Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa
File: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (raw, json)
Hash identifier: tzus+b1Dyr0i8p6BXNzRg2JRJ5sSDDozsutDjca9Txw=
Subject key identifier: 44:DE:B3:3C:5D:F9:43:D9:D6:2E:65:13:20:B6:4E:71:1F:19:C7:BC
Certificate issuer: /CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Certificate serial: 091C4B8AA6A758EA18C2319F36DB6A8501FF3FEC
Authority key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa
Signing time: Mon 10 Feb 2025 09:00:00 +0000
ROA not before: Mon 10 Feb 2025 08:55:00 +0000
ROA not after: Mon 09 Feb 2026 09:00:00 +0000
asID: 149694
IP address blocks: 103.186.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1c:4b:8a:a6:a7:58:ea:18:c2:31:9f:36:db:6a:85:01:ff:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Validity
Not Before: Feb 10 08:55:00 2025 GMT
Not After : Feb 9 09:00:00 2026 GMT
Subject: CN=44DEB33C5DF943D9D62E651320B64E711F19C7BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:19:33:32:ff:21:77:ea:65:d1:37:af:3c:
3c:8f:62:aa:40:42:ab:3b:14:33:ee:a8:21:14:c1:
d0:55:95:25:55:e8:f7:5d:af:b4:7f:71:50:10:bb:
2a:e6:79:f4:68:fc:63:d2:59:a5:8c:11:d0:14:01:
69:9c:5b:1f:33:d3:75:c9:b9:e7:86:b8:95:f0:92:
c2:78:4a:d0:95:6d:0f:3c:a3:4a:a0:db:78:e0:7f:
40:4c:69:93:65:74:0f:0a:25:ef:bd:17:89:63:30:
71:77:a3:a3:74:d5:f2:dc:4b:cd:90:b4:5d:d3:26:
8e:ba:6e:6d:77:1c:10:57:d6:b9:ff:77:19:d6:73:
44:7c:5d:d7:a0:a3:b0:90:bc:07:02:cf:20:03:2b:
d7:cf:df:2e:aa:92:12:21:68:a1:a7:7a:4f:be:3c:
30:36:6f:75:98:b4:c4:30:2a:c6:22:80:29:37:4e:
23:72:75:1c:d8:4f:da:35:cc:9d:f6:ff:5a:69:e3:
a1:b5:5f:e9:07:d9:d0:18:bd:03:b5:db:e4:36:a3:
6c:af:7c:13:39:59:37:df:ab:8e:c3:46:ff:eb:4b:
51:18:7f:80:27:c4:28:6d:21:9f:30:a4:bd:8b:a8:
45:d9:02:4a:27:4e:b3:8d:88:8c:7b:c2:94:e9:aa:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:B3:3C:5D:F9:43:D9:D6:2E:65:13:20:B6:4E:71:1F:19:C7:BC
X509v3 Authority Key Identifier:
keyid:EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.26.0/23
Signature Algorithm: sha256WithRSAEncryption
af:e4:60:d9:0f:66:c0:43:3b:75:19:1f:28:e2:27:cb:6b:60:
06:07:b9:52:2e:74:8f:02:ab:2b:50:88:85:58:53:f5:6c:5d:
88:da:55:82:6e:86:d5:6f:83:70:38:73:7d:ed:36:75:8e:c1:
46:c3:66:fe:32:28:9b:33:df:63:e3:93:34:1d:6f:72:d4:35:
96:10:ed:db:4a:8a:a8:cb:4e:43:de:50:37:dd:ee:b8:f9:bd:
83:98:f4:a0:ba:85:06:3e:6a:cc:83:bb:ec:76:4b:f0:32:ee:
b9:1a:4b:c5:35:5d:af:4c:62:9b:5b:7c:f4:c4:6d:7b:be:28:
0a:e8:77:40:2c:bb:83:75:01:f5:37:b3:66:8b:76:8c:a7:1e:
f2:8c:78:41:d7:6a:62:07:ea:6e:28:93:7e:08:0f:01:33:ef:
28:69:00:84:67:f5:9d:05:e0:df:f8:68:ed:e6:a8:d0:f2:13:
b2:ab:b1:20:57:29:af:92:c5:75:24:c5:a5:38:c9:62:fb:d4:
5d:13:2d:65:20:66:02:fd:d2:5e:6b:65:23:08:6d:48:5f:bc:
31:a9:89:ed:9f:d6:cb:06:0c:0e:ff:58:7a:13:27:ac:62:f8:
32:a9:c4:4e:42:3b:21:fa:f0:15:e7:a1:93:ae:18:55:a6:0a:
31:46:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:07:03 2025 by rpki-client