Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa
File: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (raw, json)
Hash identifier: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=
Subject key identifier: FD:4F:D8:C4:65:E0:23:7F:DD:B4:71:18:F5:2E:F1:E0:48:D4:74:3E
Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Certificate serial: 3FD7629FDA5615F0B83D2A71FF544151734208EC
Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa
Signing time: Thu 28 Nov 2024 16:00:02 +0000
ROA not before: Thu 28 Nov 2024 15:55:02 +0000
ROA not after: Thu 27 Nov 2025 16:00:02 +0000
asID: 141639
IP address blocks: 103.162.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d7:62:9f:da:56:15:f0:b8:3d:2a:71:ff:54:41:51:73:42:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Validity
Not Before: Nov 28 15:55:02 2024 GMT
Not After : Nov 27 16:00:02 2025 GMT
Subject: CN=FD4FD8C465E0237FDDB47118F52EF1E048D4743E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:4a:da:29:61:c6:83:b0:f1:41:01:8b:63:
2a:ec:01:8d:82:05:3f:11:ee:9e:a3:e4:8e:45:47:
89:6d:63:ac:51:a9:8c:3c:9d:be:4c:fe:19:b0:61:
f8:12:01:64:18:a1:c6:d9:b6:d4:3b:00:9e:0a:cf:
b7:c2:f7:4c:13:2b:a3:8f:a5:3c:b4:6e:ce:7a:a4:
23:ef:54:63:a9:6f:c9:c0:3f:76:f6:7f:d3:45:59:
50:b0:59:d2:3a:c1:28:f8:59:49:06:65:14:27:9f:
08:ad:45:37:df:77:94:10:cc:24:50:3e:30:6c:27:
75:92:73:db:35:e7:f3:41:0a:5a:c3:96:64:b8:70:
16:69:9d:bd:f0:0e:7b:19:7e:ea:d1:4d:3a:df:93:
30:ab:d8:db:71:4b:77:c1:1a:64:56:8a:52:3b:54:
77:81:1d:59:fa:82:b5:67:57:9b:99:02:ec:24:cc:
c5:bd:a8:1f:eb:8b:0c:b5:23:06:32:07:a6:aa:52:
29:a2:f7:bd:61:ec:cf:55:5c:f1:81:36:5e:f3:02:
37:1a:cb:d2:b8:04:ff:86:5a:55:eb:09:82:df:b3:
6a:f5:34:7c:41:8d:b8:8b:d9:22:aa:18:e6:8d:2c:
1d:30:84:d2:39:b1:03:f7:40:8d:43:79:53:62:db:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:D8:C4:65:E0:23:7F:DD:B4:71:18:F5:2E:F1:E0:48:D4:74:3E
X509v3 Authority Key Identifier:
keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.37.0/24
Signature Algorithm: sha256WithRSAEncryption
94:27:94:88:71:1e:35:51:cc:65:fe:9c:18:2a:c5:1f:4d:0d:
8a:27:b1:d9:64:f3:ad:fe:b4:9b:05:59:54:98:bf:14:41:14:
6c:4c:78:31:58:47:64:44:f6:3d:af:56:87:f3:bb:32:b7:bf:
dc:00:6d:71:5d:02:6c:b4:ae:47:e4:ec:74:4e:83:36:66:55:
76:34:dd:77:83:fa:dd:1d:cd:4b:b3:24:24:a8:24:73:b3:c6:
64:f2:eb:b8:7c:da:0f:27:3c:cc:e7:f3:ac:49:5c:6a:b8:c8:
ad:08:00:d1:47:30:de:74:b2:88:08:b1:86:79:f9:24:e3:b1:
d0:ff:17:75:df:67:1e:96:60:b7:87:de:6a:36:c5:ac:60:2d:
78:7d:de:2d:cd:17:95:9a:8e:26:98:58:93:97:ed:50:38:45:
44:42:e2:79:e6:f3:f9:94:ea:54:4b:7d:91:d3:2f:97:b9:38:
da:b2:77:46:04:ac:95:6e:d0:2f:ee:60:d4:b7:dc:ca:35:51:
68:d0:41:d6:ba:3a:56:94:ab:75:22:72:ca:41:bc:d6:c8:0a:
16:1b:4a:47:3c:38:62:98:c4:b1:0a:38:f6:75:60:54:76:30:
9b:ac:94:90:d5:90:21:16:fd:85:36:38:f7:4c:fb:53:ab:2b:
7c:84:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:32 2025 by rpki-client