Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa
File: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (raw, json)
Hash identifier: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=
Subject key identifier: 76:2C:D9:96:13:E1:DB:50:83:F0:F8:00:25:F2:31:F9:7F:71:A2:34
Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial: 582C6094C8DC387FE7E1C9724AEA777EC619A9C9
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa
Signing time: Mon 13 Jan 2025 08:01:23 +0000
ROA not before: Mon 13 Jan 2025 07:56:23 +0000
ROA not after: Mon 12 Jan 2026 08:01:23 +0000
asID: 64298
IP address blocks: 103.77.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2c:60:94:c8:dc:38:7f:e7:e1:c9:72:4a:ea:77:7e:c6:19:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Validity
Not Before: Jan 13 07:56:23 2025 GMT
Not After : Jan 12 08:01:23 2026 GMT
Subject: CN=762CD99613E1DB5083F0F80025F231F97F71A234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:d8:f1:82:0f:ba:af:da:35:6e:b2:e9:ae:
a5:5f:17:3c:7b:c0:08:b0:65:8f:6d:4b:14:52:79:
cd:9d:c6:ec:8d:ce:6b:bb:17:eb:3e:05:d2:ad:fb:
ac:e5:19:e8:79:92:4f:32:cd:f4:79:1a:84:3e:9c:
51:a2:bd:13:89:b2:97:9e:f3:8b:2e:7b:28:35:27:
99:7d:bd:01:07:6c:2e:f1:dc:7d:f1:f5:0c:b6:f9:
16:86:61:29:56:a1:c3:35:2d:d4:d7:99:29:6a:2c:
f3:cc:86:c2:3b:94:34:f0:36:35:36:a8:d8:80:85:
5c:34:53:86:54:66:36:40:29:7e:04:23:a2:fe:1d:
b0:c9:c0:43:ee:56:13:19:44:a3:d8:93:96:5e:d4:
9a:65:15:5e:c5:95:12:91:f5:9c:7c:dd:5a:bb:89:
53:a9:4b:43:a7:dd:02:46:e9:73:37:f5:ef:91:f3:
f0:e7:d3:66:48:a9:77:38:37:45:52:36:09:ac:aa:
2d:96:63:54:d9:31:01:95:a3:ee:5c:a1:77:08:93:
87:06:b6:cc:6e:85:3d:6a:9e:06:d5:d0:e0:cc:fe:
36:22:a7:23:4c:67:35:05:3c:70:34:e6:76:e4:c0:
a3:73:c9:1a:73:a1:b9:fd:1c:5f:69:6e:ea:0d:2c:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:D9:96:13:E1:DB:50:83:F0:F8:00:25:F2:31:F9:7F:71:A2:34
X509v3 Authority Key Identifier:
keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.226.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:77:af:6f:16:80:2c:32:c6:8b:f5:b2:60:70:24:1f:fe:70:
d9:32:16:89:66:2b:dd:ea:42:4c:e1:c2:7d:fa:8f:0f:b7:a3:
92:ad:5a:cd:c0:f5:86:d2:0c:4a:9b:08:3c:3d:38:67:b1:67:
d8:3e:62:aa:c9:e2:cf:23:05:05:7d:41:2c:a1:01:ec:c4:fd:
c0:e5:a7:92:61:7b:cc:4a:06:d5:84:77:29:8e:32:6a:61:27:
a1:76:3f:a4:4e:b2:d9:57:5f:03:2c:70:24:ea:f1:c8:69:ed:
47:2e:fc:af:64:65:f1:4c:f0:17:32:96:00:5b:03:75:8e:21:
c8:9d:73:a1:11:24:d5:19:ee:da:68:9e:1f:70:a1:17:e9:2f:
06:b7:15:98:b2:3d:37:5d:ce:3a:5e:12:45:94:a9:2a:60:aa:
e9:2b:49:89:ba:a7:06:90:f2:4b:76:23:17:c7:a2:83:72:89:
78:fa:fe:1e:05:47:1e:da:7e:f8:9a:da:69:eb:33:a0:42:3d:
ab:76:ff:39:df:96:0d:18:4b:d2:b1:12:0f:b0:83:47:eb:4e:
6c:b6:11:6f:85:00:90:9b:a1:27:89:d8:60:c1:11:60:d7:9f:
76:94:37:bd:0e:6b:b0:cd:cf:71:f9:5c:7c:09:b8:f1:64:2b:
5d:c9:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:59 2025 by rpki-client