Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=
Subject key identifier: 25:21:4B:7B:2E:85:E1:AD:6E:16:E7:A4:34:60:DC:E2:04:CE:42:67
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 3B95C84FE2FE9FBC1F1032CFF6D8ABADE33FDD95
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 02 Dec 2024 14:39:31 +0000
ROA not before: Mon 02 Dec 2024 14:34:31 +0000
ROA not after: Mon 01 Dec 2025 14:39:31 +0000
asID: 136087
IP address blocks: 103.87.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:95:c8:4f:e2:fe:9f:bc:1f:10:32:cf:f6:d8:ab:ad:e3:3f:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Dec 2 14:34:31 2024 GMT
Not After : Dec 1 14:39:31 2025 GMT
Subject: CN=25214B7B2E85E1AD6E16E7A43460DCE204CE4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:e9:d2:b1:e1:9a:f7:a6:7a:52:67:04:78:
fd:30:c3:7a:66:c5:67:c4:04:cd:e2:22:2f:b4:72:
56:b8:1a:0e:77:70:6e:a0:9d:19:38:3b:61:74:89:
8a:a3:75:bf:5b:c9:e6:17:11:cc:90:a1:fc:4d:0e:
98:8f:f0:06:ac:d6:40:5d:52:eb:49:01:3e:65:39:
58:5a:13:31:23:e5:15:8f:a0:9e:25:75:f4:d8:9f:
be:76:ca:80:dd:ce:44:83:22:6f:be:8b:83:19:89:
86:50:82:8e:a8:70:01:4f:c0:56:c4:78:2e:93:39:
3d:23:cc:52:25:5f:3f:82:14:42:5e:2e:4b:2d:8a:
a9:06:08:a5:b8:13:a0:11:08:34:14:01:5c:08:d1:
b7:43:a6:81:d8:ab:c1:92:0c:19:cd:53:ec:7c:d6:
8e:97:46:08:dd:4a:a2:e1:84:4b:f3:62:f1:55:51:
56:45:9b:06:a0:48:6e:d1:84:6c:9f:46:1c:76:d4:
5f:21:7e:08:69:f8:70:23:1b:23:47:54:08:bd:bc:
88:8d:0f:a1:3d:4a:55:17:4f:0c:1f:64:a1:4c:af:
37:77:ae:cc:5b:d1:e5:d1:bc:b7:a0:5e:68:0e:c1:
6c:ab:ef:61:ea:9d:65:a3:ee:d2:49:ec:19:6c:09:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:4B:7B:2E:85:E1:AD:6E:16:E7:A4:34:60:DC:E2:04:CE:42:67
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6e:73:da:79:80:f5:51:07:6f:7b:2a:c7:ba:cd:b0:e2:0f:
91:89:67:cd:d6:1e:a0:d5:07:de:84:b9:a5:01:c7:06:60:23:
81:c5:0c:58:15:dd:c5:a1:d9:19:80:dd:2f:48:8a:00:89:83:
9b:da:6d:e6:73:d9:f8:4c:41:e1:45:c8:8c:69:ca:27:72:49:
8a:6d:36:0b:12:6b:41:f9:54:16:0c:fc:ee:e5:68:0d:51:c0:
c3:38:08:c0:75:8d:0c:6c:7f:c9:6c:48:27:a1:ef:69:fe:60:
f7:a7:36:75:ec:70:a5:48:ff:93:84:92:d7:52:5b:7c:db:9b:
85:08:fc:3e:71:8f:ba:26:79:ac:61:e7:39:0f:d4:1d:84:b0:
6d:db:a9:87:ba:21:83:8e:84:39:77:74:f8:4f:88:08:34:9f:
a0:9d:72:5e:1b:8f:f6:9a:85:8e:34:e9:59:3e:bb:52:3b:cc:
3f:c2:27:13:88:25:f6:3a:be:22:1a:9a:bf:14:3f:14:4f:93:
ba:e9:02:82:c4:bc:99:04:7b:4d:8f:bb:c0:59:2c:34:a7:5c:
b2:83:03:1a:ab:d2:cc:b8:2a:9f:d6:8a:aa:61:4d:74:88:17:
0e:ae:8c:ee:01:be:d4:48:69:7b:96:32:60:58:ba:95:00:15:
98:cb:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:45:58 2025 by rpki-client