Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa
File: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (raw, json)
Hash identifier: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=
Subject key identifier: CB:A1:7A:EB:B3:D6:6F:6E:6C:2E:0A:D7:B6:E7:81:5E:8D:23:92:9E
Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial: 6B70504FBF359C0469C58D0D85ED8C506DBE198D
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa
Signing time: Wed 09 Oct 2024 06:00:02 +0000
ROA not before: Wed 09 Oct 2024 05:55:02 +0000
ROA not after: Wed 08 Oct 2025 06:00:02 +0000
asID: 17727
IP address blocks: 103.105.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:70:50:4f:bf:35:9c:04:69:c5:8d:0d:85:ed:8c:50:6d:be:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Validity
Not Before: Oct 9 05:55:02 2024 GMT
Not After : Oct 8 06:00:02 2025 GMT
Subject: CN=CBA17AEBB3D66F6E6C2E0AD7B6E7815E8D23929E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:00:e0:df:54:e6:94:6d:c5:dc:af:54:31:
50:1b:ec:9e:dd:80:81:29:da:b7:0c:18:c4:e8:02:
d3:d4:2b:3e:2a:f1:61:3b:5a:cc:60:22:aa:24:91:
4a:7e:48:e6:59:ef:c6:00:8a:03:bd:9f:57:ac:5f:
e9:74:3e:3d:e7:c3:d9:2c:aa:1e:9e:02:32:85:1d:
67:25:e4:89:83:01:28:7d:d6:00:b8:43:bf:4e:dc:
c3:21:f8:b5:39:0d:53:ad:ab:79:23:c2:75:4a:90:
c6:1d:c9:ad:65:ad:84:98:53:a0:0b:34:df:ea:bf:
98:1a:c5:26:84:06:51:d4:e6:a0:05:84:c9:bf:a3:
48:c6:13:de:7a:27:b1:6f:88:10:dd:72:df:0f:2a:
fd:e0:c4:7f:a4:cb:c0:f2:5e:69:5b:a5:98:b6:0c:
b2:2c:90:63:e9:85:b3:b0:71:f7:78:fd:41:5e:91:
e8:24:e9:37:44:81:a2:75:81:b9:f7:11:39:42:db:
60:03:42:7e:6f:ae:9f:ba:9b:bc:f6:91:ed:cd:25:
2e:f1:52:61:ab:dd:84:55:1c:15:1f:ad:f2:07:d7:
3a:c0:82:51:cb:8d:09:03:f3:fe:8c:50:55:9c:63:
2d:53:f1:20:c9:4b:88:af:a2:19:fd:ac:79:49:c1:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:7A:EB:B3:D6:6F:6E:6C:2E:0A:D7:B6:E7:81:5E:8D:23:92:9E
X509v3 Authority Key Identifier:
keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.128.0/22
Signature Algorithm: sha256WithRSAEncryption
75:3d:a6:f8:61:31:f6:8d:17:ce:b0:d4:30:9a:c8:0c:3f:48:
d4:a4:50:c3:da:0b:3b:9d:ba:e6:1a:ca:8b:5c:20:ab:b6:6c:
ab:9b:9f:44:46:a8:b5:ea:89:3d:f1:b9:91:9b:b1:b1:b2:11:
23:aa:94:ef:29:18:77:2b:0d:2d:a7:3d:85:87:7c:df:09:4d:
a4:1d:bc:4a:56:f6:91:7c:c5:00:49:0f:b2:38:b0:70:1b:9c:
27:62:a6:20:01:e7:94:0e:85:5b:b3:e2:20:b1:c4:d4:be:62:
72:46:37:db:81:b4:01:42:cc:20:81:fb:15:30:43:97:33:c3:
2c:ec:f0:7e:d6:a9:10:27:c3:15:35:ac:63:23:8a:bb:79:94:
76:a5:b6:c0:63:38:b0:39:2a:21:a7:69:1e:98:9e:96:72:81:
7b:3e:53:30:fa:41:c5:0d:e9:4a:2d:a4:64:e6:92:1a:e3:06:
71:43:5c:f7:39:d8:c3:46:e9:f5:ef:b9:2b:10:63:26:c7:3d:
cc:ba:7f:9c:ee:bb:2b:6f:f6:f5:e6:08:91:cc:73:3d:65:24:
f2:4e:20:09:a7:47:51:d7:17:b0:ad:ce:cf:60:58:5b:bd:ae:
0f:19:66:e8:a1:c2:af:3b:2d:3a:d9:78:1b:4c:84:35:2e:fc:
dd:4f:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:37:30 2025 by rpki-client