Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130372e302f32342d3234203d3e20313333383334.roa
File: 3130332e35382e3130372e302f32342d3234203d3e20313333383334.roa (raw, json)
Hash identifier: sACHlVu2iDS97zgVtIlmZgLiEMFZ86sVKusgS8Pekcw=
Subject key identifier: AE:B4:8E:5B:1C:B6:50:06:90:F4:73:9F:CA:CD:E8:6D:C6:27:8F:76
Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Certificate serial: 688A3A7CCE4FF63ED75C744701289B54DE80CF2D
Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130372e302f32342d3234203d3e20313333383334.roa
Signing time: Mon 06 Nov 2023 06:24:50 +0000
ROA not before: Mon 06 Nov 2023 06:19:50 +0000
ROA not after: Mon 04 Nov 2024 06:24:50 +0000
asID: 133834
IP address blocks: 103.58.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:3a:7c:ce:4f:f6:3e:d7:5c:74:47:01:28:9b:54:de:80:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Validity
Not Before: Nov 6 06:19:50 2023 GMT
Not After : Nov 4 06:24:50 2024 GMT
Subject: CN=AEB48E5B1CB6500690F4739FCACDE86DC6278F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:5b:24:fc:59:94:2f:56:81:3c:93:66:e0:
3c:2a:e4:4b:08:2c:88:6d:0b:d2:b8:6a:b7:7b:57:
4a:01:8d:7c:1e:a8:08:75:81:92:8d:d7:a4:7a:5a:
46:5a:34:e4:cb:73:d1:a9:8c:e6:5e:19:32:aa:a1:
72:dd:3a:ed:c6:e4:f5:6b:a9:72:ff:e6:1e:48:59:
2a:bf:eb:1d:ba:c4:9d:52:e8:55:9b:50:22:db:ba:
14:19:f0:1a:2f:8d:b4:28:ef:a2:dd:ba:23:d8:7d:
4f:81:65:e7:5c:7c:07:8e:d3:74:ed:33:72:8e:a5:
e8:40:51:25:85:6d:c3:34:03:5a:87:61:0e:e6:cb:
b5:f2:4d:21:01:7e:4c:a6:23:45:e7:cf:08:a5:dd:
ea:0d:67:8e:c3:99:2d:37:7c:e3:09:e9:36:ce:d7:
75:6c:8c:a9:b0:57:2c:84:15:2a:3a:c9:bd:c0:93:
a4:a3:4f:10:7e:3c:93:53:b7:7c:31:91:09:55:d7:
4c:ee:92:b9:cb:ea:1c:7f:72:fd:68:32:85:ef:07:
83:33:b6:ee:88:42:28:26:97:e8:64:27:65:42:5a:
35:0f:53:91:64:28:21:bd:64:6c:83:8c:2e:22:cc:
9f:6a:7b:67:62:98:5a:16:42:a1:09:7e:a3:df:c7:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:8E:5B:1C:B6:50:06:90:F4:73:9F:CA:CD:E8:6D:C6:27:8F:76
X509v3 Authority Key Identifier:
keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130372e302f32342d3234203d3e20313333383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d7:a5:35:37:ed:2f:2f:ca:1f:d2:a4:d5:c0:e3:a3:a9:a1:
81:05:a6:c7:e8:53:ce:57:af:ac:1f:a5:c2:84:91:ea:5e:17:
e5:26:56:97:d5:3f:ab:cf:e0:33:ce:f4:0b:34:e3:6b:75:99:
ba:28:8e:94:12:3f:14:1d:1a:8a:ec:72:bc:a8:93:b0:16:8e:
01:60:e2:3e:d0:20:92:e2:bf:46:b6:19:3f:1b:2c:3f:39:0e:
f0:b8:ee:6c:44:f4:9a:29:48:d3:5c:62:85:e9:7c:16:6d:fe:
54:03:6c:19:8b:82:42:3b:d0:61:13:e1:51:c9:a2:da:7f:31:
f5:70:74:8d:0d:68:a0:64:37:1a:d5:52:10:d7:9b:e6:e7:63:
24:71:a4:11:ac:48:03:89:59:3f:ab:42:0d:d2:99:21:07:a3:
f5:7f:db:4b:f1:a6:d8:f4:bd:d8:41:64:40:9b:82:8c:91:3d:
47:7e:6b:6d:9d:fa:0e:41:0b:d0:db:39:5c:d2:04:e2:23:a1:
5d:fe:2d:e6:63:01:3b:5b:b1:7b:a6:dd:a5:1f:84:10:ec:59:
1b:23:e0:c0:9d:2b:bf:15:08:53:c1:16:0c:a7:c4:db:b0:dc:
86:78:c2:d5:7d:39:d7:75:87:16:e3:80:47:2b:0a:d9:8b:1d:
d0:ba:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:07 2025 by rpki-client