Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa
File: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (raw, json)
Hash identifier: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=
Subject key identifier: 67:DA:A8:61:D3:58:AA:BF:7E:0D:D4:AA:38:25:8E:C8:3A:98:AC:10
Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Certificate serial: 1296CAFE5DA0AE1DBCF1F5F4485796E707F6D837
Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa
Signing time: Sat 01 Feb 2025 12:02:22 +0000
ROA not before: Sat 01 Feb 2025 11:57:22 +0000
ROA not after: Sat 31 Jan 2026 12:02:22 +0000
asID: 147081
IP address blocks: 103.173.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:96:ca:fe:5d:a0:ae:1d:bc:f1:f5:f4:48:57:96:e7:07:f6:d8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Validity
Not Before: Feb 1 11:57:22 2025 GMT
Not After : Jan 31 12:02:22 2026 GMT
Subject: CN=67DAA861D358AABF7E0DD4AA38258EC83A98AC10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:84:8f:d9:76:b5:c5:37:19:8a:c3:ee:aa:
e2:74:d3:72:37:5c:2f:41:ba:ae:fe:e8:89:ee:36:
92:aa:b9:69:7c:8d:13:d6:7d:48:7f:71:21:b3:c6:
49:ed:aa:47:f6:27:bf:af:62:f8:e9:3e:06:04:60:
46:d0:65:97:ae:6f:30:ff:86:65:34:5d:31:66:f6:
b8:3b:a1:eb:fc:4a:06:20:a4:23:3e:c6:e4:62:56:
dc:56:73:7d:88:91:e0:6a:74:08:87:0d:0b:ae:07:
6f:e1:28:c2:d0:02:55:24:01:42:03:77:fa:55:20:
3b:2a:7e:10:74:13:18:99:c6:7e:44:c3:1b:37:9f:
85:7c:ab:85:25:41:1c:d4:17:f2:75:32:c6:fb:cc:
7f:ee:cd:1c:ed:64:3f:7c:6c:52:9d:98:02:5e:10:
61:98:da:50:b3:e6:e5:f4:a7:ac:16:18:2b:8a:7d:
95:e6:63:87:7f:3a:ba:c3:3c:83:71:32:9c:0c:9f:
e5:b1:31:5a:6e:ed:4d:1b:0d:65:5f:01:b1:a3:01:
8c:be:20:dc:3e:7f:fa:eb:a9:f4:30:d4:47:78:c0:
58:14:5e:72:3e:69:a8:0d:ff:8b:40:22:75:98:b1:
f4:dc:c1:b9:e4:22:1d:d4:61:c5:f4:f7:4e:1e:e8:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:A8:61:D3:58:AA:BF:7E:0D:D4:AA:38:25:8E:C8:3A:98:AC:10
X509v3 Authority Key Identifier:
keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:bb:29:b3:97:8c:d3:3d:a9:c1:2e:db:e9:13:38:36:a0:
0d:f9:a2:b5:b3:0a:be:35:3d:4e:42:d8:1c:ee:58:00:fa:b8:
68:4d:03:b2:60:ad:22:9c:91:8b:ea:03:7b:f8:06:b9:67:91:
0c:59:fb:7a:51:32:cc:dd:9d:77:52:9b:5f:f1:02:4c:7a:a5:
70:36:1d:4e:8c:49:a6:6b:b4:b1:0d:9e:13:78:71:70:03:39:
f1:d1:fc:3e:19:6b:15:1e:24:e8:f2:83:c7:1c:01:50:ac:8e:
1d:b7:0d:8f:29:48:82:d7:f8:89:d7:89:58:cb:dc:58:a9:8b:
f5:c6:c4:67:fd:8e:35:5a:05:8a:2b:e9:67:52:10:78:6f:7e:
e3:70:64:95:a7:aa:a7:bd:d3:80:45:e3:9b:43:19:93:10:72:
19:0d:9b:6a:4c:af:68:9d:a2:7a:23:e8:ce:9d:4d:16:ba:50:
23:86:d8:b8:41:9b:f2:c0:db:f4:d8:83:db:f0:69:36:d0:fc:
30:2b:0a:f4:d5:b8:a0:2b:d0:1d:8b:9e:f1:78:a3:b4:6e:49:
62:39:3f:00:8b:f3:bb:fe:39:d3:b8:43:7a:6d:0f:f0:c9:15:
54:a4:1e:1a:7e:ff:a9:12:24:76:c6:1c:07:a1:dc:b7:60:df:
7c:2e:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:04 2025 by rpki-client