Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31302e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: wOqTyvLF+Mq68ypc9snAUZ6fN8UbSxW4m4LP8xKQTTg=
Subject key identifier: 5B:62:D2:3C:E9:D0:55:5A:64:E1:8E:60:7C:5F:48:CD:65:D1:AA:58
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 1A240F1B3D2BE25666577264D4817B1E5B912C99
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
Signing time: Wed 19 Mar 2025 05:02:22 +0000
ROA not before: Wed 19 Mar 2025 04:57:22 +0000
ROA not after: Wed 18 Mar 2026 05:02:22 +0000
asID: 38496
IP address blocks: 117.103.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:0f:1b:3d:2b:e2:56:66:57:72:64:d4:81:7b:1e:5b:91:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 19 04:57:22 2025 GMT
Not After : Mar 18 05:02:22 2026 GMT
Subject: CN=5B62D23CE9D0555A64E18E607C5F48CD65D1AA58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:5a:ff:18:2b:93:cf:29:ae:80:fa:3d:37:
56:76:b6:9f:d2:89:39:b9:98:39:51:35:91:eb:90:
37:ab:88:bc:ba:89:64:18:85:44:53:5e:d4:3c:a4:
85:67:2d:f5:e0:a1:57:30:26:41:54:cd:31:2b:cc:
10:a2:06:6a:c8:04:6e:b6:49:20:1f:a5:5e:2c:23:
f2:31:40:b4:37:29:92:b9:7a:07:81:a9:e8:97:7b:
53:18:4b:4a:2a:7b:a0:01:00:14:21:96:db:e4:17:
ea:33:03:f6:9a:b4:66:df:18:be:97:52:fb:66:fd:
15:c1:5c:fb:0c:f4:8f:8b:8b:a7:22:0a:f1:dc:f4:
19:f7:40:7e:c5:98:73:40:34:5b:db:19:98:61:ab:
32:db:81:b3:82:ae:58:2a:36:15:db:7f:e8:a8:62:
90:34:1b:cb:2f:61:35:19:f0:e9:43:6e:c7:48:e2:
96:28:5b:68:25:fe:9e:29:99:15:93:45:e0:f7:11:
08:75:43:bd:f7:f1:bc:8c:0d:ce:d3:3c:18:7d:66:
97:1e:16:bf:db:46:40:fd:7c:59:42:b6:12:3a:01:
95:dd:59:12:50:10:4c:9f:f8:d1:07:8f:06:21:e2:
e6:4c:a2:fa:ed:c9:8f:9c:72:18:3b:7d:7e:ee:7f:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:D2:3C:E9:D0:55:5A:64:E1:8E:60:7C:5F:48:CD:65:D1:AA:58
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:04:5b:d9:f6:01:30:1e:20:36:04:ee:a0:e8:8e:72:ac:34:
dd:68:1f:52:d1:b2:c6:00:83:d9:7e:c6:51:d3:70:3b:f2:8c:
d8:15:35:3b:ca:de:84:05:31:a3:7b:20:26:90:e0:de:af:ee:
a1:d9:23:40:8c:8a:bc:97:53:47:59:5e:bd:5c:2d:37:f0:9a:
9a:48:0e:6d:39:64:7c:72:62:e3:69:0d:08:dc:c2:ee:b6:ad:
b8:c9:44:a2:30:82:d2:b9:cc:4d:6a:46:34:1c:89:81:91:5b:
13:66:6a:d7:f8:16:12:2e:30:20:30:18:53:b4:55:79:d8:f3:
e0:66:8a:94:2c:96:a5:29:8a:27:38:f0:2a:76:6d:98:e8:eb:
14:2f:9b:6c:77:9e:ca:5c:3f:69:0e:42:da:da:ab:64:fb:35:
37:6b:6d:7a:12:73:f6:f3:a1:f3:ed:d4:5c:19:37:04:e6:4b:
86:7d:40:05:c4:20:b2:70:ed:2f:50:75:0e:9b:56:62:52:d9:
fb:28:08:34:ac:46:18:f8:36:52:40:62:6b:36:da:bf:2d:d3:
fa:aa:b8:69:04:9f:97:7b:a5:00:5e:08:ea:42:3d:f6:f0:cd:
1f:df:0c:4e:b6:7d:00:f3:43:c7:f5:06:fa:e0:f4:77:9a:bd:
2e:d4:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:11 2025 by rpki-client