Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa
File: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (raw, json)
Hash identifier: ZkP1Z20iRwsdlzNftqM2do7k6nScKN7bPLY363Wwabc=
Subject key identifier: A1:3B:10:AF:7F:43:BF:C8:75:4C:C1:A6:13:46:C0:39:DE:F2:E3:D1
Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933
Certificate serial: 63EF3FBCAD2E3F32A5BCB38C1224284AD2938389
Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa
Signing time: Fri 19 Jul 2024 17:00:00 +0000
ROA not before: Fri 19 Jul 2024 16:55:00 +0000
ROA not after: Fri 18 Jul 2025 17:00:00 +0000
asID: 147078
IP address blocks: 103.173.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ef:3f:bc:ad:2e:3f:32:a5:bc:b3:8c:12:24:28:4a:d2:93:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933
Validity
Not Before: Jul 19 16:55:00 2024 GMT
Not After : Jul 18 17:00:00 2025 GMT
Subject: CN=A13B10AF7F43BFC8754CC1A61346C039DEF2E3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:bc:92:dc:4d:be:a0:2f:52:aa:b8:08:f1:
9d:38:82:70:5e:0c:3b:10:7f:37:a3:53:50:d6:3f:
32:12:a6:61:71:a2:45:a9:ee:ca:68:99:fb:0f:5e:
f6:20:cd:5a:27:4b:bf:c4:00:d4:a8:61:58:53:1c:
93:c6:80:77:12:ae:fc:1c:26:ea:56:9d:53:51:41:
de:1a:d1:bc:b6:95:9b:cc:24:2d:0c:5f:75:6d:13:
f6:83:01:a8:5b:55:42:7e:47:bc:cb:09:4e:bf:8a:
41:66:69:f5:d7:b2:41:bd:a1:0b:08:95:16:e4:0a:
33:03:ae:46:39:d0:4f:36:71:37:d9:2e:61:6f:37:
ff:d6:68:80:28:b0:45:56:0c:43:eb:01:1f:8b:3e:
f3:b9:e7:5b:5e:87:f8:cf:4e:69:e1:b8:a1:ab:54:
cc:ad:f4:fb:bd:32:fa:3a:b2:9c:53:1a:91:20:4d:
36:42:ad:9f:3e:3d:21:79:77:d0:c1:87:7f:00:95:
82:d8:c4:76:80:05:ad:7e:2a:ad:42:4d:04:cb:df:
88:41:0f:2c:9c:6f:0d:46:aa:2c:1b:3e:01:09:91:
b7:b2:a6:0d:48:e2:70:c5:48:ea:cf:c0:68:8c:ab:
33:21:09:7b:62:6b:1f:d6:e3:cb:99:bc:f8:29:f5:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:10:AF:7F:43:BF:C8:75:4C:C1:A6:13:46:C0:39:DE:F2:E3:D1
X509v3 Authority Key Identifier:
keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:30:51:bb:8b:0d:c3:5e:1a:67:2a:6c:e8:35:ae:f4:b3:aa:
62:bd:68:9d:fa:2b:88:de:44:3c:f6:42:c4:02:1c:18:18:6a:
45:64:79:1d:da:7a:1f:38:23:36:6a:3b:50:80:a8:cf:06:73:
5e:fd:c3:0d:aa:04:38:f3:a3:61:b3:82:d5:7d:85:0e:a4:a7:
da:50:8d:8a:29:9a:f6:b5:5d:47:67:24:97:07:87:17:8c:57:
a3:62:d9:77:b4:c3:73:a0:64:6b:2f:85:fb:a2:b4:52:28:c6:
7b:76:e1:d2:48:9e:61:9f:03:25:93:62:ed:a8:14:6f:dd:c3:
7e:77:09:f6:18:74:6d:da:12:61:39:ea:9c:01:27:58:cc:82:
86:08:08:ec:5c:65:c8:93:57:20:47:e6:3f:da:7d:c5:ed:f3:
4d:d9:2c:e9:d2:09:41:41:42:21:44:0b:be:c9:78:c5:7d:44:
17:fa:5f:57:34:d3:14:61:cf:f6:ca:8b:71:59:7d:9e:22:85:
20:72:f9:b5:89:f5:50:44:f7:8a:03:04:02:aa:18:6c:9f:e6:
08:ab:34:5f:06:8b:9a:e6:dd:c6:14:bd:fe:f0:d7:f9:a5:c0:
07:3d:ca:e8:42:9b:f9:47:62:7f:05:0b:a9:17:08:de:d0:6c:
55:2c:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:13:18 2025 by rpki-client