Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
File: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier: cHHw0UulS9efoCRVWEHcUeIofmpqj0zukjuGOqznvlo=
Subject key identifier: CA:9E:18:A8:18:01:B3:36:11:C4:2A:02:07:55:7E:AB:87:48:6A:46
Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial: 77B426DE2CC2CFCCD15723797CC83B277B3AB2F2
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
Signing time: Thu 21 Mar 2024 04:02:27 +0000
ROA not before: Thu 21 Mar 2024 03:57:27 +0000
ROA not after: Thu 20 Mar 2025 04:02:27 +0000
asID: 150274
IP address blocks: 103.39.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b4:26:de:2c:c2:cf:cc:d1:57:23:79:7c:c8:3b:27:7b:3a:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Validity
Not Before: Mar 21 03:57:27 2024 GMT
Not After : Mar 20 04:02:27 2025 GMT
Subject: CN=CA9E18A81801B33611C42A0207557EAB87486A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:9f:f8:bc:cb:a8:cd:13:f3:c9:d8:88:42:
23:1d:8a:2e:72:4c:2a:7c:c1:93:e9:3b:72:7a:4c:
14:f3:eb:0a:f6:77:54:52:b8:4b:13:fc:f5:e8:8c:
66:93:35:1f:e9:f1:95:84:9b:a7:5f:32:18:88:4d:
97:27:b6:54:b5:02:8a:38:3e:f3:71:3a:34:87:d8:
e4:75:88:02:78:7a:11:5b:c8:a3:e4:d8:4d:15:ed:
c6:57:f2:51:4a:2a:37:cc:b0:99:03:0a:97:97:a4:
d5:20:9e:34:cd:6e:6c:d8:90:3f:4e:a6:73:42:58:
6e:16:34:b7:54:cc:79:3d:78:bc:29:cb:e4:46:fd:
e6:d8:dd:c8:42:42:2d:5c:44:1f:67:86:53:1c:7e:
fd:ea:8f:6e:e1:89:d5:a1:2b:3c:f1:ee:d6:de:79:
19:6e:9d:89:81:ab:b3:67:0d:b0:56:1b:38:87:b7:
53:2f:0a:9b:86:d4:91:95:04:9f:29:75:dd:73:df:
34:80:92:2f:c9:fc:b2:5b:83:80:cd:8e:25:6c:de:
96:5f:d7:5d:c2:b8:8c:e9:33:f5:e9:16:c9:06:8d:
d9:17:ed:6a:cf:6b:ca:11:69:8a:ca:17:f8:b8:fd:
76:e6:a8:19:fd:64:da:32:c2:5a:c1:b7:40:d7:78:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:18:A8:18:01:B3:36:11:C4:2A:02:07:55:7E:AB:87:48:6A:46
X509v3 Authority Key Identifier:
keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:de:db:a7:c4:0d:53:ea:7b:a5:62:d0:e0:5c:2b:f2:ca:9a:
f2:6f:a9:cb:de:f5:66:22:16:18:04:36:b2:63:7c:99:04:54:
fa:b8:75:b2:37:14:06:b3:93:ce:e8:fb:19:65:d7:b5:7d:22:
9a:eb:2d:10:7b:c4:6c:0f:36:26:d2:db:44:8e:3a:39:37:45:
9a:90:a2:21:0e:cd:f2:1a:a0:d0:7b:26:5e:68:e5:91:d0:18:
4e:99:d3:8e:47:2b:73:e7:fe:5a:2c:f6:64:3b:7c:5e:64:e1:
d9:85:62:9e:26:65:ff:7e:2b:f0:95:4e:59:af:c2:de:e9:ea:
14:bf:6b:41:c2:4e:00:18:53:0a:e6:dc:5b:f8:88:0e:69:8f:
13:ab:4f:9d:fd:6f:7b:76:1e:26:59:f5:a6:21:cb:0e:36:9e:
92:dc:be:07:53:85:42:c5:3b:ff:4b:38:f9:c6:55:3a:61:7b:
d0:95:34:c8:de:15:c2:6d:1f:7c:ed:cc:e5:82:4d:76:df:79:
5d:e0:f0:99:8c:cd:ee:7a:06:ca:06:c2:7f:eb:b7:b1:13:1b:
01:59:ff:48:c2:ea:f3:09:b5:99:16:3d:12:1a:47:2e:9d:df:
70:bd:4f:15:41:66:25:0d:1e:a7:4e:7e:6c:23:2e:08:b0:09:
a7:0b:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:59 2025 by rpki-client