Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
File: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=
Subject key identifier: DC:61:74:B9:8D:3A:40:76:C3:A6:0C:04:5B:01:E5:1C:FF:5D:50:42
Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Certificate serial: 4F7B78FA9B260E0A928649823B3BFCB7376BA571
Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
Signing time: Wed 05 Feb 2025 14:00:00 +0000
ROA not before: Wed 05 Feb 2025 13:55:00 +0000
ROA not after: Wed 04 Feb 2026 14:00:00 +0000
asID: 150232
IP address blocks: 103.13.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7b:78:fa:9b:26:0e:0a:92:86:49:82:3b:3b:fc:b7:37:6b:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Validity
Not Before: Feb 5 13:55:00 2025 GMT
Not After : Feb 4 14:00:00 2026 GMT
Subject: CN=DC6174B98D3A4076C3A60C045B01E51CFF5D5042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:83:12:51:e0:ba:78:ff:d8:72:83:7c:f8:
9e:99:5e:ad:f8:41:5b:c0:ac:1c:d4:5b:b6:e0:4e:
c3:60:f9:6d:bd:24:5e:1d:e0:3a:88:fa:11:64:01:
c3:19:c0:8f:88:84:38:39:25:87:9b:5d:81:84:92:
05:bd:b2:46:70:92:c7:62:d3:ff:c1:24:f3:53:09:
89:43:2b:e5:9e:6b:3d:a2:14:5b:33:b4:47:dc:a0:
54:55:ca:f9:b3:e2:48:b9:22:4b:be:e5:f1:4c:13:
7e:d8:d0:08:ac:4f:2b:25:6b:0a:49:9e:f5:49:d4:
34:d8:08:a6:3f:6f:08:b1:af:d5:4e:2a:d0:c6:fb:
a6:e3:53:87:92:23:74:94:56:a8:49:59:3b:70:a6:
33:88:52:e1:55:a1:1f:7f:7b:cf:38:d1:f4:13:4f:
a6:9e:de:d2:ee:2d:ee:aa:45:e4:32:33:9c:02:02:
4c:6b:76:1c:c7:47:b4:db:44:bd:24:61:15:c4:a1:
d2:fb:6a:7e:dd:5a:ab:d6:97:15:d2:02:bc:af:e7:
fc:f5:9c:87:7f:d7:2c:5b:32:47:25:e4:bc:0d:5a:
71:f5:b3:24:f0:95:a0:2c:39:d5:11:c7:7f:5f:e3:
5f:ec:c6:6a:ee:ad:55:a0:22:df:05:b6:bb:78:1c:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:74:B9:8D:3A:40:76:C3:A6:0C:04:5B:01:E5:1C:FF:5D:50:42
X509v3 Authority Key Identifier:
keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.234.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e9:b7:28:e9:69:57:80:46:73:11:00:a9:9a:20:c0:fe:19:
1c:65:fb:53:28:4c:e0:1f:94:d4:8a:7e:54:2a:e3:d4:a2:66:
49:01:5e:77:52:68:e3:c0:91:06:33:08:7d:a1:a6:6e:25:5b:
c0:de:58:98:f9:ae:20:c4:b9:e1:59:a6:28:d2:13:34:f1:63:
20:8c:bf:6c:e4:14:dd:57:5c:68:34:6b:6f:1a:1a:0d:80:05:
f8:af:c6:21:26:a0:99:88:13:c0:3a:50:25:a1:4d:0f:bf:53:
38:89:13:43:67:ad:fa:05:55:10:5d:67:a9:4b:0f:88:32:cc:
52:a4:ab:39:3b:f6:79:08:23:8f:83:86:b1:67:98:ed:f2:8c:
e4:44:47:20:15:66:0b:8d:9b:0a:81:ac:0f:8c:55:73:b7:20:
0b:58:cc:e0:81:ba:bf:ed:16:29:f7:20:7f:73:ad:37:2c:b7:
fc:7e:99:cb:b1:76:15:3d:b9:a1:c7:7f:9b:1c:c3:8c:40:3a:
13:41:64:56:d8:91:e4:c6:dc:d9:fa:f3:e2:b9:66:af:3f:b8:
7b:82:6e:22:b3:66:9f:51:82:2f:59:18:76:34:ae:3e:f7:ba:
05:4e:12:51:8b:2f:0a:13:27:0b:73:52:d8:53:d1:c0:8f:16:
f8:75:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:08 2025 by rpki-client