Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
File: 3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier: QWsnz+9sKQDNjTVDt7YlGBnAiFOi7135wF4zGlFlMB8=
Subject key identifier: 7C:6B:18:95:EB:8E:32:40:6C:5E:E1:DC:71:B7:EC:D4:D1:72:18:57
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 762C024B4A87320D9008B3E5A1C370766B9C6018
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
Signing time: Tue 07 Jan 2025 04:00:00 +0000
ROA not before: Tue 07 Jan 2025 03:55:00 +0000
ROA not after: Tue 06 Jan 2026 04:00:00 +0000
asID: 133798
IP address blocks: 103.44.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2c:02:4b:4a:87:32:0d:90:08:b3:e5:a1:c3:70:76:6b:9c:60:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Jan 7 03:55:00 2025 GMT
Not After : Jan 6 04:00:00 2026 GMT
Subject: CN=7C6B1895EB8E32406C5EE1DC71B7ECD4D1721857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:55:19:5d:89:14:88:e9:bb:af:08:7c:a7:
4b:79:05:8d:1f:70:aa:c2:39:d6:8e:77:7c:14:a3:
6f:52:e5:31:3c:c7:17:fa:d1:43:da:56:23:96:f8:
43:36:c6:39:a6:8f:45:a3:5f:92:5d:5a:09:7d:cc:
9c:ee:6b:c7:a5:22:45:90:5f:a7:02:57:68:5e:65:
cc:ea:e2:3a:86:5d:33:b4:38:db:5e:1c:75:4a:6e:
a2:22:74:79:33:6c:d7:ee:a7:c1:59:df:4b:9c:d6:
ce:e6:ab:db:64:e1:0e:a0:9e:94:a3:b6:0f:24:58:
7f:10:95:d3:59:47:ab:dc:03:82:5f:b3:12:29:03:
6d:f5:e9:8b:2c:49:21:df:bb:e9:17:76:85:05:25:
1d:f6:7b:af:48:58:46:1f:09:f3:d8:b6:e6:78:8f:
59:27:22:b6:b7:65:7d:16:44:b5:b2:20:a1:93:86:
6c:b3:c0:c1:0c:46:95:47:6c:a2:e9:7a:aa:92:f9:
cc:4c:d8:52:75:d4:10:3e:a4:1f:05:66:8c:ce:d5:
d8:cb:a4:53:13:8d:16:24:64:9e:2c:fd:48:32:c7:
97:0c:a4:b5:ad:e4:15:f9:60:dd:95:fb:d3:77:74:
35:08:9c:27:26:e9:09:09:a8:98:fb:ad:38:dc:cb:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:18:95:EB:8E:32:40:6C:5E:E1:DC:71:B7:EC:D4:D1:72:18:57
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.36.0/22
Signature Algorithm: sha256WithRSAEncryption
97:c9:80:8a:61:2a:0a:98:ed:ea:e4:e2:47:ac:1d:a5:4a:ab:
ae:5a:43:a8:73:f4:e9:c5:fb:16:1c:fb:60:39:ee:6a:f9:f1:
7c:91:8c:b7:ee:fd:a3:db:2c:0c:88:6b:9f:0a:5f:36:e2:24:
8d:0f:04:b1:3d:21:d7:c9:d4:51:b2:4d:cc:2e:db:b2:2d:9f:
45:0d:78:ce:5c:4c:b3:a6:4f:f5:9c:42:95:35:e8:51:70:b5:
34:28:59:59:fa:94:02:f3:f2:c1:a8:0f:bb:7c:bc:ef:98:b0:
4d:3b:73:ce:3b:8e:8c:68:5a:54:d1:99:2d:3f:29:62:52:65:
8d:da:24:e9:38:f2:37:d4:2e:0b:c8:2c:79:ec:67:68:66:90:
86:76:44:32:07:c3:58:43:9c:bb:08:c3:d0:66:b0:76:ba:85:
8f:0d:db:8e:35:44:c4:41:1f:a6:58:fa:14:fa:a3:d0:65:ee:
1b:f9:c0:d9:ab:31:4c:57:98:e3:04:ae:6a:ae:cd:04:66:fe:
25:0a:5e:58:0b:88:ce:49:09:3c:55:b2:7e:d1:41:fc:99:2d:
aa:ca:88:9e:f1:19:e5:14:5e:8d:3d:25:13:9c:b4:04:ee:fe:
d5:e8:f9:d3:c2:a7:b0:2f:86:d6:04:ec:33:1d:d0:0d:a9:2e:
93:ff:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:31 2025 by rpki-client