Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
File: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (raw, json)
Hash identifier: jNblYOWXGZ9xpdk1D93yOMfg4jMrdJm4XYm7AukDLjw=
Subject key identifier: BB:2C:DF:0C:F5:76:9F:01:42:B6:40:F3:89:B0:62:27:E9:78:57:BC
Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial: 1BCD1711DCC3C7C012D0814B10241762F2C4AE5C
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
Signing time: Mon 01 Jul 2024 01:05:16 +0000
ROA not before: Mon 01 Jul 2024 01:00:16 +0000
ROA not after: Mon 30 Jun 2025 01:05:16 +0000
asID: 131778
IP address blocks: 103.246.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cd:17:11:dc:c3:c7:c0:12:d0:81:4b:10:24:17:62:f2:c4:ae:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Validity
Not Before: Jul 1 01:00:16 2024 GMT
Not After : Jun 30 01:05:16 2025 GMT
Subject: CN=BB2CDF0CF5769F0142B640F389B06227E97857BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:3b:77:00:7b:c8:4b:f2:d7:2e:1f:40:49:
68:32:f8:a7:f0:b6:fa:fc:ba:67:17:41:4e:4e:58:
a6:50:76:63:54:60:5d:ef:f4:31:6f:f4:2c:82:68:
e1:fb:e4:da:7b:49:81:73:d5:91:2a:ac:52:05:ce:
88:44:68:b1:4d:17:94:a6:5b:01:9f:31:85:00:fb:
b7:05:85:cb:bd:fb:e5:72:4a:fd:ca:fa:39:a7:fd:
95:37:a6:55:ed:c9:be:5b:01:c9:c6:73:96:f7:dc:
a0:9e:c8:13:6d:51:2f:0e:6f:72:de:75:92:8d:b7:
ae:34:51:aa:a0:80:57:10:2a:38:db:3d:7b:62:d3:
16:fc:e7:5e:1e:de:e6:58:60:3e:e6:12:4d:9d:b0:
7c:35:67:e9:c7:b3:5a:c3:0d:0b:95:d0:c5:04:5d:
20:8d:cd:c0:c0:38:26:9a:0a:56:73:2c:35:83:8b:
c6:9a:f2:15:93:bd:7e:e1:56:97:a1:b2:d9:27:44:
3c:76:c9:54:fb:fb:ba:49:67:1e:83:a1:07:8c:5e:
07:9a:51:7e:84:39:e5:f3:47:06:12:0a:84:36:aa:
39:69:34:e9:7e:19:51:0f:20:a9:7f:6f:26:13:10:
43:07:b9:60:21:be:40:28:ff:fa:ea:20:7c:91:76:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:DF:0C:F5:76:9F:01:42:B6:40:F3:89:B0:62:27:E9:78:57:BC
X509v3 Authority Key Identifier:
keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2e:5a:d8:72:63:90:c2:70:fa:f8:1b:95:a6:1f:c0:bc:90:
56:25:43:75:66:d2:be:b1:0e:fe:75:62:5c:c2:53:0d:4b:eb:
0c:73:80:ab:e7:47:03:8a:3e:99:4b:6f:c7:2c:0a:02:22:96:
7a:4e:4e:7c:6f:2d:2d:43:f1:35:77:06:e6:a0:66:4a:0f:b2:
2d:95:01:13:ed:b1:49:cc:b2:9d:d1:6c:2c:8c:39:d9:6b:ad:
51:63:31:02:6d:c9:85:e8:03:1e:eb:f3:b2:70:0b:6d:66:d1:
2b:f0:17:78:38:9f:45:25:31:51:e3:40:5b:3b:3e:2d:b0:43:
32:6e:e8:f9:02:42:df:a2:0b:e4:cb:f1:b9:49:33:32:bc:a7:
95:ab:c9:d8:f8:a2:00:f9:dd:bd:93:0f:6d:5b:19:c5:73:f9:
44:28:ed:10:ba:d4:9b:aa:86:8d:b7:c5:2c:33:0a:25:bf:05:
8b:b6:f5:68:02:ab:fd:30:11:17:e5:55:d2:77:0c:2c:09:5f:
c6:eb:5c:07:0e:6d:60:a8:cc:29:f6:69:dd:0e:68:38:5a:cb:
95:e9:d1:6d:8c:0a:12:25:47:71:40:07:b4:bf:c6:ee:99:78:
95:94:8d:a7:89:e1:a3:1d:9f:88:d6:2d:e2:a9:d9:5e:a9:76:
9b:9e:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:03 2025 by rpki-client