Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa
File: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (raw, json)
Hash identifier: BOpg9hyAPDl8hg69J18XcZBmeLqMIq91C57NuMalFfc=
Subject key identifier: F8:C6:B9:80:95:AA:3F:25:08:44:DC:31:D5:C9:BD:EA:23:2B:59:AB
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 78F1E96790E5ACD1C829D4590FB49CA5195FC66B
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa
Signing time: Tue 03 Dec 2024 06:38:24 +0000
ROA not before: Tue 03 Dec 2024 06:33:24 +0000
ROA not after: Tue 02 Dec 2025 06:38:24 +0000
asID: 149320
IP address blocks: 103.178.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f1:e9:67:90:e5:ac:d1:c8:29:d4:59:0f:b4:9c:a5:19:5f:c6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Dec 3 06:33:24 2024 GMT
Not After : Dec 2 06:38:24 2025 GMT
Subject: CN=F8C6B98095AA3F250844DC31D5C9BDEA232B59AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:d7:86:ee:b6:27:72:3b:01:43:c9:6f:bd:
50:76:00:2e:d8:5e:c9:32:b9:7a:ce:95:bb:24:19:
c0:48:cd:8b:a9:4f:1b:fd:cf:e1:64:f6:ac:fa:c9:
3c:d1:2d:e9:d0:32:44:11:78:35:6e:b8:a5:be:ed:
34:c7:51:dd:21:67:25:26:b2:96:10:ff:7c:aa:e1:
0b:7d:f9:cd:a9:ac:5d:3f:ec:eb:8d:23:f3:c2:3d:
9d:5f:ce:eb:d0:9b:fa:20:37:e2:c9:a5:43:98:4e:
f8:ca:d2:01:fc:4a:61:59:34:43:2a:5f:48:b4:7f:
7a:ce:41:b0:36:d4:c4:db:8a:78:0e:7e:ae:eb:83:
5c:8f:3d:4c:3e:b1:cf:46:4b:42:80:c2:c2:2c:00:
f2:71:eb:5b:82:65:26:82:42:cc:79:44:b9:a6:97:
09:54:4f:4e:74:03:dd:54:f3:ff:46:ca:17:72:85:
42:cc:a3:ed:36:d7:05:64:1c:67:88:d2:c0:21:72:
b0:98:cc:47:b4:f4:19:8d:a2:9f:a4:58:e7:43:9b:
cf:93:f2:d6:04:e0:c4:68:02:bb:6b:82:0e:a9:c7:
d3:e7:34:f2:fb:13:b3:ea:dc:46:97:48:1b:69:c2:
2e:f7:68:f3:41:e2:6d:7f:8b:4f:0c:47:4d:1c:e1:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:B9:80:95:AA:3F:25:08:44:DC:31:D5:C9:BD:EA:23:2B:59:AB
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.86.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:dd:28:4a:dd:63:bc:3a:49:c1:e5:10:db:ee:47:36:4c:22:
8e:10:90:29:ab:d8:8f:e6:2f:36:f4:ab:fe:cb:9d:6e:fd:2b:
b3:0f:d4:1c:0f:89:6f:f2:e8:61:5d:7b:4e:52:21:94:b4:11:
44:4e:e1:fc:6e:9b:09:dd:d4:6d:5b:4f:e6:78:16:8e:4d:7b:
ba:fd:39:5e:d5:78:37:9c:cf:f4:40:ae:d0:6c:08:69:e9:69:
39:65:48:45:0e:7c:31:c4:bf:20:c9:89:a9:ca:54:9f:e3:e3:
83:7c:f9:49:44:82:64:d6:0f:cb:9a:07:25:83:44:89:67:c0:
82:86:ef:08:2a:f5:dc:77:43:8b:4a:4c:29:a5:57:1f:52:19:
74:75:ec:81:cf:22:d4:e1:5c:d8:d3:ca:4c:02:92:48:b6:f3:
98:52:6c:8e:26:8f:35:c8:bd:bf:0e:73:f2:58:64:84:b3:ec:
b5:cb:ba:10:06:77:fa:36:13:2d:b8:c3:3f:2d:57:e8:06:7f:
15:87:0c:d3:68:d4:0a:75:5b:b7:45:c9:d7:a9:ef:b8:a5:43:
72:58:b0:84:29:da:39:18:65:07:37:08:81:63:23:f2:d8:6a:
89:dd:c8:2f:46:9d:40:3d:a4:b6:4c:3d:a8:4d:44:23:8b:c6:
a4:1f:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:45:10 2025 by rpki-client