Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa
File: 3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa (raw, json)
Hash identifier: uLShdDz31wKsxyvOiW52gFBOVdF3+UV9dVHHCc2BVjM=
Subject key identifier: DB:A7:5A:E2:75:19:A2:46:01:04:EB:1F:AB:F0:DC:59:E8:DD:2F:08
Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Certificate serial: 3867B3233BBC6A0980AD572827AC061623FBB649
Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa
Signing time: Thu 26 Oct 2023 06:01:13 +0000
ROA not before: Thu 26 Oct 2023 05:56:13 +0000
ROA not after: Thu 24 Oct 2024 06:01:13 +0000
asID: 131755
IP address blocks: 103.31.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:67:b3:23:3b:bc:6a:09:80:ad:57:28:27:ac:06:16:23:fb:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Validity
Not Before: Oct 26 05:56:13 2023 GMT
Not After : Oct 24 06:01:13 2024 GMT
Subject: CN=DBA75AE27519A2460104EB1FABF0DC59E8DD2F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:ab:73:51:cb:92:7d:a8:50:af:2c:4f:cf:
13:b6:8a:70:22:cb:25:63:a7:c1:1e:c9:d7:5d:cf:
a7:4f:83:7d:e8:68:5b:27:bb:76:6a:01:0a:37:e1:
bb:84:18:72:08:83:c5:cb:78:e1:72:f5:4a:7d:bf:
12:11:33:8a:fb:b4:1c:c3:51:c4:14:b3:62:a1:17:
51:97:d2:c1:dc:97:4a:d6:94:a8:f4:76:d4:0b:0d:
63:29:73:0d:da:57:f0:da:1a:d3:5f:71:cf:a3:a6:
99:bb:24:53:77:8e:e1:ba:3e:56:2d:99:09:fb:f0:
57:b3:60:93:60:c7:77:f1:09:10:2a:88:0c:01:bd:
8b:d1:d6:6b:44:c9:10:87:af:ad:a4:7c:98:22:bb:
aa:d8:45:6d:ad:83:c1:ef:2c:29:9c:b7:f7:2e:5e:
bd:19:5f:ac:51:d4:cc:b3:ee:97:9f:b5:17:8e:0a:
44:a3:a1:d6:c4:8f:5d:1c:c1:ad:eb:bf:61:ae:39:
78:20:97:cb:06:7b:7c:16:3d:89:59:0b:2f:1c:e1:
21:bc:4b:9b:84:cb:82:ce:3b:ab:11:4b:85:34:7f:
07:ac:56:8f:54:ac:be:08:33:16:89:b7:81:e4:26:
59:b4:ec:6d:06:d0:e4:7b:f1:ea:1a:42:08:b7:f3:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:5A:E2:75:19:A2:46:01:04:EB:1F:AB:F0:DC:59:E8:DD:2F:08
X509v3 Authority Key Identifier:
keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:05:f9:b1:a2:9f:88:87:21:bb:87:58:51:68:9e:a2:e1:13:
a6:d7:70:21:f8:3e:54:80:6c:1a:5b:15:37:bc:58:65:d3:71:
ed:7a:3c:20:3a:6d:db:e1:7c:56:4b:0b:0f:51:da:49:ac:41:
e4:65:22:ea:48:90:4c:7d:4b:23:fc:82:f6:8c:34:50:41:b9:
42:c7:5f:85:13:dd:cd:77:66:f1:5c:de:7f:74:28:1b:eb:9f:
1f:aa:a5:6e:03:4c:71:9d:00:f6:93:83:f7:23:10:8e:3d:a5:
01:c3:da:03:e7:b4:c9:f4:51:6c:bb:23:13:1f:d9:6e:07:30:
80:97:d3:b4:74:3c:b0:c8:b9:82:89:78:3e:2e:eb:bf:db:70:
f2:d0:4e:cb:dc:c7:67:15:97:d3:a5:47:9f:73:81:1a:83:84:
d2:9d:29:c5:12:e8:18:8c:5f:82:d1:f0:2e:1b:ec:07:8b:a0:
c9:95:9c:86:21:1c:39:ce:44:d9:aa:67:a7:53:8b:f3:a2:aa:
52:ff:48:59:7c:f9:bb:10:82:8b:d8:70:df:ee:78:ea:d9:89:
90:ab:f4:8a:d0:b4:ac:46:64:91:ea:f5:dd:ce:16:e7:14:e2:
d0:14:4f:0d:76:5c:36:cc:6a:de:39:d4:5c:8b:30:de:ae:22:
76:41:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:07 2025 by rpki-client