Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
File: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier: /rq1WhPl2nzWETUM/oiNyUY2THnfP1otKF0KD2KPb+U=
Subject key identifier: BB:63:93:1F:7D:37:EC:27:51:EE:AB:B7:0B:F3:E9:4E:3A:9F:06:B6
Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial: 60D61CCD3D27DAA0C301B523BEA3B23EA6DE659F
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
Signing time: Tue 03 Dec 2024 11:29:59 +0000
ROA not before: Tue 03 Dec 2024 11:24:59 +0000
ROA not after: Tue 02 Dec 2025 11:29:59 +0000
asID: 58378
IP address blocks: 103.161.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d6:1c:cd:3d:27:da:a0:c3:01:b5:23:be:a3:b2:3e:a6:de:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
Validity
Not Before: Dec 3 11:24:59 2024 GMT
Not After : Dec 2 11:29:59 2025 GMT
Subject: CN=BB63931F7D37EC2751EEABB70BF3E94E3A9F06B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:55:95:33:12:b2:96:ca:a5:94:a8:cb:87:
19:45:56:37:c5:39:23:54:30:d0:c2:5c:16:48:76:
0b:9b:11:f9:5a:85:36:f0:a3:0a:7f:f7:a3:23:93:
d1:3a:91:55:b9:a2:82:94:32:19:49:70:b6:ee:96:
61:30:38:9c:7d:8c:69:a9:7b:7c:ed:25:f4:4c:b3:
db:f3:f6:72:5d:0b:c2:bd:cc:56:16:12:85:95:92:
ff:36:e7:32:a1:2d:aa:07:2a:0b:b8:55:33:fd:d4:
22:64:61:06:4f:44:28:2e:03:1c:0e:21:2a:fd:d2:
4d:0e:5b:3c:bc:30:b9:f8:6c:0b:ad:00:90:de:ef:
83:f1:14:c8:ef:84:69:33:6b:7c:d5:98:47:6c:11:
65:eb:c5:12:c7:14:35:51:8f:b5:5d:68:e5:b0:a9:
a1:66:f8:2f:1d:dd:95:8d:7c:11:35:77:b7:f7:bd:
82:93:89:52:d5:ff:31:f6:a4:0e:46:cf:1d:35:ca:
38:65:03:98:ad:90:b1:8d:25:cc:e1:00:9f:43:fc:
6f:8a:b5:7b:16:b4:68:26:8c:2c:56:c3:5f:11:f8:
5a:a9:34:9b:b5:8c:96:68:d7:25:db:1b:3e:28:27:
ea:99:8e:2f:9f:eb:f3:71:2b:70:33:e9:40:1e:d1:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:93:1F:7D:37:EC:27:51:EE:AB:B7:0B:F3:E9:4E:3A:9F:06:B6
X509v3 Authority Key Identifier:
keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3d:29:09:02:7c:e2:95:a0:57:e5:46:6f:74:5b:5d:3d:66:
b6:43:35:df:33:be:5c:59:fb:6a:91:b5:04:e6:54:1b:62:dd:
2c:0f:f6:bc:14:39:f1:74:76:3b:47:d6:14:77:18:4d:4e:6d:
05:54:05:6a:83:b2:62:36:4c:d5:ae:43:42:fb:b8:ae:41:b0:
a7:58:2b:3b:00:db:63:e3:58:8e:d3:37:be:8a:aa:a2:37:f0:
be:c1:5f:65:0f:fb:3d:37:1e:2f:e1:fc:d4:6c:31:cf:96:3d:
90:05:4e:cf:e8:f9:95:fb:90:56:a6:20:b7:26:af:b6:c6:a1:
54:e3:9d:18:3d:64:a3:11:07:b4:2b:54:51:d6:36:8d:c9:c1:
36:78:51:13:df:2a:9b:f9:ad:e7:0a:dc:11:e0:63:fc:39:f2:
31:00:92:66:2e:d3:ab:a6:e3:4a:03:2e:ec:be:29:27:1b:85:
d2:6a:fb:10:34:80:c6:b9:9f:18:34:c9:6b:4c:f8:76:05:d3:
50:b4:b5:ff:18:96:9d:ae:05:49:92:13:a0:30:6b:55:0d:f8:
1e:c5:b7:af:11:c5:d8:10:a2:86:b2:e1:a0:b5:f4:62:0f:39:
b3:a8:46:d3:8a:ab:25:68:17:17:f8:96:86:98:16:b2:9c:11:
0f:1a:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:30 2025 by rpki-client