Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
File: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=
Subject key identifier: 34:8F:1D:78:AF:0A:58:BF:EA:E2:78:CE:5F:9C:25:CC:77:AD:F3:39
Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial: 5AA7D7BD64DAECF2F646A1F102C362564ADD075B
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
Signing time: Fri 21 Feb 2025 09:01:02 +0000
ROA not before: Fri 21 Feb 2025 08:56:02 +0000
ROA not after: Fri 20 Feb 2026 09:01:02 +0000
asID: 149315
IP address blocks: 103.186.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a7:d7:bd:64:da:ec:f2:f6:46:a1:f1:02:c3:62:56:4a:dd:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Validity
Not Before: Feb 21 08:56:02 2025 GMT
Not After : Feb 20 09:01:02 2026 GMT
Subject: CN=348F1D78AF0A58BFEAE278CE5F9C25CC77ADF339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:ab:f3:20:41:e5:f7:db:0d:69:25:6d:10:
56:82:ac:1f:5b:f0:54:8f:00:22:51:80:b3:fa:56:
13:17:37:56:24:e5:2a:db:10:d0:03:05:e0:b1:e2:
55:c1:7f:19:ac:a7:df:26:27:de:4a:53:86:64:31:
6b:4c:f5:41:92:57:a4:25:fd:03:f3:b0:51:b1:80:
fe:06:1f:c1:7e:55:3f:42:ed:9d:d7:82:74:d2:66:
be:7d:80:33:22:6c:5b:c3:c9:cc:b0:ce:49:6a:fd:
8d:30:07:6a:52:a2:d4:3c:e2:85:6c:42:ab:df:40:
14:86:b1:21:5d:a5:ae:78:96:70:5d:50:8a:7e:dc:
92:14:88:8f:c2:be:6e:6a:c8:37:91:57:a8:50:e9:
86:50:3d:d3:cc:f7:d5:6d:3a:f3:f8:25:89:3b:3c:
b7:a4:46:ee:d8:a4:a3:db:8e:08:c9:ef:f6:5a:6b:
4a:01:85:78:41:d9:c6:20:4d:65:05:06:a4:0e:8d:
fe:b6:2f:17:27:ed:fe:31:fc:f2:6d:a4:f1:1d:7c:
b0:7c:2c:0d:90:14:84:d0:bd:b5:6f:86:f9:ae:b0:
c4:67:54:0d:30:3d:7b:98:eb:ff:b9:d0:c9:09:d6:
73:a7:1c:a5:6f:43:cb:bf:b7:16:97:6c:f6:52:37:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:1D:78:AF:0A:58:BF:EA:E2:78:CE:5F:9C:25:CC:77:AD:F3:39
X509v3 Authority Key Identifier:
keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.168.0/24
Signature Algorithm: sha256WithRSAEncryption
86:68:a2:94:56:15:96:06:32:e7:36:53:6b:cf:14:76:d3:a5:
69:de:dd:32:4b:c4:54:61:ae:d6:7f:e0:a5:f0:18:6d:b0:4e:
5e:e8:e3:40:19:df:36:c0:6d:ca:73:9d:ec:11:0b:a1:6f:3b:
11:b6:fb:4e:3a:bc:18:89:35:d4:fb:0a:6e:e7:59:e3:7f:f5:
50:d6:d9:85:9f:d8:1f:86:e2:d3:1b:c2:b0:88:d3:52:26:2c:
83:ed:a3:ad:c8:6f:ac:66:82:ff:12:4a:3d:1a:58:9f:04:b9:
3f:bb:30:40:fd:59:ae:04:74:52:78:c1:44:00:85:52:c7:5f:
86:23:08:17:f8:d2:46:cb:0e:25:05:86:02:9f:96:79:18:24:
70:1f:fe:86:92:35:24:52:26:28:75:d3:bd:aa:96:e7:74:06:
e5:5f:13:b7:66:97:03:89:06:f7:dd:f9:02:70:76:ef:e0:aa:
95:4d:15:30:ed:2c:31:08:27:66:c7:72:3b:5e:7c:a1:bf:59:
be:c6:1d:46:77:42:a0:15:47:b5:7b:dd:b1:8e:80:eb:3e:eb:
db:a9:a5:a5:61:3b:ef:a0:5c:b0:a6:db:92:ec:82:7f:18:d6:
06:84:9f:30:03:0a:88:16:ab:f4:19:c8:78:e7:7f:19:00:3c:
7e:fa:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:35 2025 by rpki-client