Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa
File: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (raw, json)
Hash identifier: iMfSSinGtDPKsnUITF8ucJ6Jhn1US8MkEsGsTfwFNZs=
Subject key identifier: 7B:1A:4A:94:1B:59:A1:70:6E:8E:43:F2:AE:20:E5:A0:3E:87:5F:F4
Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial: 391D2967985235FB4C5FD7139402D6CFC5336544
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa
Signing time: Sun 13 Oct 2024 01:00:01 +0000
ROA not before: Sun 13 Oct 2024 00:55:01 +0000
ROA not after: Sun 12 Oct 2025 01:00:01 +0000
asID: 149344
IP address blocks: 103.176.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:29:67:98:52:35:fb:4c:5f:d7:13:94:02:d6:cf:c5:33:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Validity
Not Before: Oct 13 00:55:01 2024 GMT
Not After : Oct 12 01:00:01 2025 GMT
Subject: CN=7B1A4A941B59A1706E8E43F2AE20E5A03E875FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:e1:22:ab:36:41:10:ed:6d:2f:db:80:b8:
52:74:0c:17:4d:b8:74:f5:58:a6:6a:49:4e:d0:63:
b0:fe:07:1a:f9:69:22:db:f3:47:cb:64:f6:51:bf:
c4:0c:9a:8f:ec:f1:85:87:45:77:65:89:27:a5:ea:
55:a7:7a:77:0f:fb:42:54:e1:e2:3d:c9:8a:34:0b:
99:97:20:20:6a:5c:42:f5:8f:1d:2b:02:27:6c:cd:
f4:8c:dc:3f:57:0c:5c:5a:88:a8:0e:a1:3c:8f:6e:
11:4c:33:40:e8:3e:c1:b1:4f:38:64:df:bd:10:c3:
7d:c3:c9:d5:52:fd:ec:e4:07:39:18:3f:67:7b:6f:
e5:d9:a9:9b:32:80:b7:51:ed:b3:fc:99:82:e0:b4:
46:5e:fc:83:49:4a:58:25:55:0d:39:75:1a:2c:f8:
2a:71:ee:24:3b:a9:fc:e1:31:6c:a4:77:d3:2a:95:
df:15:01:ed:a3:a4:b9:a2:de:31:4c:99:04:5c:fe:
d8:fb:ff:e6:71:76:19:da:41:ce:ff:7e:10:65:00:
ca:31:3f:21:31:ce:bd:5e:10:bf:eb:d6:57:2e:46:
d8:bf:bf:0e:b5:06:d5:bf:7f:e4:22:ea:7e:e9:42:
9f:14:39:54:f7:c7:81:96:92:fb:3d:75:8f:64:50:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:4A:94:1B:59:A1:70:6E:8E:43:F2:AE:20:E5:A0:3E:87:5F:F4
X509v3 Authority Key Identifier:
keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.98.0/23
Signature Algorithm: sha256WithRSAEncryption
21:76:4e:16:b0:eb:5a:42:c4:a9:da:dc:9f:37:e4:7d:c1:1d:
fc:fb:d7:b2:00:b9:0a:6c:fa:7e:88:24:1c:b9:88:96:b8:40:
11:c7:08:f6:8d:eb:3a:a9:5e:a6:b7:e0:b2:8a:62:03:9f:ff:
b7:94:e2:eb:36:93:15:c8:ac:29:23:24:f9:56:19:f5:85:f1:
4c:d7:30:a4:f7:b7:c6:ed:1f:da:ce:ee:3b:6a:ee:82:2f:77:
40:16:cd:65:49:9d:05:ba:11:ee:7c:63:09:83:15:8c:d9:a0:
56:ad:87:6a:5d:c6:41:0a:5c:72:02:2e:e4:6d:43:92:6d:ef:
c1:90:e7:7b:4d:78:3f:9c:f7:d0:9d:2f:1c:f0:00:66:b0:98:
53:22:3b:64:0f:f4:e5:30:c3:90:7d:36:23:f8:f4:95:a2:58:
04:15:e6:2b:a7:1e:93:1b:2d:10:d5:28:0a:22:bd:07:02:9a:
b4:79:5c:4b:13:80:00:51:20:7f:a5:d6:73:2b:4e:91:79:82:
c1:0a:61:71:d3:d1:92:05:88:47:36:0e:bc:45:a5:8b:e3:ef:
44:9a:b4:21:64:d8:48:8c:ec:21:02:9a:52:62:c7:34:7e:4e:
6d:25:f3:3a:21:ba:84:1d:51:bb:86:8f:83:5d:db:b4:54:23:
48:a0:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:11 2025 by rpki-client