Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
File: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=
Subject key identifier: 3C:15:60:3F:4C:BC:79:7B:9A:C6:84:CF:F4:28:10:33:DB:4F:51:46
Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial: 220CAD7029290F8D8060A651A4FA9D476A5CC7B9
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
Signing time: Mon 16 Dec 2024 10:01:15 +0000
ROA not before: Mon 16 Dec 2024 09:56:15 +0000
ROA not after: Mon 15 Dec 2025 10:01:15 +0000
asID: 50104
IP address blocks: 103.118.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0c:ad:70:29:29:0f:8d:80:60:a6:51:a4:fa:9d:47:6a:5c:c7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Validity
Not Before: Dec 16 09:56:15 2024 GMT
Not After : Dec 15 10:01:15 2025 GMT
Subject: CN=3C15603F4CBC797B9AC684CFF4281033DB4F5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:8c:28:df:e4:1c:05:d4:d2:bb:69:88:1d:
4d:11:7b:e1:e2:0e:3c:66:ce:82:85:b8:2f:bd:10:
90:01:ed:a5:cb:d2:ca:83:68:47:87:8c:a3:96:a8:
52:be:4b:c3:0b:3e:51:77:b7:fb:5f:15:94:db:43:
92:bb:0c:47:6c:a8:68:b2:f5:b3:68:e2:bb:41:9f:
64:4f:a0:a2:1d:52:db:d7:89:a7:e4:62:3a:ac:f7:
e6:91:c4:de:45:65:a2:dd:56:45:4e:63:a4:b3:d8:
52:eb:a7:38:ed:b1:93:54:c3:a4:e2:a8:2b:34:72:
26:26:0e:e7:c9:dd:f6:31:76:63:ce:b5:d9:07:51:
b0:9a:5a:a5:ae:ed:49:06:01:50:b6:5d:87:c8:dc:
d3:13:8e:f3:fb:74:42:31:f5:be:b3:31:20:c4:a1:
32:00:1a:1e:a3:e2:7c:19:ac:be:e0:c7:03:95:7d:
18:cd:4e:61:85:77:fa:9d:b6:4e:e2:42:c1:a3:9f:
f7:77:ee:3c:ea:99:c1:de:20:88:e7:2c:82:3d:71:
99:3f:6a:a4:e7:ee:4c:db:c6:9b:4b:54:65:7d:d3:
35:04:d6:ac:06:c0:69:93:50:4e:a7:d6:77:fe:3a:
89:a2:80:28:fb:0b:b1:54:a1:0d:06:89:a3:b2:e3:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:60:3F:4C:BC:79:7B:9A:C6:84:CF:F4:28:10:33:DB:4F:51:46
X509v3 Authority Key Identifier:
keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.174.0/24
Signature Algorithm: sha256WithRSAEncryption
20:55:bf:93:97:7b:84:8f:2d:3e:e5:90:e9:7c:25:67:56:b8:
18:ea:fc:dc:86:be:35:8f:f4:3c:42:0d:36:ce:a6:74:fa:2a:
17:3c:da:aa:02:23:9e:ac:c4:65:06:da:80:d2:58:ee:43:ee:
a7:08:62:ec:5f:be:12:2b:e5:79:e4:27:cc:59:26:a1:fe:10:
c8:93:83:b7:55:e6:2e:6f:b4:b1:30:02:1f:1c:37:14:09:a3:
f8:39:6a:95:89:22:a6:52:59:0d:77:ef:f0:d2:f9:3d:f7:bf:
d1:77:56:84:e4:47:0a:2a:25:ce:f7:3a:15:15:07:ba:53:c0:
1d:91:c6:7f:f1:1e:d5:d1:b3:9d:05:03:2f:b6:53:38:68:0b:
0a:ed:e2:1a:d1:43:dc:e2:d1:1f:ee:18:04:e3:86:55:63:cf:
a4:40:9a:6c:42:e0:f8:b1:c0:ce:d2:23:83:fa:28:c3:2f:3a:
88:8d:47:2b:d1:d0:5f:a0:e7:85:62:44:97:d1:be:d1:fc:5f:
e2:79:95:10:73:25:3b:5d:ae:8c:fd:66:06:16:06:07:71:c4:
00:02:40:ef:96:39:f7:82:d1:4b:59:ed:00:78:ca:ad:57:d0:
c4:d8:44:cd:92:b4:07:67:7f:6d:6b:5e:5b:73:39:c7:5a:36:
fb:1f:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:54 2025 by rpki-client