Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31312e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31312e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: UpID7gVIKkdAxWAq4+/YM/YrCKbtDEGog9slP26OQZo=
Subject key identifier: 6C:EC:BD:7E:FC:03:67:BF:AC:62:6C:87:3F:D4:44:35:1B:42:6A:8C
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 3673358D051029E8EFCBB7CCD04A13FBA2EB7500
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31312e302f32342d3234203d3e203338343936.roa
Signing time: Wed 19 Mar 2025 05:02:23 +0000
ROA not before: Wed 19 Mar 2025 04:57:23 +0000
ROA not after: Wed 18 Mar 2026 05:02:23 +0000
asID: 38496
IP address blocks: 117.103.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:73:35:8d:05:10:29:e8:ef:cb:b7:cc:d0:4a:13:fb:a2:eb:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 19 04:57:23 2025 GMT
Not After : Mar 18 05:02:23 2026 GMT
Subject: CN=6CECBD7EFC0367BFAC626C873FD444351B426A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:8c:1b:53:88:a7:68:72:3d:57:0a:3f:d6:
eb:20:5a:2f:e5:af:4a:09:cd:ec:31:bf:18:7c:70:
fd:12:33:34:0b:1f:30:74:d8:8d:71:0b:0d:bd:d5:
03:79:29:22:9e:6a:ed:f1:90:0f:c1:17:9b:5c:37:
fe:53:ca:ef:66:07:86:52:92:f1:11:f2:f8:6e:0f:
f1:d1:a9:8f:4a:00:d0:25:77:7c:5a:d5:14:1f:bb:
1c:28:05:7e:dc:5a:ce:ae:c7:19:aa:bd:c4:74:6d:
8e:b3:d6:75:e5:2b:82:12:db:19:22:a0:b4:9f:96:
ea:a6:13:f6:02:fe:f2:38:d9:ce:82:24:e1:4c:57:
99:bb:c7:0a:34:a1:45:1f:09:c6:13:6c:f3:9b:bd:
1c:ea:c3:02:e3:cd:13:e5:31:7c:4f:56:04:63:74:
fa:30:03:a7:ba:17:24:3e:ac:22:13:21:39:69:b9:
cd:97:a7:73:cf:4f:e9:2a:94:3a:3c:22:fc:8e:d7:
93:05:1b:63:c8:72:53:e7:cf:1f:d8:31:32:32:40:
4c:25:06:42:f4:c7:c7:da:30:4b:32:2d:04:f0:cc:
00:64:19:ca:91:cc:3d:38:a5:68:25:b4:be:ea:1a:
5a:b2:3f:c3:f6:eb:92:b6:de:50:f2:1b:01:98:d6:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:BD:7E:FC:03:67:BF:AC:62:6C:87:3F:D4:44:35:1B:42:6A:8C
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31312e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.11.0/24
Signature Algorithm: sha256WithRSAEncryption
35:87:b2:d4:b3:7f:ba:53:a8:c2:46:fd:3e:72:4c:85:fd:42:
27:7d:38:b3:81:21:9a:e3:13:bf:88:9b:71:4c:91:f1:39:3f:
58:12:aa:20:66:eb:fa:ce:f8:45:aa:4f:ad:86:8b:bc:7f:46:
d6:e0:92:09:f2:f9:f0:b8:f6:7d:8b:a7:a4:81:fe:ee:fd:b6:
cf:b0:e7:d3:c1:0c:d7:b7:29:35:30:1c:64:af:48:64:de:7e:
2d:59:68:67:84:1b:67:70:e3:bf:66:57:33:37:f9:29:96:a1:
13:aa:ff:2f:99:af:18:31:1d:68:3f:e7:ab:5c:78:ee:04:31:
eb:b9:db:ea:71:74:0c:44:70:ca:87:1c:eb:97:ce:bc:9d:a6:
05:84:ad:33:c4:99:65:f6:53:ea:c9:9a:2a:35:b5:c9:dc:f0:
ed:36:d6:c8:d0:4d:09:d3:18:6a:ec:85:dd:a7:ac:a2:93:a0:
cd:37:fd:24:ca:ff:1c:53:10:32:61:71:e7:53:58:07:ab:7a:
54:f7:df:77:fa:fe:c2:70:79:62:6e:26:ad:87:13:9e:1b:07:
19:1c:33:0c:e0:96:3a:ad:02:b3:39:2b:53:5f:2e:12:3d:d4:
76:54:8b:8a:36:fa:7c:1c:d5:f1:0f:71:19:90:d4:de:a5:c7:
2a:79:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client