Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e33312e3135362e302f32322d3234203d3e203338343936.roa
File: 3130332e33312e3135362e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: xwQJKZUVSVJHCZZynvaOORk8PXtwqBqUGtShD+seUJY=
Subject key identifier: DE:56:7A:21:F6:29:6A:23:91:70:66:5E:27:49:EB:1C:FE:B0:95:01
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 79C576A8397F2BA66E278CE7789E847925D14E0C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e33312e3135362e302f32322d3234203d3e203338343936.roa
Signing time: Mon 01 Jul 2024 01:05:33 +0000
ROA not before: Mon 01 Jul 2024 01:00:33 +0000
ROA not after: Mon 30 Jun 2025 01:05:33 +0000
asID: 38496
IP address blocks: 103.31.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c5:76:a8:39:7f:2b:a6:6e:27:8c:e7:78:9e:84:79:25:d1:4e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jul 1 01:00:33 2024 GMT
Not After : Jun 30 01:05:33 2025 GMT
Subject: CN=DE567A21F6296A239170665E2749EB1CFEB09501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:32:be:7e:14:ce:59:7a:56:cd:dc:6c:b3:
e2:61:e8:b9:7f:40:4d:2a:7d:25:f4:06:87:a9:fa:
bf:61:3f:29:03:83:c4:d1:44:a8:cc:67:33:63:25:
4f:f6:15:b6:ed:d4:92:69:34:80:3f:bf:22:f8:2d:
88:c3:24:a9:42:fc:2d:23:03:8e:eb:d1:4b:cb:0c:
37:9b:7e:85:fc:20:9e:07:d2:e8:0a:87:cf:4a:24:
32:89:b0:ea:21:ef:49:1b:d7:31:f0:22:e9:10:ef:
19:2d:b9:58:2a:53:94:b3:80:6a:b0:02:cb:f0:8b:
18:a5:10:67:36:01:51:88:cf:68:78:df:93:ec:a1:
f8:19:dd:d5:b3:8b:f2:41:12:83:ea:42:50:15:6f:
3d:fa:fd:35:a4:45:92:93:94:36:39:16:32:bd:57:
d9:3c:39:08:60:b6:a4:10:a9:03:6d:b9:11:02:45:
a6:d6:d5:41:73:20:ab:f6:41:1f:0d:12:ef:8f:f0:
f9:ec:70:6f:22:61:e4:2c:7b:5b:7a:40:d8:fc:05:
28:bb:d3:8e:de:da:14:7f:73:01:78:6d:32:06:39:
c2:66:86:16:c1:23:e8:3c:97:fb:ff:3c:94:ae:0c:
79:c1:3f:10:81:62:ac:c4:d6:3b:35:76:37:da:b7:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:7A:21:F6:29:6A:23:91:70:66:5E:27:49:EB:1C:FE:B0:95:01
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e33312e3135362e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:9d:8d:f1:d9:55:31:47:a7:e1:0e:10:2f:59:25:0a:2a:2c:
68:f6:ce:ba:f5:ee:68:29:de:bd:6c:0f:01:57:af:1d:5e:05:
93:47:4f:da:ab:4a:df:f1:20:8f:1c:02:90:a8:b0:a0:44:21:
45:c8:b7:c1:c0:b9:7b:a3:68:ab:42:e0:20:c9:7c:28:66:3b:
5d:75:f3:fb:2d:79:be:84:cc:91:29:65:9e:15:d5:d4:8f:ae:
ef:8b:68:da:94:77:bf:b9:ec:d0:72:2d:79:6f:1c:91:1a:5b:
44:57:7c:08:0d:f7:71:8a:d9:8f:ae:6d:6e:5c:f2:95:50:e2:
66:25:89:e1:b3:01:75:55:fe:fa:04:84:99:17:97:c1:2c:a9:
02:ad:c1:d1:f8:c8:0a:e0:4d:93:b1:04:5f:1f:53:a0:f6:44:
ff:f7:c3:79:81:3f:cd:3f:06:dc:95:34:bc:3e:6e:16:7d:76:
61:43:45:04:c7:5d:a4:c1:0b:0f:33:c9:8f:71:c8:15:f8:29:
80:b3:8e:0e:cb:dc:40:22:6f:de:3b:cb:a7:d2:df:f6:1c:6a:
10:b7:54:7a:a2:29:85:b4:87:b3:64:6a:26:32:62:d8:8e:26:
ac:c0:b2:f2:08:6f:2d:4e:89:87:95:54:44:87:f6:07:e8:d4:
cd:35:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:26 2025 by rpki-client