Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa
File: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier: +2iIBKPqxi3ITGgsrY9PgXx230T1r0owkzHTREjnaJo=
Subject key identifier: 86:D6:5B:50:B2:A6:AF:5B:18:E6:69:54:6B:2F:0E:AB:0A:47:3C:86
Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial: 301A4ED1C55D5B697A171DF9D1FB4A8D32FC8C59
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa
Signing time: Mon 01 Jul 2024 01:05:02 +0000
ROA not before: Mon 01 Jul 2024 01:00:02 +0000
ROA not after: Mon 30 Jun 2025 01:05:02 +0000
asID: 136879
IP address blocks: 103.107.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1a:4e:d1:c5:5d:5b:69:7a:17:1d:f9:d1:fb:4a:8d:32:fc:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Validity
Not Before: Jul 1 01:00:02 2024 GMT
Not After : Jun 30 01:05:02 2025 GMT
Subject: CN=86D65B50B2A6AF5B18E669546B2F0EAB0A473C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:66:f2:05:f0:ac:d9:6e:d6:ba:8c:41:74:
de:b9:a6:be:df:64:be:cf:1e:56:b9:42:5d:ae:52:
9e:39:fe:ee:2a:50:1a:f3:ba:db:b1:12:e1:4e:32:
90:c5:60:86:e1:29:f2:75:c3:90:cf:98:52:6d:07:
1c:e5:ae:86:51:7e:74:36:08:96:23:01:a4:91:2b:
d1:c4:14:0e:f9:af:67:81:6f:65:5f:9c:83:8f:df:
41:27:15:1c:1d:87:00:a5:f7:51:f4:b8:3a:dc:08:
2c:f2:8c:23:89:19:e3:72:6d:fc:60:20:4e:78:ee:
6e:3f:25:8a:ca:91:6c:ff:5a:34:e7:27:e0:79:73:
bf:d8:ac:0c:74:52:00:16:dc:00:c9:e9:9b:38:87:
45:ec:6a:7b:e9:72:5f:8a:0f:91:7b:d2:be:ce:3a:
d7:a6:2c:ca:ee:ee:ce:5e:ae:9c:27:61:0a:7c:bf:
a5:e6:20:4d:97:09:34:e7:63:1c:12:e4:9a:75:8b:
65:ea:2e:59:1a:0a:91:e8:88:84:10:cb:fe:de:66:
ef:9c:82:16:b9:1e:45:c8:f2:10:64:9a:6b:e1:21:
4f:23:d5:89:a7:56:3a:3c:86:0b:7a:4e:5c:8d:a3:
4f:6f:5c:1c:bc:e4:88:aa:20:ad:ff:e6:4e:71:53:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:5B:50:B2:A6:AF:5B:18:E6:69:54:6B:2F:0E:AB:0A:47:3C:86
X509v3 Authority Key Identifier:
keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.85.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7d:10:82:40:3b:69:96:15:b6:98:1e:72:ff:e7:b6:a8:ac:
49:9c:60:cf:01:7f:f5:9d:fd:1d:5a:dd:4a:c2:9c:f6:5c:54:
d9:e2:b2:12:95:eb:fe:60:fe:e4:e2:51:97:f8:f6:4e:39:0b:
b8:d9:8d:4e:23:5e:22:4b:fb:b1:43:aa:50:aa:46:f4:c8:ec:
0a:95:3b:b4:ee:ae:53:e8:df:08:63:a6:bf:6e:43:41:16:86:
94:da:cf:35:6e:5d:7a:a1:b7:16:8a:37:1f:47:7c:91:29:3e:
40:d6:f2:52:81:a7:bf:5c:97:a2:ea:2c:39:65:6f:7c:03:d0:
99:e3:db:0a:4c:92:65:a7:b3:e5:3e:5d:f1:e6:27:5d:f7:94:
b7:ab:e3:41:8e:22:c8:bd:97:96:f5:f2:a7:13:73:dd:59:03:
89:ca:9d:11:4f:b9:8b:d8:62:2b:ed:82:35:9c:99:ab:9f:8f:
2f:31:1f:aa:89:8c:c5:5b:96:d8:62:f1:a4:85:4d:43:01:b0:
aa:15:f9:e9:93:ab:90:51:d0:31:31:e0:bd:dd:93:05:bb:d4:
be:65:c7:2d:32:64:f9:bf:71:86:96:2d:12:cd:5f:52:92:58:
8e:bf:1e:c1:11:00:04:86:6a:7c:ec:e8:98:12:ef:2f:7a:21:
be:a4:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:14 2025 by rpki-client