Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa
File: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (raw, json)
Hash identifier: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=
Subject key identifier: 16:93:CE:B7:24:8A:E2:EA:61:80:EE:4A:8B:F3:64:5F:EA:18:78:2E
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 4782653598574893ECEA5AC1AA4988BD1688FDC7
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa
Signing time: Tue 13 Aug 2024 10:00:05 +0000
ROA not before: Tue 13 Aug 2024 09:55:05 +0000
ROA not after: Tue 12 Aug 2025 10:00:05 +0000
asID: 131694
IP address blocks: 103.7.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:82:65:35:98:57:48:93:ec:ea:5a:c1:aa:49:88:bd:16:88:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Aug 13 09:55:05 2024 GMT
Not After : Aug 12 10:00:05 2025 GMT
Subject: CN=1693CEB7248AE2EA6180EE4A8BF3645FEA18782E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:10:ab:a3:dc:52:0e:82:10:f4:9a:f1:b4:
4d:b6:b2:4b:fe:6d:72:31:9c:fa:2f:48:57:5b:ba:
07:11:a4:ae:ed:05:cf:d5:51:22:2c:40:cb:b1:49:
ff:56:48:6e:f7:b3:e8:83:de:15:75:e8:a7:1c:d2:
29:92:df:5d:0e:08:10:a8:ad:f1:d1:17:af:1a:ef:
30:fd:ea:e5:0d:23:33:13:cf:e9:83:fd:ad:cd:57:
0b:4a:f4:b7:40:31:9f:e3:84:e2:80:79:1c:c2:c8:
26:de:94:21:09:5a:c5:11:58:ce:bd:c9:66:32:a2:
76:16:9a:71:34:85:e4:97:35:21:74:7f:5e:89:2c:
6d:02:5f:b3:f2:85:70:99:74:14:9f:ca:de:fa:f2:
06:cb:24:f6:10:4b:3f:7f:d6:3c:2b:83:75:13:ae:
e1:2f:16:45:09:dc:77:f9:2f:d8:af:63:f2:a3:33:
51:2e:59:26:51:46:a1:a5:6e:6f:b3:48:59:db:d5:
e8:07:a5:90:93:0b:de:fb:b1:d8:1f:cb:86:1f:36:
2a:70:7f:34:0e:e7:32:de:70:d9:e9:06:fb:1d:66:
df:b2:d1:b1:d5:89:9b:f8:3e:dd:77:e1:97:34:d9:
dd:1d:d6:40:47:fe:a8:2e:de:e3:c0:c7:1e:6c:d1:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:CE:B7:24:8A:E2:EA:61:80:EE:4A:8B:F3:64:5F:EA:18:78:2E
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.84.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d0:5b:92:53:ae:88:a7:88:85:73:95:0f:60:a5:78:52:b5:
d7:c7:21:c2:bf:22:2b:15:d6:ce:e0:da:7f:ae:a4:75:1c:f6:
d8:bf:7b:6f:20:67:8c:4f:69:a6:11:d9:5b:1e:a3:2f:75:8f:
b8:6f:dc:02:82:44:18:c0:ca:0d:c3:dd:26:bc:46:73:16:52:
55:04:6c:53:1f:99:bc:6b:5e:7b:53:be:b0:05:00:38:60:07:
9c:c9:ee:c5:63:ad:8c:77:b3:b2:e3:19:79:a1:b8:33:72:61:
b3:7a:dd:8e:ec:a8:55:d9:4c:24:99:59:e3:c0:5e:74:b9:fe:
0a:99:4c:a2:af:67:0a:7c:8f:73:78:a6:28:ba:07:ee:8c:94:
e3:d9:6e:08:6e:54:cf:2f:d0:f7:67:4f:57:2f:aa:55:43:96:
88:26:17:53:9a:19:50:3f:b1:14:b8:7a:68:aa:78:9e:e9:fa:
3e:64:32:d0:d5:76:9e:a0:7b:a6:8b:f8:20:eb:c3:be:64:27:
e5:50:e3:6a:93:54:ee:a9:03:51:fa:13:0c:14:66:0e:9c:ad:
6f:3a:74:a9:af:e6:ba:9c:4e:a4:26:b3:54:0c:23:4c:b2:c2:
5e:62:5f:62:60:49:b8:7e:88:15:b2:d1:99:22:d0:97:e6:40:
68:34:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:47 2025 by rpki-client