Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa
File: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (raw, json)
Hash identifier: fygin3I1xgjjFUHRJ4EiAgM+R/8we3DGnULcJ+28xQo=
Subject key identifier: 1B:CD:BA:D2:C7:B0:47:E9:22:A0:89:E6:5B:C7:DE:F6:97:20:66:71
Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Certificate serial: 2DB61E220FDFF6C36078FAFA6967F191B82E99B1
Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa
Signing time: Thu 31 Oct 2024 03:57:51 +0000
ROA not before: Thu 31 Oct 2024 03:52:51 +0000
ROA not after: Thu 30 Oct 2025 03:57:51 +0000
asID: 136085
IP address blocks: 103.87.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b6:1e:22:0f:df:f6:c3:60:78:fa:fa:69:67:f1:91:b8:2e:99:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Validity
Not Before: Oct 31 03:52:51 2024 GMT
Not After : Oct 30 03:57:51 2025 GMT
Subject: CN=1BCDBAD2C7B047E922A089E65BC7DEF697206671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:c3:e3:66:90:8e:ec:ed:f9:71:96:32:57:
98:1c:1f:73:52:24:e7:81:dc:df:9a:de:b4:e4:e0:
64:54:14:e1:a1:b2:1d:bc:b4:68:14:ec:57:78:54:
6e:3e:8f:a4:a1:03:d4:cf:60:d7:28:29:d1:91:34:
e1:7a:85:bb:1b:65:20:78:ab:c3:a5:4b:84:36:87:
28:95:cc:2a:10:70:b9:a4:00:f6:66:7e:44:38:57:
09:b6:97:97:76:39:0a:fe:12:c3:17:45:4c:87:4e:
7c:dc:a2:d2:1c:db:7b:56:ca:3f:38:95:ed:58:95:
19:00:d8:76:3f:a5:7e:44:df:97:ea:3e:1c:12:84:
ed:27:c9:4e:e5:1f:3f:d0:c1:34:72:d7:61:06:1a:
5b:aa:f1:96:20:81:c2:a1:71:d7:bf:f3:cd:36:5a:
3e:fa:25:b8:0e:74:5a:55:b9:cf:73:05:08:26:8f:
27:38:13:71:4b:a6:46:03:e1:c8:9a:37:38:b8:8d:
d4:47:78:34:70:1a:11:da:36:8f:eb:33:2f:98:fb:
dc:88:4e:5a:71:22:e7:63:43:cb:9f:e8:c2:b8:9e:
84:87:05:03:03:c8:b7:24:94:b4:a6:f1:4d:56:02:
13:64:a7:70:09:8d:6b:8d:6a:26:b5:d1:28:f6:f3:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:BA:D2:C7:B0:47:E9:22:A0:89:E6:5B:C7:DE:F6:97:20:66:71
X509v3 Authority Key Identifier:
keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.17.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f9:80:54:fd:0f:29:9c:7b:d3:dd:30:24:62:c6:db:59:11:
20:95:72:96:2c:18:bd:3c:cf:b9:56:27:af:b5:4d:36:cd:46:
38:a1:2d:26:fc:7b:d3:ae:b8:8c:bb:8c:f5:00:4d:81:71:a9:
62:ea:97:52:7c:1c:26:85:1a:c2:ac:06:53:31:f3:bc:32:56:
a2:c5:cc:dd:f7:e0:42:a3:0b:a5:f5:87:d3:34:ae:5d:ae:6e:
75:a4:96:a4:ae:94:71:68:5e:a6:19:55:9d:ff:f6:e4:c4:31:
61:8b:61:3a:3b:42:8b:3d:5f:e7:54:e8:8d:bf:ff:a9:20:c4:
16:14:d7:a5:1e:86:10:7b:ee:39:61:cc:8e:be:09:22:b9:9d:
05:52:d4:57:f1:3d:cb:7d:e1:87:70:34:c0:f0:2c:6c:5d:65:
68:be:82:35:c0:0b:68:46:80:62:8c:90:c6:8f:f5:b1:22:d3:
1a:1f:94:50:77:53:f2:bd:8f:06:72:cb:c8:a8:09:52:9a:82:
d2:a3:4b:d3:b2:fe:1f:d6:09:52:60:93:5a:52:cb:80:a3:96:
03:e5:f0:79:cd:35:ab:56:2c:e1:39:b7:a6:0f:63:4c:cc:ce:
80:83:7c:e7:96:db:bb:87:31:87:b8:84:0f:26:44:6a:a2:c8:
16:d5:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:11 2025 by rpki-client