Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa
File: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (raw, json)
Hash identifier: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=
Subject key identifier: C1:16:04:2B:5F:15:1B:72:75:82:AD:17:D0:81:40:F6:B6:0B:B5:A0
Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Certificate serial: 3657FB549A138B3A9092625B233189FDF4746536
Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa
Signing time: Tue 08 Oct 2024 11:00:01 +0000
ROA not before: Tue 08 Oct 2024 10:55:01 +0000
ROA not after: Tue 07 Oct 2025 11:00:01 +0000
asID: 141616
IP address blocks: 103.161.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:57:fb:54:9a:13:8b:3a:90:92:62:5b:23:31:89:fd:f4:74:65:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Validity
Not Before: Oct 8 10:55:01 2024 GMT
Not After : Oct 7 11:00:01 2025 GMT
Subject: CN=C116042B5F151B727582AD17D08140F6B60BB5A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:a2:74:be:f8:f6:7e:33:8b:4d:4e:dc:06:
08:19:d0:6a:a9:cf:f2:94:3e:a9:ca:66:7e:32:31:
9d:87:03:c1:6d:1c:1a:f0:76:17:cf:98:2f:19:8b:
6c:44:e8:e8:ce:b7:a9:37:62:a8:d8:85:95:e0:39:
47:3c:18:bc:f6:63:b8:32:7f:e4:d4:88:d0:90:21:
51:3c:73:d8:f9:eb:08:2e:c7:9e:1b:84:0f:26:20:
ef:e4:4a:38:8a:38:23:5c:f1:70:75:aa:e4:4b:75:
cc:20:07:b2:92:f0:87:8f:ee:9c:86:39:b6:33:20:
cd:a2:19:44:a5:92:b7:3d:d4:f0:f2:58:54:0c:be:
47:88:19:b4:4a:69:08:f0:4e:0a:e5:96:a7:f9:4c:
47:ed:09:27:98:a2:93:bc:cf:48:7a:8d:ce:d5:ed:
1c:2c:00:47:16:3f:c1:f2:f4:6b:c0:00:58:7c:05:
0b:12:20:6a:93:1d:3b:a8:70:6e:de:ee:e4:0f:90:
1f:e2:14:c4:3a:ea:ae:bb:6d:bf:38:88:74:cc:bb:
a2:cc:00:ae:7c:86:f6:58:83:d7:01:a3:2d:19:e1:
1a:ac:f8:0d:0f:19:ba:2f:c3:02:a0:cc:fe:1a:b5:
54:a6:4e:74:cb:35:56:8d:7d:d9:98:43:18:d1:19:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:04:2B:5F:15:1B:72:75:82:AD:17:D0:81:40:F6:B6:0B:B5:A0
X509v3 Authority Key Identifier:
keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4b:54:34:b9:99:cb:54:e1:4c:ad:17:51:1d:5e:31:0f:09:
86:dc:be:af:ba:a0:26:64:06:d2:95:a7:da:c9:68:20:63:0c:
00:03:a8:f9:45:34:1f:b5:f8:39:96:42:ba:be:e8:33:36:59:
30:dc:35:9b:16:40:30:e0:9d:d7:82:7f:4a:7f:9b:e4:d7:f6:
3d:be:16:05:47:d4:bb:b3:63:bb:69:c1:e8:42:fb:8f:9b:df:
ef:cd:be:e7:e8:43:2c:97:59:b5:17:83:2e:ba:b5:60:24:2e:
5d:c0:00:f7:e8:93:09:7e:a0:af:21:90:57:70:d8:32:70:da:
36:82:9b:4e:d4:05:e6:62:a4:e6:13:c4:9e:fd:c6:1e:95:de:
ff:b8:c0:9c:77:b9:6e:7a:6e:3e:7d:a9:65:17:cf:4a:f6:c7:
f0:91:11:82:f8:48:ea:d3:9b:86:cb:3b:3d:45:4b:61:a4:49:
be:a6:37:32:28:a1:29:b4:82:4a:7a:41:43:24:5a:8f:06:09:
e1:f7:9d:14:17:e7:91:c7:70:35:24:c5:cc:6b:e6:a9:3f:f4:
54:00:d1:ec:18:46:5a:4a:01:b5:70:11:33:59:72:d7:3b:0c:
1e:88:8b:b4:45:a9:d5:6c:ac:77:9e:d0:6f:00:c6:19:91:76:
15:1f:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:24 2025 by rpki-client