Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa
File: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (raw, json)
Hash identifier: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=
Subject key identifier: F8:EA:8B:09:FE:FB:EE:59:B3:E2:9E:76:CC:0D:B8:AD:25:A0:CB:1B
Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial: 6D3A89747F1CEB0BC201E4E47ED9065257E417B9
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa
Signing time: Wed 08 Jan 2025 02:01:24 +0000
ROA not before: Wed 08 Jan 2025 01:56:24 +0000
ROA not after: Wed 07 Jan 2026 02:01:24 +0000
asID: 138089
IP address blocks: 103.131.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3a:89:74:7f:1c:eb:0b:c2:01:e4:e4:7e:d9:06:52:57:e4:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Validity
Not Before: Jan 8 01:56:24 2025 GMT
Not After : Jan 7 02:01:24 2026 GMT
Subject: CN=F8EA8B09FEFBEE59B3E29E76CC0DB8AD25A0CB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:b2:a8:71:ad:7a:2f:60:69:74:c7:dc:b2:
4b:39:07:8a:cb:60:e5:7f:24:f3:3a:a1:13:60:a9:
30:33:9f:eb:8e:33:11:57:63:35:2e:8f:e0:71:1e:
bb:41:f2:7d:c8:07:d1:2f:a9:41:c5:30:a2:0e:fa:
3a:53:a9:d9:52:b1:bc:ca:65:85:e2:15:48:dc:26:
c3:70:64:2a:30:06:6a:84:3e:1e:16:7a:1c:b3:f9:
f4:07:f1:b6:3d:74:3d:ec:c2:41:9f:59:68:93:71:
82:9d:a8:12:be:53:77:76:f1:38:04:b5:b3:26:7e:
73:7a:31:38:7f:f2:4e:6a:b5:5c:97:83:1e:0e:46:
56:3c:b6:93:49:85:e7:18:93:cf:9f:46:03:a7:a2:
e4:c7:c2:be:a1:8e:7d:99:85:10:1c:40:72:1f:ca:
4a:19:74:8b:2b:33:c4:ad:d0:bd:2f:23:62:51:f3:
cd:a5:d4:d3:1a:c9:0b:2c:95:ca:57:dc:70:0a:6b:
bd:19:34:fa:20:57:20:85:8d:98:4f:18:63:3a:8e:
2c:1b:af:9e:5a:cb:49:d7:40:9f:b9:cc:ce:d6:97:
bd:bc:30:5f:00:c1:09:0d:2d:a3:53:fa:4f:de:2e:
86:df:f3:d7:03:a3:4d:47:65:a6:90:99:3c:77:61:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:8B:09:FE:FB:EE:59:B3:E2:9E:76:CC:0D:B8:AD:25:A0:CB:1B
X509v3 Authority Key Identifier:
keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.18.0/23
Signature Algorithm: sha256WithRSAEncryption
62:a9:27:59:fc:f0:69:32:4b:f9:19:1b:8e:0a:a0:df:f1:81:
76:4d:4a:f1:57:7c:0f:ec:f0:88:b8:35:2f:e5:76:d8:15:a5:
67:08:6e:da:92:b7:90:af:48:1f:f1:4b:6a:34:54:01:54:fa:
7e:6b:fa:9e:d4:b6:0a:5a:c0:28:60:25:6d:bf:82:53:98:8e:
78:d5:a4:0e:02:00:8b:0c:87:eb:bc:b2:6d:02:06:53:34:b5:
dd:a2:45:a9:a7:4f:56:ec:50:cf:23:fd:bc:92:bd:09:2b:4f:
97:98:96:45:12:19:5e:75:82:97:c6:69:b8:d3:5c:af:20:4a:
0a:8a:ca:d1:ff:90:c7:42:f7:ce:4c:1a:4f:77:c4:c0:ca:43:
da:bb:78:cf:1b:85:fe:15:80:2b:01:46:82:65:4d:2d:e8:de:
49:3a:e7:81:ee:b5:0c:45:ff:b1:45:34:a5:f3:b1:ae:b5:d4:
8d:1b:95:11:6c:03:84:74:55:01:8a:4a:2b:fa:49:08:b5:3c:
19:e3:30:a0:cc:f0:67:3e:fe:f4:f0:5b:dd:b2:c3:df:ff:05:
6e:27:1c:f8:47:ee:44:c7:e7:5d:b8:41:5b:57:63:14:b3:0e:
9d:4a:5d:80:a4:3b:e4:0b:ed:2e:49:aa:1d:d5:e1:3e:01:c6:
bd:7f:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:08:32 2025 by rpki-client