Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
File: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier: nDSHJLkitlb1GME6lEBPPHUWslDjiPtZnQkf1oppio0=
Subject key identifier: A3:44:F6:AD:27:ED:18:32:73:F8:04:FC:FF:C6:27:FE:79:9B:5E:97
Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Certificate serial: 768D0D5DB8282273B43053B5A45365C1C4E94FB6
Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
Signing time: Fri 21 Jun 2024 10:00:00 +0000
ROA not before: Fri 21 Jun 2024 09:55:00 +0000
ROA not after: Fri 20 Jun 2025 10:00:00 +0000
asID: 150232
IP address blocks: 103.13.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8d:0d:5d:b8:28:22:73:b4:30:53:b5:a4:53:65:c1:c4:e9:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Validity
Not Before: Jun 21 09:55:00 2024 GMT
Not After : Jun 20 10:00:00 2025 GMT
Subject: CN=A344F6AD27ED183273F804FCFFC627FE799B5E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:4c:9c:10:d5:6a:a4:8f:c6:f0:be:db:af:
42:d9:0e:ef:c6:43:02:55:f9:9d:89:8e:4d:8a:f2:
3f:a3:38:d5:66:88:ca:51:e6:73:9d:ca:c7:bc:1e:
55:bc:2c:59:3f:e2:8a:3d:42:28:56:d9:31:eb:63:
7f:a8:c8:0b:1f:e9:96:b3:4a:cc:aa:1d:86:7f:8a:
76:94:7f:d7:25:23:c9:0a:82:d6:f4:d1:d1:7b:f7:
1d:22:87:d5:d4:e9:2c:4f:cd:37:44:d0:87:26:d5:
a0:c2:22:a5:7c:82:72:c8:4f:6f:ea:15:a3:8e:a5:
c4:f1:45:eb:93:74:ec:08:e8:1e:90:56:20:36:55:
73:8b:7c:20:58:13:b7:80:46:5b:b7:42:42:81:45:
5f:82:a1:9c:ca:9f:a8:9d:0f:10:8c:93:01:b7:f3:
0a:e0:42:6e:56:8d:b6:ae:46:17:8b:e8:76:31:b5:
bd:e7:6d:df:81:83:c8:37:ce:4c:14:7c:db:77:06:
6e:18:bb:e8:a3:e4:a7:85:74:a1:95:c5:a8:fc:6b:
77:3d:14:59:2d:59:a8:10:df:ce:02:5b:8d:97:7e:
25:f7:ac:2d:3c:1d:a1:22:ee:62:dc:bd:fb:52:6d:
99:7d:ed:0c:b2:be:1d:a2:61:cc:a5:3a:04:f8:9f:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:F6:AD:27:ED:18:32:73:F8:04:FC:FF:C6:27:FE:79:9B:5E:97
X509v3 Authority Key Identifier:
keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.235.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2f:2b:c7:13:fe:b1:46:c7:b3:6e:e1:22:f2:6c:c2:4e:d6:
5c:27:49:09:10:73:27:45:b3:b3:f9:cb:b9:2b:b9:08:6d:24:
c5:98:f2:26:a1:01:e0:4a:6e:bc:72:d3:26:04:27:10:61:c4:
9d:33:83:f8:52:e7:a2:f2:2d:e8:14:2a:dc:bf:aa:1d:18:70:
21:84:72:75:ac:10:b1:54:84:de:fe:af:8f:a1:6c:84:17:bf:
1d:e4:14:13:88:c0:af:ac:71:57:d7:21:3e:0a:02:3b:64:72:
f0:04:2f:fd:e2:1f:ac:3b:e9:ce:98:84:db:1f:2b:63:40:cc:
cb:cc:c6:f2:84:f3:45:4e:47:fe:b1:fb:10:cf:f2:e0:8a:b9:
0d:33:6b:87:3a:23:7a:0f:2d:d4:00:b0:05:d6:be:dd:23:8c:
84:73:15:e1:a9:5c:38:da:bd:87:68:56:09:ba:e8:ce:4a:06:
3b:b4:6c:a4:82:c5:33:35:34:df:32:90:1d:bd:25:3a:08:fa:
2f:54:53:0f:28:cb:6f:7b:85:69:00:1b:c9:77:86:d0:75:c2:
41:40:5a:7d:d3:a2:82:ed:a5:be:95:04:87:ef:ad:3b:10:99:
dc:38:78:22:8b:e3:63:d6:ac:cd:65:45:cb:5b:34:4e:d4:7d:
50:e5:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:08 2025 by rpki-client