Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31342e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: xaN4lK7A7rhQXGShpWBZtc2X94M5rIjtkGjDIOXYdVA=
Subject key identifier: 31:B7:D5:FC:3A:9E:4C:CD:12:1C:71:21:ED:77:B3:70:31:AE:1E:CE
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 6F48E578BEC16C221DB7085838A4DE74B92DD593
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31342e302f32342d3234203d3e203338343936.roa
Signing time: Wed 19 Mar 2025 05:02:22 +0000
ROA not before: Wed 19 Mar 2025 04:57:22 +0000
ROA not after: Wed 18 Mar 2026 05:02:22 +0000
asID: 38496
IP address blocks: 117.103.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:48:e5:78:be:c1:6c:22:1d:b7:08:58:38:a4:de:74:b9:2d:d5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 19 04:57:22 2025 GMT
Not After : Mar 18 05:02:22 2026 GMT
Subject: CN=31B7D5FC3A9E4CCD121C7121ED77B37031AE1ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:e6:dd:d0:e6:33:ca:6a:25:22:12:57:df:
c3:4e:38:e6:50:f7:1c:23:1c:2a:8c:ae:a9:78:d0:
5a:d7:be:93:d1:91:e4:88:bd:ce:03:73:3c:bb:10:
90:78:86:a6:5a:eb:98:59:8d:18:2d:e7:6a:44:b4:
7b:c4:92:40:a9:df:d2:b2:73:ab:35:a8:b9:ae:d8:
bb:59:dd:9c:8e:24:b8:34:d6:19:3e:eb:f2:f1:84:
0b:08:f5:a5:1e:ee:d2:84:05:c0:09:6e:b2:34:4e:
13:19:2f:a9:1f:e4:f6:61:63:ca:aa:53:06:00:36:
e2:fe:73:10:f2:c6:a7:1c:dc:bd:d4:04:25:cc:f7:
15:f9:eb:55:d5:fc:a1:34:6c:76:23:52:cf:5e:53:
d1:a5:06:2f:ca:dc:e5:75:48:21:e7:31:e5:ab:b3:
4a:ae:3d:fd:a9:d1:75:be:e8:0b:18:e6:09:73:d6:
ce:61:7b:c5:ef:3e:e4:0d:c3:17:ea:d0:b7:99:f8:
0a:11:25:5d:92:21:73:49:74:8d:30:96:14:35:83:
c7:c0:33:a4:4f:fd:af:60:a5:30:3c:fb:4a:0c:df:
a3:94:ce:e9:d1:80:99:e3:f6:6a:55:a4:cc:03:8e:
a5:58:ce:f6:c3:1a:b2:09:8b:31:69:b6:55:09:9e:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:D5:FC:3A:9E:4C:CD:12:1C:71:21:ED:77:B3:70:31:AE:1E:CE
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31342e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b2:aa:85:35:15:19:c8:4b:16:80:45:c9:8b:31:db:a2:40:
d2:33:fb:7b:c3:48:9a:7a:a8:77:56:ae:11:c2:38:df:f2:2e:
95:96:08:ea:c6:1c:4d:5a:69:79:81:41:10:f6:1a:19:4f:f4:
5d:30:ba:6b:1a:c8:68:86:41:c5:ba:d5:71:8d:7f:8e:31:51:
b4:8c:ad:de:3b:3b:63:82:b6:55:3b:ea:7e:78:96:b8:db:ff:
08:79:f8:75:de:d9:ad:87:aa:9c:c9:c1:fd:35:78:96:b8:c2:
18:7b:03:4b:6c:b7:77:45:fb:5e:37:22:c7:5e:2b:0c:16:71:
0d:cc:29:85:df:8a:1f:72:42:bb:28:66:f8:a5:f6:af:1f:66:
ac:11:58:24:e4:00:a0:1d:61:c1:fa:de:e2:aa:09:9b:e9:63:
74:9d:71:9d:6a:ef:7b:01:96:88:52:c6:f1:a3:6b:9e:82:45:
c5:77:39:03:6a:8d:9f:e2:cf:62:2e:85:74:ca:d5:48:b7:2d:
77:bd:09:80:83:62:3f:a8:f4:34:d0:f8:b8:64:da:d5:d7:20:
ff:16:4b:94:3d:bf:45:fe:a2:07:3a:f7:33:6c:bb:a1:ef:38:
99:da:62:67:18:a6:27:3e:94:25:dd:a3:d4:43:13:bc:6e:04:
b9:52:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client