Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
File: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier: 38zyMiXyq6nG2TpP3RHQtTZp/Prc/SSkc2ejtqKw9zs=
Subject key identifier: 07:54:5D:74:1F:39:71:22:B3:7B:8A:3B:A3:E0:45:84:B6:95:10:38
Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
Certificate serial: 682A5EC69A7C8DD8FD3CD6BD9C61FF310494358C
Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
Signing time: Tue 14 May 2024 06:00:32 +0000
ROA not before: Tue 14 May 2024 05:55:32 +0000
ROA not after: Tue 13 May 2025 06:00:32 +0000
asID: 149696
IP address blocks: 103.186.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2a:5e:c6:9a:7c:8d:d8:fd:3c:d6:bd:9c:61:ff:31:04:94:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
Validity
Not Before: May 14 05:55:32 2024 GMT
Not After : May 13 06:00:32 2025 GMT
Subject: CN=07545D741F397122B37B8A3BA3E04584B6951038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:31:ae:ca:c1:db:b9:a7:41:9f:13:79:35:3f:
63:90:2e:49:34:d2:69:7e:36:83:19:41:c3:3e:69:
34:b6:a1:9d:b8:5f:6b:d0:5c:89:fc:a2:6b:c4:44:
80:dc:8c:48:28:ca:b7:a7:a5:fc:a5:d7:9c:04:ed:
45:f6:f1:0c:3a:2b:4a:30:24:8b:28:7a:56:0c:6e:
91:26:24:ff:13:77:99:28:63:f1:45:1c:b7:b1:13:
c7:15:d1:20:00:57:22:45:c6:4a:8a:1e:75:fc:14:
2a:9e:bb:11:02:b2:29:e6:5b:19:b1:68:73:d9:21:
c5:b2:c4:de:24:81:7a:e5:68:b7:5f:9c:d3:88:85:
c4:ef:cb:aa:18:94:f5:9e:b7:79:f2:f8:24:13:9a:
6b:3b:4f:7a:f8:63:52:c2:b8:80:73:22:9c:fe:11:
36:12:b9:31:e4:08:e5:58:0a:a4:3f:b0:f5:67:ff:
76:fd:b3:38:93:d8:0d:93:71:ff:86:b3:e5:5d:11:
43:87:bd:a3:ac:7a:9e:5a:fa:cd:73:eb:88:86:7d:
94:41:11:52:20:f6:db:d6:2e:9a:e1:1f:0f:c0:57:
fe:9b:af:6c:6b:19:5c:c9:c0:9f:9d:5f:cf:b2:59:
33:e4:e8:3d:bf:32:34:e1:6a:18:16:45:af:a2:84:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:5D:74:1F:39:71:22:B3:7B:8A:3B:A3:E0:45:84:B6:95:10:38
X509v3 Authority Key Identifier:
keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b0:82:ec:43:74:a9:7b:ac:cd:a8:c0:fe:d2:94:ea:21:26:
61:9f:09:50:ed:b4:00:93:5c:ab:1e:39:9f:b9:21:f4:24:89:
a2:f5:c5:a5:5f:f1:34:12:46:ce:65:e4:f6:00:14:a7:bf:5e:
e2:f8:72:cc:7d:21:01:a8:9d:59:96:cd:dc:79:ed:a2:90:c4:
d6:c5:b6:87:8c:47:1e:f1:c9:9a:29:ef:0b:b4:e3:5d:a6:8b:
42:34:68:30:06:ee:2f:72:79:23:56:c5:b8:02:af:8a:32:ac:
82:9b:84:d8:34:f9:80:2c:15:30:ec:88:c4:2a:60:40:38:d4:
12:7b:b7:e1:82:b4:8f:09:18:70:f7:04:92:2c:1a:ec:ea:16:
11:55:21:5b:f9:01:f1:c3:8c:52:10:d6:ac:5e:24:ed:84:ea:
84:f0:a2:e6:ad:5d:bb:5a:f3:6e:08:b9:5a:e3:3c:35:5c:23:
30:8e:c7:40:46:f1:cc:3b:f6:87:7b:b3:e6:aa:2f:53:55:f8:
3b:19:63:fb:0e:f9:0f:00:c6:84:b5:cc:50:1e:2c:88:4b:6f:
4a:b4:5e:ef:5f:bd:7c:75:42:2d:37:f1:d7:0f:7a:9b:cd:b2:
a1:a3:49:0e:77:47:b5:a2:54:3c:38:01:7b:ae:7b:a5:d0:4e:
9d:7e:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:34 2025 by rpki-client