Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
File: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (raw, json)
Hash identifier: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=
Subject key identifier: 97:DF:A1:89:91:EB:86:C2:D8:33:54:A8:DD:3A:CA:35:D0:8A:27:BC
Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial: 31257908E40F820A7F42B5007DF521224FA9EF42
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
Signing time: Sat 08 Mar 2025 15:00:00 +0000
ROA not before: Sat 08 Mar 2025 14:55:00 +0000
ROA not after: Sat 07 Mar 2026 15:00:00 +0000
asID: 141984
IP address blocks: 103.167.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:25:79:08:e4:0f:82:0a:7f:42:b5:00:7d:f5:21:22:4f:a9:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
Validity
Not Before: Mar 8 14:55:00 2025 GMT
Not After : Mar 7 15:00:00 2026 GMT
Subject: CN=97DFA18991EB86C2D83354A8DD3ACA35D08A27BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:1e:bd:23:7f:a6:1d:33:3d:b7:43:df:0e:
8b:71:f2:2d:e1:bd:7f:a0:67:27:94:44:ec:f5:2e:
be:f0:16:2c:5b:8d:da:4d:a2:8b:bf:c2:0e:9c:ea:
93:7a:87:47:f7:f4:03:d6:d5:f6:9c:ea:a3:75:64:
4b:76:da:d0:d6:0e:51:04:6d:d0:b9:95:c8:f7:47:
7b:49:14:6c:69:a0:2c:f6:03:02:2f:46:65:e9:90:
95:b8:50:e6:d5:db:f5:34:79:7b:98:64:7d:38:33:
8f:85:74:44:55:cb:0c:1c:39:01:9c:c3:15:fc:57:
a7:e4:c4:e5:48:f9:9f:4c:8c:04:cb:b5:5f:8f:8a:
09:1a:a7:87:c3:af:2e:6b:fd:56:54:ae:24:be:19:
87:cf:68:cc:59:9f:7c:3b:ac:e6:6f:cf:fe:51:da:
14:54:48:3d:9e:08:cd:13:0c:9c:66:0e:2a:e7:cd:
8c:8b:fb:2e:2e:7f:8c:0a:3d:88:04:c1:23:9a:98:
a1:84:92:4e:80:07:d3:7f:db:15:83:5e:21:36:fb:
08:93:1f:e1:8a:a4:7a:d0:ea:9f:29:4b:3d:d6:e4:
37:09:b1:80:e1:84:d0:da:18:89:6b:6e:f2:8e:f3:
af:9a:05:df:0f:32:b7:4f:bc:b8:8c:04:d3:7d:e1:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:A1:89:91:EB:86:C2:D8:33:54:A8:DD:3A:CA:35:D0:8A:27:BC
X509v3 Authority Key Identifier:
keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.166.0/24
Signature Algorithm: sha256WithRSAEncryption
32:45:f8:bb:35:a8:fb:50:fc:9e:16:f8:7d:a3:a0:e7:d0:82:
48:64:bd:36:fa:cc:19:14:e5:78:0d:1a:cd:22:84:7e:56:17:
4f:ec:74:89:b9:d1:51:d6:ef:7a:f2:48:c3:74:26:8b:88:25:
6c:bb:bd:49:85:25:70:bc:84:ad:c9:97:d7:6f:0c:5b:2a:ec:
59:00:d6:03:ed:7a:f6:97:0d:97:3e:a4:36:74:8f:a8:f7:09:
a3:8d:63:7e:8a:a8:b2:b0:99:b0:40:bd:28:fd:0e:d6:5a:2d:
8b:3e:ba:68:77:54:81:30:6f:3c:5b:30:37:94:f3:d3:6e:41:
1f:e8:7d:2f:01:5b:0c:42:fd:f5:85:a3:4e:64:5b:1d:e7:3f:
fa:e1:d6:63:1d:9a:fa:8b:03:da:33:6f:c2:0a:47:5c:ef:32:
da:2c:5f:f4:ad:42:8e:76:70:72:fc:5f:1c:43:9a:18:45:89:
88:1d:fb:a2:2a:77:4c:a5:1a:03:58:9c:b0:e1:19:d5:e3:1d:
ab:0a:ac:8f:18:cc:5c:0e:a1:e5:86:75:34:e8:f1:82:3b:6b:
bc:d1:97:09:f4:e0:46:81:95:c1:b4:53:4b:a2:e4:33:a4:49:
73:9f:67:b3:82:68:82:c1:4a:54:6f:ab:6f:08:e0:9b:44:96:
5e:04:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:51 2025 by rpki-client