9:5b:5d:ae:c7:3a:d2:de:35:da:
1e:fe:32:27:c6:a3:5d:eb:53:f8:c2:06:5a:8c:04:
d0:05:12:36:ac:53:e9:ba:d1:c5:62:23:58:c1:6a:
64:95:73:49:4d:3d:8e:3d:81:bd:72:c8:82:03:81:
0e:7a:0a:c0:54:39:38:dc:77:71:c5:1d:e1:4a:40:
47:bc:f5:25:a7:54:47:3b:db:0e:fd:b1:e2:fd:b6:
37:6d:8c:36:97:97:f0:7c:93:d0:e2:46:f7:bd:fe:
6c:93:70:c0:7d:d7:2b:bd:7e:2b:e7:d8:8b:47:c5:
6f:41:f2:45:e4:4e:28:52:a1:67:00:85:63:24:c6:
c7:fa:6b:c7:a6:2f:e0:b4:97:a9:81:1c:5f:55:3d:
38:89:cc:1d:7e:6c:92:4b:c1:38:1b:e6:85:e5:af:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:DD:FB:10:F9:DC:03:1E:85:1D:E6:55:2C:EC:E0:A1:C8:06:BA
X509v3 Authority Key Identifier:
keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.138.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:5e:1d:ad:83:2a:49:0b:e4:b5:0f:76:37:23:a8:73:b6:c2:
10:82:00:ad:5e:47:ae:11:de:26:c4:ca:da:42:0c:1e:f9:ff:
01:d4:c7:ab:1a:7d:78:e3:25:3d:77:0a:93:e2:f0:fb:23:9a:
b4:b4:78:00:80:c9:b1:70:48:a3:7c:2e:80:39:9f:1f:39:ea:
f0:1e:dd:59:e6:89:1d:ea:fa:aa:01:b6:e9:9a:94:ef:33:6c:
b2:dc:83:79:af:7c:e3:49:f7:10:99:52:51:cf:21:f7:27:00:
58:bd:b0:00:0f:6d:fa:13:80:be:e3:b9:bc:7b:db:36:af:ef:
58:99:39:f4:39:85:7d:b7:ab:ce:9d:42:35:c7:ad:f8:2e:f6:
f2:ff:8c:a7:8e:ed:d2:7f:b8:c8:3f:00:1a:fd:25:d0:95:73:
12:e5:1f:44:31:e4:3b:a5:c7:c1:19:b5:7f:29:0a:da:9c:61:
60:6a:35:67:a5:d2:2a:4a:da:b6:1c:ed:b3:50:99:1c:27:48:
64:a2:66:dc:aa:f1:1c:7c:2c:bb:9b:01:28:df:cc:bb:a5:bc:
48:a5:0a:ec:b8:61:78:12:73:43:4c:b2:8e:b5:19:a5:00:f5:
65:41:20:f0:86:ac:49:36:16:c2:89:d1:e6:d6:33:bd:a0:17:
2e:c0:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:43 2025 by rpki-client