Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3233203d3e20313432333935.roa
File: 3130332e3137322e3131382e302f32332d3233203d3e20313432333935.roa (raw, json)
Hash identifier: AnMYqpFlcSNausWENFywQFs0ERl3Zen98SW+W+NlfTw=
Subject key identifier: 3A:CD:51:FF:E0:E1:33:62:A1:A1:F3:B3:45:FE:C0:D0:F2:11:44:C9
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 299C93EDB0E28B036601215FA0792CE3B8986CAB
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3233203d3e20313432333935.roa
Signing time: Thu 06 Feb 2025 06:49:48 +0000
ROA not before: Thu 06 Feb 2025 06:44:48 +0000
ROA not after: Thu 05 Feb 2026 06:49:48 +0000
asID: 142395
IP address blocks: 103.172.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9c:93:ed:b0:e2:8b:03:66:01:21:5f:a0:79:2c:e3:b8:98:6c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Feb 6 06:44:48 2025 GMT
Not After : Feb 5 06:49:48 2026 GMT
Subject: CN=3ACD51FFE0E13362A1A1F3B345FEC0D0F21144C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:b5:3b:7f:38:74:78:fe:7c:98:61:61:9b:
5d:c3:5b:ff:28:95:f3:4a:ab:cb:1b:cc:ae:f1:a9:
f5:9e:05:47:9c:c3:7f:39:9b:a8:1e:9d:2a:d8:6e:
90:5f:52:c8:a6:24:2b:8c:b2:ca:df:b1:96:5f:86:
7a:af:a6:c1:d3:ca:46:83:d6:5c:37:db:b9:54:6b:
c8:d4:1d:e8:7d:c2:d7:9b:5d:e0:4f:47:f8:e9:68:
26:6c:80:27:69:4a:c1:77:2d:c2:be:58:bd:47:0b:
8d:3e:15:27:1a:65:33:46:e8:df:9b:58:47:63:15:
ce:4d:14:70:70:eb:cb:72:ad:0d:c7:a9:97:b0:67:
4c:48:ba:89:e9:8c:0a:76:7f:15:99:0a:59:af:80:
98:82:17:4f:65:96:3d:2a:be:9f:98:e0:34:00:24:
90:78:62:72:97:33:7a:c1:a6:3e:11:11:01:fc:e5:
90:47:51:62:d2:2e:42:57:41:c3:d4:68:16:02:a8:
13:6f:b9:7d:db:92:f4:3f:40:be:f2:d9:50:37:f0:
0e:10:2d:c3:4a:7a:4e:d9:26:d8:10:a1:e6:f3:c0:
31:7f:b0:aa:b3:d3:8f:51:3c:7c:1a:26:35:c4:fa:
57:0c:29:15:ac:c5:23:0f:c3:d4:25:9c:9b:d9:38:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:51:FF:E0:E1:33:62:A1:A1:F3:B3:45:FE:C0:D0:F2:11:44:C9
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3233203d3e20313432333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
06:d2:44:31:85:39:b8:09:5a:16:7d:04:bc:49:21:48:af:bd:
fb:88:64:e3:d9:6f:66:3d:d1:a1:29:2f:62:9e:52:da:cf:e5:
5a:53:fe:57:ce:04:65:1f:af:a8:e9:27:d9:d3:65:73:03:c7:
1d:ff:ad:49:f2:72:81:8d:44:9d:02:72:38:02:0a:86:34:89:
0c:8a:82:25:9c:95:c4:44:09:70:3a:93:ef:f4:5b:70:e5:00:
a0:14:a9:20:6a:cb:56:42:94:ec:d2:e8:9b:84:7f:6a:01:84:
8b:82:6c:5f:d6:51:db:91:93:9b:a5:37:70:f2:23:72:5e:2d:
a3:a7:23:de:69:b0:da:6d:e2:d9:ae:94:52:97:ac:c9:f3:5c:
a7:d5:75:23:55:f9:f6:c5:fd:b2:03:4f:96:8a:2b:05:7f:8d:
d1:4b:b4:0c:4b:2d:52:95:6a:34:21:b1:f5:60:cb:ad:9a:f1:
ef:b4:84:4d:69:eb:39:4f:e5:c9:55:01:77:8d:57:c2:f8:d8:
7a:dc:98:60:28:53:1b:f5:d1:02:52:5e:62:10:98:b7:aa:93:
da:5b:79:ba:b7:42:f2:d1:e9:b5:a4:2c:1f:d9:ce:3e:13:0d:
76:53:91:1c:48:86:51:af:cb:f8:09:0b:c8:fe:d0:89:d2:15:
ab:45:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:12:24 2025 by rpki-client