Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32322d3234203d3e20313331363934.roa
File: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (raw, json)
Hash identifier: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=
Subject key identifier: 26:87:81:F3:83:8C:1B:91:88:E6:47:C2:BD:EB:CC:0B:03:97:6D:39
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 580E0DF6676946EB9DF53F1236F13F40E49D8020
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32322d3234203d3e20313331363934.roa
Signing time: Wed 16 Oct 2024 05:00:02 +0000
ROA not before: Wed 16 Oct 2024 04:55:02 +0000
ROA not after: Wed 15 Oct 2025 05:00:02 +0000
asID: 131694
IP address blocks: 103.7.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0e:0d:f6:67:69:46:eb:9d:f5:3f:12:36:f1:3f:40:e4:9d:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Oct 16 04:55:02 2024 GMT
Not After : Oct 15 05:00:02 2025 GMT
Subject: CN=268781F3838C1B9188E647C2BDEBCC0B03976D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:68:b0:1e:48:a7:ed:80:81:14:17:46:50:
79:d6:d2:69:1f:85:c9:4e:37:00:2b:ed:07:f9:89:
e6:3c:92:b6:d6:7d:b4:5a:cb:97:ad:eb:0c:61:1d:
bb:4e:4c:e5:fa:93:81:f6:89:da:27:77:7e:36:45:
3b:48:08:c9:95:10:dd:41:71:3b:f5:72:97:ec:e6:
41:54:53:f0:6d:70:0c:5d:32:1d:92:4c:d2:c5:92:
84:dc:5c:43:9e:47:48:45:92:44:0d:e5:d5:3c:db:
ba:9a:4f:30:a0:f4:4b:7b:b3:8c:78:3f:1f:b4:ec:
19:b4:71:d3:31:53:cb:62:c7:30:e1:eb:0c:24:7c:
03:95:ba:36:ea:cf:51:a3:80:6d:3f:d8:d9:10:05:
77:3d:5b:41:08:bd:d3:87:fe:f8:d3:e8:5b:40:57:
17:c7:56:e9:b2:50:c2:9d:63:a0:8d:47:78:d3:ff:
87:f5:f7:12:92:b2:a0:fd:dd:40:3d:c4:d4:b4:f9:
41:1f:e1:40:08:8a:5e:cf:dd:d2:01:9c:b0:49:70:
88:3b:b2:f7:d7:57:db:5d:a4:00:15:e8:28:d9:a6:
7e:c8:58:bc:fc:41:f4:fc:60:fa:1d:c0:fe:ee:db:
0c:cb:d1:9b:fa:d7:2f:41:5f:e3:f0:97:ec:b1:7b:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:81:F3:83:8C:1B:91:88:E6:47:C2:BD:EB:CC:0B:03:97:6D:39
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32322d3234203d3e20313331363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:1c:a9:8d:59:de:03:5d:05:ea:c3:cd:d5:87:04:24:3d:e6:
88:c5:1d:e9:f5:b8:c9:a4:6f:3f:cf:fe:85:e2:88:08:eb:cc:
66:c1:5e:32:7f:db:ea:c4:74:6b:06:db:d2:af:44:44:ad:ff:
73:5e:66:a8:47:5f:0a:3c:9d:4f:ae:13:28:f9:1d:38:39:72:
16:12:1c:99:d5:52:3f:34:10:4c:37:8a:62:7f:24:7d:a0:aa:
22:bd:38:17:6a:17:dd:e0:87:2e:6e:65:6e:d9:97:41:e1:76:
24:1d:cd:06:84:80:ec:eb:7f:c8:23:58:7e:11:96:91:a5:af:
fb:bf:20:58:02:ee:9c:ce:c0:1f:8c:be:e5:e8:0f:0c:d0:fb:
ae:08:e9:c8:86:92:3b:25:b4:0d:34:37:22:af:35:4b:0b:ac:
06:37:a5:00:19:3a:c0:17:c5:8c:bd:bf:16:76:64:1e:9b:d8:
5c:a6:9f:b9:f2:30:19:00:73:4c:57:b7:e8:26:c2:d7:98:e7:
c6:64:d0:b1:9e:d6:c8:ee:af:cf:69:3c:5f:94:cb:9b:cb:67:
cc:11:ac:25:3d:11:89:f6:d5:48:33:8c:f3:1f:d1:ca:56:e7:
ed:38:bc:78:86:a9:41:d0:44:5d:47:15:76:fc:e5:1a:25:79:
63:1c:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:44 2025 by rpki-client