Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
File: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (raw, json)
Hash identifier: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=
Subject key identifier: 8B:26:2D:9B:8A:B1:A4:65:E1:70:3F:D8:BD:CF:49:91:E2:BB:1F:8A
Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
Certificate serial: 5056A303F00BFB55A587BB0D73DCB50005BBCA1C
Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
Signing time: Mon 10 Feb 2025 08:00:01 +0000
ROA not before: Mon 10 Feb 2025 07:55:01 +0000
ROA not after: Mon 09 Feb 2026 08:00:01 +0000
asID: 147164
IP address blocks: 103.177.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:56:a3:03:f0:0b:fb:55:a5:87:bb:0d:73:dc:b5:00:05:bb:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
Validity
Not Before: Feb 10 07:55:01 2025 GMT
Not After : Feb 9 08:00:01 2026 GMT
Subject: CN=8B262D9B8AB1A465E1703FD8BDCF4991E2BB1F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:41:58:74:8f:a7:b3:b7:25:ca:78:13:4e:
76:9f:9c:07:e3:f0:ec:25:90:60:98:54:9b:9b:06:
e2:48:1b:fb:44:a2:ac:48:49:d9:0d:b6:fd:48:fb:
b0:ca:9b:d1:b7:4f:a4:61:b3:bc:33:3c:9b:38:b2:
26:d3:ce:51:cb:3e:c7:ae:9c:fd:61:15:b8:06:1a:
fa:93:00:81:c9:a6:e6:80:bf:b4:1e:8f:33:50:3c:
33:01:c0:d7:36:bb:b3:86:69:04:08:79:f3:2c:4f:
4a:34:1f:7e:b3:1f:56:4d:93:47:f3:57:09:c9:1d:
6a:ef:43:c6:4a:52:e7:40:58:e6:18:79:09:83:0d:
1c:a5:b1:57:7d:44:b4:a3:16:93:44:19:74:bf:a6:
6f:aa:10:f0:83:4f:54:fe:90:16:e4:e9:76:a6:2d:
03:41:21:51:3d:ab:47:00:d7:87:41:0b:e1:03:a2:
65:5a:f3:45:f1:dc:13:27:da:00:cb:b3:39:04:58:
07:db:72:05:66:2a:ea:ef:6c:1f:1a:f7:7a:e1:f7:
35:75:71:51:84:9c:7a:a6:31:a4:f7:3f:66:9a:0e:
3a:50:de:c8:89:81:1d:30:b5:fa:99:d5:91:5b:7a:
79:f9:22:f4:c2:31:8f:93:7d:02:23:be:bf:c0:10:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:2D:9B:8A:B1:A4:65:E1:70:3F:D8:BD:CF:49:91:E2:BB:1F:8A
X509v3 Authority Key Identifier:
keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.10.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a7:4a:9d:56:f8:54:76:ec:82:e1:4a:34:af:fe:ce:86:9c:
51:87:1c:ff:47:fa:df:11:7f:3b:c2:78:2e:07:7a:9d:ac:4d:
f9:4a:16:cb:8c:d6:3b:4e:ec:e0:64:ab:e1:82:99:c9:a6:69:
ac:67:c1:15:12:c0:e3:fd:39:85:ed:ea:97:22:fb:85:af:c0:
3e:e4:8b:dc:9a:53:fe:1a:45:5c:b9:1f:8c:da:c5:63:91:3c:
dd:ee:ae:df:82:8d:f9:3a:20:ea:4b:c9:0b:7c:c0:35:af:4e:
25:88:6b:c0:74:32:ae:06:6a:e6:e6:25:d0:cf:5a:40:c1:96:
c0:21:63:0f:65:5f:d6:c6:5c:61:b7:25:b6:b9:7d:7b:29:68:
61:d1:59:39:f8:30:06:33:4d:45:f6:69:cd:08:19:e0:76:f3:
fd:3f:fa:a7:31:dc:ff:76:13:b6:5d:ae:f0:9d:14:38:72:18:
74:ee:d1:99:c4:c0:33:aa:a3:4f:55:c8:65:8b:b3:43:29:9b:
ac:9f:9c:7f:b5:2f:a5:23:b3:c8:18:b3:5a:0e:c2:5c:cc:9e:
b6:ca:0a:1a:ef:c1:8b:c8:15:12:1a:ac:7e:ad:ee:66:36:77:
62:f4:8b:d6:52:9b:dc:bc:96:00:d4:3b:08:47:a5:64:15:c6:
d0:59:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:58 2025 by rpki-client