Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa
File: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (raw, json)
Hash identifier: yttYdHg/TfpYZlj9ynVljAnQiXBLtc70VHSDBXgC8KQ=
Subject key identifier: AD:A9:B4:05:1D:57:2D:BB:51:65:DF:B9:71:D9:00:5A:CE:B8:92:73
Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Certificate serial: 47B2FE0C0770DD665763EC2131649C06BBD8DFD2
Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa
Signing time: Wed 28 Aug 2024 07:01:10 +0000
ROA not before: Wed 28 Aug 2024 06:56:10 +0000
ROA not after: Wed 27 Aug 2025 07:01:10 +0000
asID: 150230
IP address blocks: 103.18.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b2:fe:0c:07:70:dd:66:57:63:ec:21:31:64:9c:06:bb:d8:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Validity
Not Before: Aug 28 06:56:10 2024 GMT
Not After : Aug 27 07:01:10 2025 GMT
Subject: CN=ADA9B4051D572DBB5165DFB971D9005ACEB89273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:8e:a0:ac:c4:00:bf:f6:ed:14:c4:d3:9a:
47:24:8c:fb:52:1e:f7:7d:46:28:80:53:a0:ab:84:
28:02:d5:8c:b5:db:08:b4:9d:7c:6d:f0:dd:ee:42:
43:13:3a:a6:1f:b2:80:4b:10:ab:b9:f8:32:67:b5:
b6:b0:1f:54:be:f3:fb:ef:78:d1:c3:09:8b:a8:65:
e4:6d:09:16:05:ad:37:92:ca:f0:2f:4a:d7:f3:f2:
ef:c0:af:5a:42:93:86:db:34:42:d1:5b:6d:87:32:
d9:45:a5:55:12:36:01:7c:0a:ef:68:22:55:1b:29:
e6:37:f8:30:2f:75:37:fa:7e:12:db:92:e0:14:d8:
4f:60:41:f1:17:e6:fe:d5:a2:10:7d:d4:4f:66:db:
6b:49:b3:34:ea:be:17:26:34:8d:0b:b3:85:be:38:
d6:dc:0a:c7:45:f2:93:e5:b6:90:fc:20:fc:1c:4e:
18:ed:17:ff:d2:3b:e7:82:18:e5:98:c7:4c:42:f5:
98:ba:3c:07:63:2b:54:4f:f5:19:d5:ef:a0:b7:ee:
e0:c9:4c:ed:10:fc:d1:18:49:f9:0f:ec:10:cc:40:
5f:b4:3c:75:87:6c:ef:3e:b3:53:02:a8:88:ba:17:
2a:f4:16:44:ad:11:0d:cb:1a:35:15:f5:a1:ca:31:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A9:B4:05:1D:57:2D:BB:51:65:DF:B9:71:D9:00:5A:CE:B8:92:73
X509v3 Authority Key Identifier:
keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.184.0/23
Signature Algorithm: sha256WithRSAEncryption
88:e3:83:67:98:3a:d2:70:16:f2:5a:18:f6:30:0c:d3:fd:26:
72:32:3b:76:e8:29:31:83:be:0b:79:e7:68:cb:b1:99:d1:02:
1c:3a:b5:4d:96:14:6b:20:b7:10:2b:98:82:76:ab:e3:0f:32:
93:e8:6b:a2:e4:0e:83:20:59:8f:3f:6e:b6:e4:8b:ad:3e:ef:
52:31:b1:85:54:01:2d:fc:d4:25:35:cc:0d:c1:cf:9d:ea:1b:
ce:66:82:5a:74:42:77:86:f0:e4:a3:76:9d:4c:74:b7:7c:1d:
d9:93:f2:dc:b3:7b:0c:59:21:e6:e5:e9:82:52:bd:c4:9c:13:
67:c7:af:b2:2c:a9:1f:5e:5e:4f:af:8c:4f:77:71:de:bd:2a:
68:b6:b9:40:0e:50:fd:14:14:6d:74:77:fb:2e:b1:16:af:4b:
fe:b0:1f:5c:8f:e9:e9:b1:58:95:e1:9a:9b:37:6b:b2:17:02:
73:15:6a:a6:eb:c6:6b:09:cd:3b:7d:b7:33:44:e3:1d:fb:98:
c2:63:34:fc:d6:71:dd:bb:22:c5:6a:d9:72:dc:f5:3f:c9:05:
d7:60:69:ac:3f:e1:b4:35:44:be:53:12:6f:4d:cf:6b:04:a5:
67:f4:3a:ca:fb:5f:63:5c:b6:02:ff:e7:e4:bf:47:ec:09:9f:
c0:06:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:02 2025 by rpki-client