Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
File: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (raw, json)
Hash identifier: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=
Subject key identifier: 97:17:04:B5:16:99:DD:0A:C0:EC:02:65:AA:77:24:4E:CD:5E:62:0C
Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial: 3F9EE43C89535827A4F427F9F2770B6E217EBF21
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
Signing time: Thu 09 Jan 2025 15:00:00 +0000
ROA not before: Thu 09 Jan 2025 14:55:00 +0000
ROA not after: Thu 08 Jan 2026 15:00:00 +0000
asID: 151535
IP address blocks: 103.245.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9e:e4:3c:89:53:58:27:a4:f4:27:f9:f2:77:0b:6e:21:7e:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
Validity
Not Before: Jan 9 14:55:00 2025 GMT
Not After : Jan 8 15:00:00 2026 GMT
Subject: CN=971704B51699DD0AC0EC0265AA77244ECD5E620C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:28:1d:76:14:94:ed:33:6c:95:96:08:8f:
c9:89:d7:28:80:7c:e3:05:6e:3e:91:bf:eb:64:cd:
50:37:17:82:c9:f6:36:80:1c:e7:cd:4a:89:17:08:
04:36:08:76:e7:75:af:fa:91:c5:6e:ac:ee:42:ac:
e3:54:19:51:59:a8:6f:0e:a8:81:b7:80:a3:16:02:
57:39:c0:e8:56:61:92:00:0b:ee:ab:db:1e:b3:cb:
a3:0b:0d:82:d7:c0:58:99:f9:a0:bc:b0:8d:cd:5d:
1b:a8:8c:bf:d4:ce:e4:f5:2f:ba:f4:f5:9e:5c:03:
f4:3c:56:a6:b0:68:35:25:31:da:e1:e2:a0:2e:4e:
62:29:99:e1:0b:07:05:31:45:b1:72:d3:76:a9:39:
30:49:f8:af:bf:0e:48:6f:1f:5c:7a:fa:c8:16:ee:
58:cc:c9:30:f3:0e:da:72:58:af:b6:19:59:04:cc:
0a:44:90:b1:40:1b:f3:81:39:0e:4b:8b:e0:e4:c7:
49:38:85:6a:bb:4c:c0:26:bd:27:ca:21:9b:4c:b8:
08:8a:2b:5f:15:cb:52:bf:9e:83:09:3a:dd:76:d5:
14:5e:7e:cb:b7:c8:de:d6:aa:e2:a0:ee:41:c9:00:
58:02:3b:f0:29:f4:d3:14:ef:77:11:5d:bb:b3:10:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:04:B5:16:99:DD:0A:C0:EC:02:65:AA:77:24:4E:CD:5E:62:0C
X509v3 Authority Key Identifier:
keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7c:ab:be:3b:eb:e8:e5:ce:a5:33:0b:5d:3a:e0:cc:df:ce:
dc:aa:86:08:8b:ca:89:70:53:c2:de:d9:1c:84:99:2c:37:72:
b9:2d:15:70:53:42:93:fe:da:ec:2e:f6:c7:fb:18:19:8c:57:
65:8e:6c:58:1e:02:cd:0e:50:1b:fb:40:ac:72:a9:f4:ea:8f:
07:d6:62:3c:f5:61:0e:16:ac:f3:41:aa:e2:38:b3:ac:6e:dd:
54:80:6e:dd:f6:8c:41:22:ab:2e:07:7b:4a:24:bf:ad:a4:15:
e0:54:0b:25:83:05:27:e2:af:50:08:a0:32:a6:f1:4b:a4:85:
49:62:14:90:3e:f4:f4:49:40:0c:1b:41:92:0e:b6:c3:02:7c:
c7:b1:f4:bd:39:73:54:8c:24:9d:ce:84:b5:06:36:05:db:81:
2a:28:45:30:8a:b0:ff:a5:0f:7f:1e:1b:77:eb:c8:69:c7:80:
98:68:b1:7f:d0:b3:cc:df:d2:48:e5:ce:b6:62:fb:09:10:b1:
9a:01:50:44:8d:b5:d1:29:36:28:b5:d8:14:df:b3:26:69:6c:
9f:59:00:31:c5:2d:1c:9f:b1:1e:f3:59:bb:94:63:21:e4:73:
e9:bc:f6:ae:3d:c3:41:a2:5d:66:0e:ff:7e:c4:ac:e6:42:4d:
3e:d5:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:21:55 2025 by rpki-client