Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa
File: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (raw, json)
Hash identifier: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=
Subject key identifier: 11:D6:72:40:C8:A7:5F:1C:E8:37:F1:53:B4:4A:F3:B3:F3:59:90:4F
Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE
Certificate serial: 0D32672ACA7F938B870D62A72E8ABDC66F113266
Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa
Signing time: Mon 06 Jan 2025 15:17:16 +0000
ROA not before: Mon 06 Jan 2025 15:12:16 +0000
ROA not after: Mon 05 Jan 2026 15:17:16 +0000
asID: 137361
IP address blocks: 103.115.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:32:67:2a:ca:7f:93:8b:87:0d:62:a7:2e:8a:bd:c6:6f:11:32:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE
Validity
Not Before: Jan 6 15:12:16 2025 GMT
Not After : Jan 5 15:17:16 2026 GMT
Subject: CN=11D67240C8A75F1CE837F153B44AF3B3F359904F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:49:64:a4:2c:14:f3:f3:12:fc:39:c2:09:
f4:6e:49:03:20:61:bb:6f:cd:4b:14:6b:eb:a0:7a:
ca:e3:90:3a:ab:9d:5f:02:27:4d:a3:0a:ed:c4:25:
ab:4b:5f:d0:c2:ed:e6:9d:9a:4e:e0:c8:9d:3e:37:
6f:d3:b7:36:c5:6c:5e:cb:f9:4d:0c:a5:5a:a9:de:
9e:81:88:27:5c:60:2f:62:d4:34:e5:68:44:d1:07:
d4:38:55:05:59:e3:39:68:72:b4:2f:fe:3a:a0:3f:
0e:e8:97:73:35:83:15:39:a8:65:cc:b8:81:d7:bc:
77:70:81:f3:40:17:a9:b4:68:0e:7b:93:8e:15:67:
7d:eb:fa:6c:22:9b:6f:5c:52:dd:42:e7:8d:38:39:
b0:5e:55:bc:6f:eb:83:07:b7:5b:9d:bc:d0:7e:fe:
3a:f2:ea:9a:b3:aa:f6:8e:a2:ce:57:2f:02:7f:40:
7b:91:35:d7:64:97:a7:36:8e:5a:f0:d3:ed:72:76:
97:d8:f8:03:26:62:85:6f:ec:b0:be:0b:be:1f:6d:
ef:16:f1:c1:64:da:00:16:18:65:bc:99:fc:36:6e:
4a:11:a2:4c:ed:d9:29:ca:5c:67:a0:ae:cf:1b:67:
47:76:33:27:2a:fc:ac:3b:ac:0e:43:4f:3a:9e:25:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:72:40:C8:A7:5F:1C:E8:37:F1:53:B4:4A:F3:B3:F3:59:90:4F
X509v3 Authority Key Identifier:
keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:25:f5:7f:41:a6:ae:66:03:53:42:dd:b3:72:34:76:11:6d:
8c:12:5d:84:05:69:83:c6:6b:58:40:15:a5:cd:61:45:52:31:
36:dc:1a:a6:13:2f:e0:ae:0f:85:2b:64:3c:fe:b5:47:3c:e4:
53:56:b6:b7:55:4e:cc:43:f9:11:9f:39:51:92:b1:c0:d9:d9:
0d:3f:26:37:18:30:f4:ec:7e:8b:1a:31:38:66:a7:2b:b6:6d:
cf:0d:80:47:77:7b:5b:25:fd:9c:99:19:e7:57:cb:dc:25:27:
91:35:ac:da:0e:a9:af:15:09:4f:8b:0b:9c:db:42:fb:e4:98:
0e:a4:8c:9c:1e:76:12:6d:f9:74:d9:00:ed:7e:8d:53:a1:1c:
ac:5d:ec:18:d8:c7:e6:92:33:db:b4:97:e0:4a:ab:a8:ec:4e:
11:07:68:23:26:96:aa:45:5f:0f:00:b8:1d:08:b8:50:76:60:
50:03:cd:f3:7f:7d:66:28:17:c5:b6:db:d7:58:8c:2d:e5:4d:
86:d4:b4:1c:94:3e:fa:77:d8:c3:0d:68:40:c8:f4:11:b3:b7:
a9:6b:11:fc:67:07:16:47:88:5e:30:c2:df:e6:8d:14:6c:64:
06:d8:c5:56:84:e9:6b:d1:d7:33:a0:51:53:a2:19:6e:12:ba:
eb:e8:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:54 2025 by rpki-client