Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa
File: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (raw, json)
Hash identifier: wJlXaDLFCYfatW/Pf9biHdSsz2xVZ6B2MJMlr5+ydx4=
Subject key identifier: 94:99:45:6C:C8:83:A4:93:55:BD:F4:E2:90:19:EF:21:C2:C4:F0:A9
Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8
Certificate serial: 0A64A0486DBC9E8ABBFBC13E1508F7FA4253558A
Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa
Signing time: Thu 25 Jul 2024 05:00:00 +0000
ROA not before: Thu 25 Jul 2024 04:55:00 +0000
ROA not after: Thu 24 Jul 2025 05:00:00 +0000
asID: 141584
IP address blocks: 103.160.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:64:a0:48:6d:bc:9e:8a:bb:fb:c1:3e:15:08:f7:fa:42:53:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8
Validity
Not Before: Jul 25 04:55:00 2024 GMT
Not After : Jul 24 05:00:00 2025 GMT
Subject: CN=9499456CC883A49355BDF4E29019EF21C2C4F0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:28:d4:17:a8:9c:55:e9:d2:b4:25:dd:2c:
21:ff:ab:8a:fe:e1:5c:ce:4b:65:46:cd:a1:6b:1d:
c9:f4:83:8f:fd:f5:b1:69:62:08:57:45:7c:d0:a7:
3c:9f:59:2a:2b:f9:b0:11:35:4e:66:26:14:ac:48:
15:1e:ea:52:5e:63:1f:61:d9:07:a6:55:79:3d:59:
0d:1d:74:e6:c3:35:8d:8d:e7:76:20:9d:1f:eb:dc:
3f:ae:12:8f:3b:03:c3:e9:e2:b5:e2:05:7a:44:54:
c6:32:8a:c1:1a:17:1c:2d:34:f6:9c:82:e2:f0:32:
c3:98:a9:6e:cf:2d:c4:30:16:74:b2:b6:93:3c:62:
bc:b1:45:e5:f9:34:52:45:82:df:07:e3:eb:51:ce:
3b:e1:30:6b:d9:c3:cc:c5:26:41:13:74:f5:d2:ae:
2f:36:a9:44:e3:0c:cc:4d:c5:e6:72:f0:1b:a3:8b:
b7:ff:f1:94:65:e7:7d:2e:d3:c9:74:6a:b2:e2:67:
92:3b:91:d3:cd:43:ff:e2:6c:5a:69:f2:00:75:15:
e0:5f:41:72:b6:41:2a:30:46:8e:2c:97:93:e9:e1:
aa:d5:c6:a2:86:23:70:6a:b5:ca:6d:03:d8:30:74:
ff:fb:6e:5b:61:0d:3b:04:2a:e3:22:8f:55:04:00:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:45:6C:C8:83:A4:93:55:BD:F4:E2:90:19:EF:21:C2:C4:F0:A9
X509v3 Authority Key Identifier:
keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.37.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ff:09:8b:98:93:49:14:5c:16:64:7d:07:23:af:7a:1b:20:
82:52:30:34:4d:4d:b5:e6:08:e0:99:c3:88:38:18:11:ce:ec:
5d:57:72:81:d0:35:b5:56:24:29:c3:d0:7c:e4:4b:b4:c1:a4:
0a:a9:2a:bd:90:7b:4c:c9:a1:f7:cf:1c:cc:58:ff:81:df:84:
c4:bd:e4:30:e9:d4:c8:f4:3f:09:fd:f5:83:f1:ff:4d:6a:20:
ac:ab:fd:b0:47:2f:7f:af:69:d9:4f:9c:4b:08:b9:c8:c1:9e:
60:a3:9a:7c:f0:43:e3:8c:0f:c8:2e:10:f3:d9:99:0e:bd:c2:
64:83:cf:99:35:d7:fd:2f:6d:44:8b:39:d6:da:71:79:0b:a4:
e1:bb:c5:22:79:27:67:6c:82:d2:14:41:1b:d0:05:92:80:a7:
55:3e:44:0f:d4:26:93:5e:5d:a4:9f:b2:7e:43:c2:b0:d7:18:
fd:f4:09:36:e6:51:56:7a:42:61:e9:96:0d:38:df:1b:6e:9a:
a1:e3:51:c9:6a:de:df:da:5a:a6:ad:42:a9:47:f2:68:eb:45:
9f:d0:4d:3b:7c:6f:77:9b:f9:e1:04:ff:f7:47:02:2c:61:8b:
4c:8c:ff:1d:52:cc:4c:cc:e3:dd:16:a2:09:da:c5:1c:28:03:
01:72:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:39 2025 by rpki-client