Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
File: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=
Subject key identifier: 09:7F:34:9A:6B:13:7F:64:25:84:6D:92:25:0F:ED:C8:F4:E7:6B:E7
Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial: 4CD9EA57B81DFB69AD7EC019BAE8A608DD0294A0
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
Signing time: Wed 05 Mar 2025 02:00:02 +0000
ROA not before: Wed 05 Mar 2025 01:55:02 +0000
ROA not after: Wed 04 Mar 2026 02:00:02 +0000
asID: 149693
IP address blocks: 103.186.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d9:ea:57:b8:1d:fb:69:ad:7e:c0:19:ba:e8:a6:08:dd:02:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Validity
Not Before: Mar 5 01:55:02 2025 GMT
Not After : Mar 4 02:00:02 2026 GMT
Subject: CN=097F349A6B137F6425846D92250FEDC8F4E76BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:7b:59:5c:63:f5:4d:05:7b:32:01:35:fe:
56:43:8e:de:82:34:0a:a3:2f:e4:ef:18:e6:ef:12:
8a:a6:91:53:7c:c4:f7:29:04:36:c8:56:04:60:4d:
d6:32:21:a5:2c:08:df:b6:97:58:e8:07:4a:b0:c0:
02:bb:40:6f:1c:30:26:48:81:82:52:a9:31:60:53:
0b:13:89:1d:83:1b:c4:85:e0:0f:47:0a:59:95:fb:
8f:84:a0:7f:df:8f:4e:57:b4:05:ac:01:db:5e:32:
25:65:be:05:bf:a4:5b:c7:87:2c:52:06:19:36:5c:
c6:e1:f2:d3:42:d9:27:a0:da:04:3b:bf:fb:b3:d6:
2d:73:de:6c:a8:fc:9b:0f:d6:bf:be:65:97:3a:2f:
f7:65:d6:f7:d8:16:08:a7:1d:2c:ae:65:6d:16:06:
2e:94:8a:14:1b:c6:75:0c:2c:28:04:1a:c1:4a:c3:
4a:92:a4:b9:0a:ae:5d:26:54:ee:e4:ba:43:96:98:
f6:cf:c7:49:a1:fe:a2:cc:41:ef:8f:91:9b:45:ad:
7b:0a:ce:66:cc:cc:fc:48:de:00:68:2b:68:32:f0:
4e:ac:23:24:99:4a:a1:b6:57:14:21:1d:5f:1b:15:
67:9b:61:ef:7c:c8:94:02:80:75:89:ea:5b:b0:f9:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:34:9A:6B:13:7F:64:25:84:6D:92:25:0F:ED:C8:F4:E7:6B:E7
X509v3 Authority Key Identifier:
keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.97.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3c:74:62:7d:f8:bd:75:4d:d1:a7:68:c8:2f:3d:fc:4f:47:
98:fc:09:f1:92:08:53:71:00:68:77:35:15:15:3d:c2:f0:74:
dc:61:83:d6:cb:49:6e:3b:62:df:5c:21:f3:f6:09:db:2c:78:
6a:76:63:06:ea:a5:e7:ae:e2:41:4f:95:05:70:d3:d7:52:ab:
8b:f6:c1:f7:f0:64:0c:6f:6d:6e:52:04:98:0d:cb:9a:ba:11:
07:4a:e6:da:5d:5d:a8:d2:8d:84:9d:fc:3a:1a:18:b3:5f:12:
e9:d9:80:be:ee:ed:1d:c0:00:7a:d7:45:95:b9:50:df:a9:c8:
04:68:da:37:f0:06:d7:dd:d2:c7:cb:5a:78:c7:c4:c0:06:94:
cc:ef:85:57:cf:b9:89:2b:c7:5a:9a:76:73:35:a6:3f:eb:96:
e7:5d:f7:f9:a4:08:37:66:f9:9e:06:d4:4e:82:4d:e6:80:fc:
8d:3f:e6:34:df:64:4c:68:c2:9c:1d:d1:a6:31:b1:78:4c:d5:
d8:c3:36:69:e5:8f:ef:65:3e:e0:61:3b:92:58:13:78:1b:1c:
a5:38:a0:63:03:86:3b:77:0e:4d:e0:af:e5:38:a7:2a:95:4c:
9e:f5:ed:02:0b:5c:34:42:69:31:21:89:c9:71:d7:b1:f2:5b:
07:90:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:44 2025 by rpki-client