Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
File: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier: WzvmSiWQWwYgH40B1+/3AHPOfIuq88IrPHdJ84FYqhs=
Subject key identifier: 3D:8E:4A:1C:62:2E:3A:4F:CB:F6:98:A9:C4:09:7B:69:25:31:F6:E0
Certificate issuer: /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial: 60176EDD972501C6C1F515AF5DB37403C15CB395
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
Signing time: Wed 10 Apr 2024 12:35:36 +0000
ROA not before: Wed 10 Apr 2024 12:30:36 +0000
ROA not after: Wed 09 Apr 2025 12:35:36 +0000
asID: 141928
IP address blocks: 103.166.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:17:6e:dd:97:25:01:c6:c1:f5:15:af:5d:b3:74:03:c1:5c:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
Validity
Not Before: Apr 10 12:30:36 2024 GMT
Not After : Apr 9 12:35:36 2025 GMT
Subject: CN=3D8E4A1C622E3A4FCBF698A9C4097B692531F6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:32:b5:78:c2:96:21:70:40:0d:b7:86:a5:
fe:94:87:f7:a7:f1:60:8d:04:5e:d1:7b:90:c9:d8:
7f:1f:20:d8:cb:32:1a:ca:a0:e4:b6:89:3a:e1:06:
51:9f:8e:d6:bc:97:a6:54:e3:b5:28:da:a6:5a:2c:
8f:5d:d7:ba:55:10:bf:ea:d5:3b:ee:bd:bb:b0:05:
ee:84:5c:b3:27:49:4c:b7:8a:22:71:24:10:43:ec:
6b:f8:3d:83:aa:a4:e4:58:e2:68:3b:af:1e:89:69:
10:6a:0e:9f:02:f9:d1:f8:63:64:1c:4a:df:b8:1b:
4a:b5:90:fc:14:c1:3e:db:28:ef:83:2b:4e:5f:f9:
2c:13:83:a8:48:bd:d9:51:75:83:ee:43:04:35:b0:
0e:90:ca:07:fd:08:bd:ce:70:13:00:83:35:61:4e:
a2:1a:a9:b2:92:cb:e7:39:bc:c3:4e:dd:90:c8:1f:
0d:ae:5e:f4:13:cb:68:b6:cd:4c:d1:de:ff:5c:37:
9b:d4:07:4e:b2:3e:d5:eb:ac:fd:b4:88:5d:e2:32:
c8:f9:75:19:52:0b:42:0f:46:4e:1a:59:5c:7f:87:
a3:af:03:f4:05:07:3a:12:d9:61:ce:c0:90:71:47:
06:71:92:da:f1:19:a0:63:7e:aa:57:9d:b1:d1:25:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:4A:1C:62:2E:3A:4F:CB:F6:98:A9:C4:09:7B:69:25:31:F6:E0
X509v3 Authority Key Identifier:
keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3d:8e:06:22:ec:a6:f4:66:11:24:25:f4:43:c8:5c:1f:85:
0f:05:f6:f2:2f:02:47:1a:bc:ea:41:76:06:6c:0f:c4:5c:5f:
13:9f:fb:c2:da:28:fd:99:f1:ec:c0:27:3b:5f:86:55:46:81:
fd:f8:01:c2:d7:0b:ac:e3:52:8e:d3:ee:2b:fa:d2:d3:63:38:
95:39:74:a4:b2:36:ce:2a:7a:0c:52:f3:b7:51:5d:65:3a:8c:
81:c2:d7:60:e3:b9:0b:25:60:d6:a7:75:df:10:d7:c8:ea:d9:
e0:e6:9f:79:57:05:3b:bf:d8:f7:41:2e:71:7a:4e:4c:ae:1c:
a7:8b:14:34:47:c2:2d:b0:06:77:28:8b:6a:b3:60:6e:41:e6:
73:70:77:80:2b:76:1c:ad:b2:d6:fd:ef:66:48:40:d5:bb:50:
69:c6:f2:e9:86:2a:9f:e8:3c:32:d6:d8:ac:f5:af:37:87:6d:
70:95:c5:68:16:3e:1f:b2:a6:5e:e1:34:6e:fd:6b:2c:7c:1a:
c8:5a:1d:df:15:58:4d:22:f6:d9:15:1f:0a:b6:0f:db:da:94:
1f:be:de:83:f6:dc:0e:05:a4:5f:53:49:55:d6:a0:71:76:af:
a7:98:b0:6e:06:39:03:0c:45:69:3d:d2:22:c2:65:01:9c:ce:
0c:db:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:07 2025 by rpki-client