Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa
File: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier: sRruwoxKxC5v+4ajE2hcnIZkT8FBlsjjqaqL/hWChfA=
Subject key identifier: 00:9A:EC:19:70:A6:B4:29:E5:6F:3F:49:03:D1:9A:0B:7D:E0:71:F2
Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48
Certificate serial: 7EFE48A48B93036894572BD101DCF531E00A02CA
Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa
Signing time: Tue 07 Jan 2025 04:01:20 +0000
ROA not before: Tue 07 Jan 2025 03:56:20 +0000
ROA not after: Tue 06 Jan 2026 04:01:20 +0000
asID: 58820
IP address blocks: 103.185.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fe:48:a4:8b:93:03:68:94:57:2b:d1:01:dc:f5:31:e0:0a:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48
Validity
Not Before: Jan 7 03:56:20 2025 GMT
Not After : Jan 6 04:01:20 2026 GMT
Subject: CN=009AEC1970A6B429E56F3F4903D19A0B7DE071F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:2c:31:6c:0b:34:41:a5:dc:f8:34:10:d7:
39:03:de:24:a8:eb:22:8a:bc:95:2f:5b:51:d8:25:
d0:60:69:c2:37:83:a8:a2:1a:e6:c5:49:cb:4e:8e:
05:04:b0:7e:2a:7b:d7:c4:9f:c4:48:1e:66:e5:7c:
04:06:9a:dd:04:4b:1c:ee:ae:25:a1:f0:01:44:ff:
1b:6a:fd:bf:f7:f3:fa:f2:2a:ed:5c:f3:7b:b3:0f:
66:c3:a9:85:aa:33:31:c3:e1:3f:05:1e:21:a8:60:
23:50:81:58:e2:12:c7:26:50:54:bf:f9:a2:fd:eb:
78:52:0f:d3:e5:90:ab:da:ce:3c:be:04:5e:f4:68:
2e:25:71:fd:69:2c:cf:b3:3b:cd:6a:ea:6a:3a:c0:
91:18:1f:b0:75:e6:5b:24:11:ed:16:86:bc:fe:b9:
04:02:e6:69:c6:5c:e7:34:15:0f:0b:52:4f:f0:8c:
11:fb:fc:ea:5d:bd:a4:be:d8:f7:13:6e:10:6a:5c:
06:2f:f3:20:f3:03:ed:08:09:1e:13:cc:c0:7e:2e:
da:09:30:7b:45:c3:23:c9:c5:32:46:c6:02:1f:8f:
3b:39:05:b1:16:fc:a1:2e:d4:b5:35:63:0c:68:d1:
c9:17:b5:ab:dd:3c:9e:4b:2b:94:4c:e0:7e:1a:f9:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:EC:19:70:A6:B4:29:E5:6F:3F:49:03:D1:9A:0B:7D:E0:71:F2
X509v3 Authority Key Identifier:
keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.48.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:70:2b:43:aa:fa:19:ea:11:da:fe:ab:69:cb:d2:61:c3:1f:
09:0e:b9:00:dc:d1:d2:a3:6d:c7:79:11:4c:1a:d8:24:40:f1:
b8:31:e9:66:07:8f:c2:15:a9:68:0f:7a:99:c1:d1:b6:4a:e5:
b3:b0:14:74:5a:5a:68:7c:c8:11:bc:da:03:7b:0a:27:98:fc:
47:f9:51:10:27:c7:c4:23:c4:07:cb:e3:23:0f:4b:97:b0:7e:
f8:7c:b8:f0:99:3e:b9:f0:25:ec:3d:ec:fc:0b:64:c2:b3:0c:
22:28:72:ae:ed:09:90:9d:8f:51:7a:2c:e3:d4:e1:e1:d2:af:
01:f0:2b:8a:b8:86:f8:f0:8f:47:cb:67:15:aa:15:e0:3d:17:
18:dc:81:2f:10:75:13:50:40:d5:45:f6:9f:19:63:0f:50:e5:
18:76:64:10:46:a7:91:47:c2:e7:e9:fb:0e:1e:30:1a:75:05:
45:9c:b5:36:0e:48:46:59:6e:11:85:c9:21:03:59:52:0e:73:
49:de:9b:63:1c:03:52:ed:af:16:4c:98:8b:b3:de:a6:d5:e9:
0b:ed:c9:79:df:40:45:8a:dc:19:4d:67:77:60:8c:07:49:3e:
7c:ba:6d:3a:4d:91:bd:5d:fa:c4:dc:81:25:4d:e3:53:5a:2f:
5b:1b:48:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:16:47 2025 by rpki-client