Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa
File: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (raw, json)
Hash identifier: wrwXYHiVExbuxEse8hLvJxXI/WdhLaEx4yaUE17RFII=
Subject key identifier: 71:46:EF:8E:CC:BD:D0:FE:35:05:11:ED:85:F1:92:18:23:E7:36:5D
Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Certificate serial: 5740F5FB940BF92D9319D30F1489032241ADFDAE
Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa
Signing time: Mon 20 May 2024 09:00:00 +0000
ROA not before: Mon 20 May 2024 08:55:00 +0000
ROA not after: Mon 19 May 2025 09:00:00 +0000
asID: 149717
IP address blocks: 103.186.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:40:f5:fb:94:0b:f9:2d:93:19:d3:0f:14:89:03:22:41:ad:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Validity
Not Before: May 20 08:55:00 2024 GMT
Not After : May 19 09:00:00 2025 GMT
Subject: CN=7146EF8ECCBDD0FE350511ED85F1921823E7365D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:24:13:e2:d0:72:e6:c5:49:5a:8c:1b:3b:
97:44:d0:ee:ef:40:e5:10:47:62:d2:70:ef:d2:e1:
f3:7d:25:fb:98:4b:b3:ef:e0:18:d3:87:a9:57:99:
72:2d:7e:7a:0c:37:0b:ab:33:cf:d2:d7:97:52:0c:
c8:fd:11:ec:51:6d:49:df:e5:ba:f5:ba:81:82:4b:
89:fa:7d:47:2e:9b:28:3f:73:f8:6c:f2:95:fe:a9:
df:83:f5:79:10:b2:b2:5d:47:1a:c0:b9:fd:f0:0a:
e1:a8:63:5a:ad:79:63:66:68:7d:75:fb:4c:c4:f3:
37:3b:9c:6d:1a:0f:df:b3:5c:2e:cc:5e:c8:dd:30:
55:ec:cc:65:c4:c5:9f:99:eb:e1:e0:f0:b9:7f:95:
b9:66:38:0c:76:a1:07:40:f7:8f:c8:99:dc:3c:01:
4c:70:7c:e9:32:a9:0d:37:e8:c2:e1:13:4a:fb:33:
9d:b8:b9:eb:cd:83:6b:9b:9b:71:ec:ca:7d:5d:b2:
4b:13:3b:0f:95:70:84:7d:13:bb:bd:f6:79:a1:56:
a9:23:f9:db:34:98:6c:d0:81:f2:e0:b1:23:49:e0:
de:b5:fa:cf:00:41:b7:63:6b:59:38:da:d2:7f:21:
fe:e5:a8:98:6c:aa:35:28:fb:d1:fa:0b:83:cc:8e:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:EF:8E:CC:BD:D0:FE:35:05:11:ED:85:F1:92:18:23:E7:36:5D
X509v3 Authority Key Identifier:
keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.88.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8b:08:7e:cb:ff:97:5c:42:d8:64:dd:ad:3f:ab:56:13:c1:
da:34:5d:f4:45:f3:d0:11:e8:6a:6c:b4:98:02:48:47:ae:9e:
9c:e7:58:3c:5b:d0:d2:3b:89:e2:e2:24:04:60:57:ae:bc:06:
8c:a2:b0:14:ed:93:4b:50:e1:6e:0c:71:d7:89:e4:ee:95:b5:
bc:d7:a9:82:bd:94:8b:db:1b:3a:58:a7:42:84:14:7a:f2:96:
87:47:b4:c5:f4:64:30:d4:dc:1b:90:33:6e:a1:b9:00:13:6f:
73:2c:bb:ec:b4:7d:62:b0:8b:4b:49:99:37:ec:ca:ea:82:4d:
3f:94:3f:37:e6:f5:39:29:4f:34:b0:6a:f5:44:db:ae:44:0f:
26:ae:3a:16:b3:26:26:7a:0d:da:87:cb:27:3b:81:6c:31:29:
26:ea:b4:b7:3f:15:60:92:42:b0:a8:fd:5a:92:8c:80:00:23:
a9:96:86:33:af:82:54:44:ef:67:80:bd:1e:1d:b5:78:5f:4d:
01:62:db:ba:44:38:03:39:bd:72:97:31:7b:7d:bc:95:eb:1c:
56:9a:2b:8d:fa:d4:a4:7a:b1:1c:ff:67:73:8f:83:62:ba:7b:
1d:24:38:81:85:6c:6e:b4:e8:6f:54:c9:9c:e5:28:da:6c:d1:
87:d1:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:24 2025 by rpki-client