Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
File: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (raw, json)
Hash identifier: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=
Subject key identifier: B5:5D:84:60:58:77:36:94:5F:A4:F4:78:87:27:D1:93:6C:89:FC:CE
Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial: 5825FC2A60A1A043F65BA2073050BF8A026BCE72
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
Signing time: Thu 06 Mar 2025 05:00:06 +0000
ROA not before: Thu 06 Mar 2025 04:55:06 +0000
ROA not after: Thu 05 Mar 2026 05:00:06 +0000
asID: 149706
IP address blocks: 103.186.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:25:fc:2a:60:a1:a0:43:f6:5b:a2:07:30:50:bf:8a:02:6b:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Validity
Not Before: Mar 6 04:55:06 2025 GMT
Not After : Mar 5 05:00:06 2026 GMT
Subject: CN=B55D8460587736945FA4F4788727D1936C89FCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:91:1b:93:35:4d:cb:0c:a2:a9:e8:d8:f3:
69:b2:76:68:62:85:15:a0:2a:a3:a8:a2:45:83:dd:
5a:20:61:37:ee:4c:e1:b9:c9:1b:3b:34:ed:fa:af:
69:38:8d:06:a9:ca:f4:cf:28:b1:e4:66:e8:2c:ca:
ed:42:ff:23:6b:e1:1a:ba:1a:b5:3c:af:a0:95:9a:
28:63:f8:30:fb:61:53:96:f6:c5:4f:1f:7b:37:32:
dd:55:29:ad:d0:85:68:5f:c1:15:0d:41:ec:72:8f:
e9:69:c4:2b:82:bd:a8:19:bf:ef:ce:12:79:74:d6:
aa:b8:79:25:d8:4f:64:af:0d:9b:d8:93:15:e6:64:
de:ab:62:8e:7a:18:a9:ec:0a:6f:9a:27:d2:a3:be:
aa:9d:2d:dc:25:b0:ec:4a:44:4a:84:5c:ef:1c:f0:
46:c1:ed:40:fa:ac:a9:39:c4:d8:3d:79:68:61:bd:
d3:ed:e7:4a:84:e5:05:dd:fc:c5:fd:83:49:95:73:
ad:2c:76:ca:2a:16:c1:3a:e9:27:32:0c:62:97:f8:
a9:aa:41:72:09:f2:36:86:e6:67:00:19:c9:be:98:
e1:0e:3b:f9:18:f3:07:e2:a6:e5:c2:43:2a:1f:5f:
b1:79:e3:84:cc:59:b0:5c:23:ab:53:75:52:55:b1:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:84:60:58:77:36:94:5F:A4:F4:78:87:27:D1:93:6C:89:FC:CE
X509v3 Authority Key Identifier:
keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:3c:c3:32:0c:8d:9f:b9:7f:ad:c1:0c:e9:9c:76:32:28:a7:
71:65:ea:80:79:8b:0e:da:c8:b4:52:2a:34:ed:d7:43:19:9f:
84:20:9f:54:5c:8b:53:d3:a7:fa:e5:7b:4d:5a:f0:90:4a:f9:
58:43:68:b1:bc:47:8c:3c:3a:a1:91:78:6d:1d:a3:ad:11:b5:
85:b5:e8:24:1e:de:f3:04:e4:0f:85:e6:4d:28:58:40:ae:dd:
cb:0b:92:50:ba:d5:db:d5:b0:07:78:ba:fe:c6:6d:e9:ee:c6:
6d:2b:08:29:8e:54:9d:d5:6d:26:84:e8:b4:ec:77:71:41:d4:
76:ab:b5:2d:88:1c:d5:44:a5:12:35:fb:9b:fd:e6:47:a5:66:
ed:b8:4e:de:72:f2:5a:6d:00:09:b3:06:c4:16:1b:f5:30:3e:
d0:95:d3:a0:e3:6b:57:44:7d:16:ef:e6:2f:7d:cd:ed:18:6e:
aa:dc:73:3a:10:9e:37:eb:d6:6e:c7:cc:5a:05:87:02:b6:c5:
b7:e8:07:16:fd:0f:b0:1c:e0:b9:87:a3:d7:83:ea:4d:e7:d5:
53:dc:c5:97:bc:17:78:95:b7:23:d2:d9:e0:52:c3:6c:1a:ae:
e2:27:57:dd:de:a0:fa:ac:f7:8d:a5:6c:63:8d:f5:4e:b6:5d:
b0:22:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:28 2025 by rpki-client