Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa
File: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (raw, json)
Hash identifier: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=
Subject key identifier: 5D:85:87:B3:75:28:2B:F3:44:38:A9:F4:EE:55:F5:C7:50:06:C9:51
Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Certificate serial: 565432F4C55F46AB0CEEC280EF2D6B179B7E17F1
Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa
Signing time: Wed 19 Feb 2025 11:01:49 +0000
ROA not before: Wed 19 Feb 2025 10:56:49 +0000
ROA not after: Wed 18 Feb 2026 11:01:49 +0000
asID: 132641
IP address blocks: 103.83.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:54:32:f4:c5:5f:46:ab:0c:ee:c2:80:ef:2d:6b:17:9b:7e:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Validity
Not Before: Feb 19 10:56:49 2025 GMT
Not After : Feb 18 11:01:49 2026 GMT
Subject: CN=5D8587B375282BF34438A9F4EE55F5C75006C951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:72:4f:bb:9c:32:a1:1e:f3:47:5d:00:a5:
1b:8f:e5:f4:8b:37:06:69:c7:54:e6:c0:0b:a3:7d:
ed:f8:a9:32:90:55:d7:28:cf:fc:3b:df:24:92:6c:
83:ff:a3:6a:5f:57:6f:63:69:ea:8b:97:4a:4f:24:
24:94:c0:6c:a2:af:d5:09:09:1b:dd:6f:cf:1f:79:
f5:ff:59:dc:75:9e:e3:53:9a:d2:50:98:a1:34:1d:
55:69:49:a0:80:eb:b5:6c:87:3a:9f:9e:eb:e2:b3:
99:f1:de:c9:85:df:c0:20:ce:db:18:0d:f7:db:db:
25:f6:3b:be:4b:11:2c:c4:38:a5:95:f7:5c:a2:a7:
fc:5e:06:ef:ce:13:8d:df:2d:24:49:5a:53:e3:93:
46:be:3c:6b:1f:d6:85:46:18:eb:06:7e:30:3a:1c:
ff:3d:d9:bf:92:a6:ef:d8:fc:e6:de:d4:b8:78:f5:
33:c6:02:d4:5c:2f:12:c8:2a:7e:bb:f3:a4:02:33:
05:25:ee:a2:b0:21:5d:fb:4e:ab:95:46:de:99:ed:
56:2d:58:db:f9:23:6d:34:c3:e8:ca:bb:d4:5f:3d:
19:9c:7a:c0:7b:42:0b:f4:61:5f:81:aa:72:e4:e1:
84:2a:d0:6c:f1:11:c6:27:b5:c3:96:15:3b:58:5a:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:87:B3:75:28:2B:F3:44:38:A9:F4:EE:55:F5:C7:50:06:C9:51
X509v3 Authority Key Identifier:
keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.172.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c8:4e:b1:10:b0:42:2a:4f:18:09:e0:38:8a:0e:30:3c:83:
d5:74:bd:d3:2b:82:0d:c4:5b:86:e0:b5:02:8c:7c:50:82:e2:
11:d0:26:c7:57:2a:96:c0:7a:b4:91:e3:86:23:5a:69:d9:a9:
48:78:59:4e:57:7d:f4:1f:8c:41:4b:84:44:b2:cf:7a:5b:1d:
22:79:9c:e9:b2:83:44:ac:79:4b:1f:1c:72:c8:0c:20:d9:de:
ae:c0:df:cc:89:22:f2:c2:6f:8b:3c:51:50:d1:31:13:11:bf:
d2:3b:9a:77:c5:ef:90:47:95:d5:76:5d:b6:9c:c6:bb:5a:46:
e0:44:5c:98:67:39:41:32:3d:20:eb:4c:f4:3b:9f:34:42:dd:
1b:da:80:05:89:47:5d:ec:68:9e:97:10:0e:45:04:79:da:77:
92:c3:6f:fa:9b:70:95:ac:88:2d:39:60:60:48:bc:f1:03:2d:
8e:a9:fb:73:b8:bd:56:a4:9a:51:dc:54:bc:94:64:41:4e:fd:
1f:ff:8a:8c:e9:50:3f:8b:92:06:1c:3a:89:f2:62:35:79:41:
30:33:e2:80:0a:4b:4f:8d:f2:84:bf:38:5f:98:ad:e4:78:17:
ac:14:2c:a3:85:56:1a:c1:46:d4:b3:f8:a0:7e:9d:d0:0b:c9:
14:7a:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:54 2025 by rpki-client