Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
File: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=
Subject key identifier: 58:57:ED:F5:79:9F:34:F3:1D:F1:EB:E1:F7:8F:BE:01:B3:01:EB:FC
Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial: 7E1EC0CCBB3B38CA41F0B11DB6091DA2D75EEA
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
Signing time: Fri 15 Nov 2024 05:00:02 +0000
ROA not before: Fri 15 Nov 2024 04:55:02 +0000
ROA not after: Fri 14 Nov 2025 05:00:02 +0000
asID: 4800
IP address blocks: 103.169.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1e:c0:cc:bb:3b:38:ca:41:f0:b1:1d:b6:09:1d:a2:d7:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1E28E396E82778793018513BD084854BE663886
Validity
Not Before: Nov 15 04:55:02 2024 GMT
Not After : Nov 14 05:00:02 2025 GMT
Subject: CN=5857EDF5799F34F31DF1EBE1F78FBE01B301EBFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:03:0e:98:5e:52:90:26:71:32:1e:b7:1e:
01:eb:f0:00:06:40:aa:ed:7f:a3:1f:4f:ec:ec:62:
cd:8b:2d:20:36:7a:94:aa:c7:45:f7:cd:d4:c5:c1:
85:cc:b0:31:8f:3c:ff:3c:fa:93:62:64:c7:ba:90:
c5:ce:02:40:7b:6c:b1:17:dd:8a:e8:81:c3:23:e7:
d8:4d:d1:6d:86:c0:2a:c1:57:bb:d2:16:c3:28:51:
e2:2c:4b:a0:24:e3:1d:c6:78:24:25:61:59:ad:a7:
91:06:91:52:43:cd:42:4c:9a:5f:01:48:e5:fb:f6:
12:43:57:f3:dc:cf:9d:dc:43:a7:58:dc:90:ff:d1:
5d:de:c5:18:8c:d9:90:08:37:d6:5c:a7:2e:1f:1b:
30:35:c1:fc:e3:f8:4b:00:55:0e:07:4c:84:b9:ab:
38:14:89:96:d5:58:c2:7a:d0:1c:f6:b6:52:7f:ea:
a0:12:26:fc:74:7d:ba:16:e8:31:76:68:ff:b4:39:
1e:a0:e0:9d:6e:2f:89:ad:14:7e:3a:d0:5c:68:d8:
39:3d:dc:a9:14:9d:bf:c1:1f:df:e8:ef:3a:6a:cb:
c1:b2:d2:d6:39:7c:1d:8d:82:79:48:d8:7d:64:93:
f5:1c:3b:9b:2d:c8:6f:a9:56:0e:f9:87:86:a9:e9:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:ED:F5:79:9F:34:F3:1D:F1:EB:E1:F7:8F:BE:01:B3:01:EB:FC
X509v3 Authority Key Identifier:
keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.230.0/23
Signature Algorithm: sha256WithRSAEncryption
77:74:b1:f8:03:7d:cd:b6:92:b3:d7:f2:1b:68:80:76:40:ea:
d5:d9:a3:61:79:8d:b5:38:da:0d:1f:4c:b9:a1:46:2f:ef:9e:
80:79:ec:74:f4:7c:e7:d3:cb:16:a3:d8:4c:b1:6e:ea:6b:58:
29:8d:1f:d0:da:69:b8:6c:30:f2:50:56:2a:f4:86:4f:b8:ca:
01:7a:41:20:de:eb:18:ce:5b:74:5d:85:70:68:63:eb:f6:f8:
4f:db:6f:9f:ab:c2:4d:86:dd:1a:03:a3:42:04:4a:d6:3b:82:
22:65:03:b7:aa:7d:cd:f0:a4:76:7e:98:d3:4d:9a:22:ec:87:
7c:9a:27:b0:00:68:b9:62:d6:46:2f:6e:fd:1e:d7:16:54:73:
b4:b1:4a:ea:b8:66:4e:99:9d:e7:1c:f6:0f:89:17:9f:4f:c1:
73:ab:a9:63:04:fe:6e:50:f6:3c:67:7f:96:37:03:97:d9:09:
5e:46:34:a6:5c:38:0e:5f:b1:94:75:71:31:de:58:78:5c:19:
f6:c5:6e:5f:5c:d3:e3:54:53:1c:5b:25:a3:b9:b5:51:6a:f8:
e3:9a:0c:e7:e8:46:53:d4:d5:94:ad:b5:00:9d:7f:17:8f:92:
58:9b:93:a2:ec:17:4c:5e:c1:b3:9b:4a:1c:c0:df:34:d8:46:
7d:ea:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:09 2025 by rpki-client