Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa
File: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (raw, json)
Hash identifier: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs=
Subject key identifier: 60:11:C4:A3:32:8B:77:FF:13:C1:84:B1:FD:90:A9:BB:CC:7D:F8:0B
Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
Certificate serial: 07420C661A1797E46EFE830DF7D63A4BF515C0A3
Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa
Signing time: Thu 08 Aug 2024 09:11:04 +0000
ROA not before: Thu 08 Aug 2024 09:06:04 +0000
ROA not after: Thu 07 Aug 2025 09:11:04 +0000
asID: 136095
IP address blocks: 103.84.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:42:0c:66:1a:17:97:e4:6e:fe:83:0d:f7:d6:3a:4b:f5:15:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
Validity
Not Before: Aug 8 09:06:04 2024 GMT
Not After : Aug 7 09:11:04 2025 GMT
Subject: CN=6011C4A3328B77FF13C184B1FD90A9BBCC7DF80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:f8:b6:18:9a:dc:cc:a8:23:1e:f8:16:ad:
7b:17:84:bd:bd:bf:7f:2b:28:d5:73:80:26:fd:9b:
b4:9b:2a:fb:f8:7d:fa:5a:bd:dd:c4:28:30:96:37:
6b:34:b4:da:8a:dd:32:8d:f9:ba:43:ad:89:be:62:
fb:d1:59:d1:41:6b:8b:71:f8:62:73:4c:8f:17:fe:
81:ca:db:c7:11:65:d0:3b:c1:bc:97:07:c7:8f:fc:
9c:b2:b0:49:ef:78:67:21:58:df:19:34:9a:4b:94:
3e:23:f9:a5:0b:ee:7e:e2:03:83:6a:af:1b:27:56:
f5:23:0d:15:8a:61:c4:11:37:04:1e:03:7d:c9:75:
63:1a:f0:67:15:a5:e6:e6:08:48:a8:36:0c:fc:f1:
35:0e:87:ac:4c:17:ae:0e:91:70:20:a4:94:f0:c1:
09:9a:63:4a:ef:6f:a5:03:7f:0b:97:da:4d:6c:59:
4c:b6:09:58:bf:52:2e:f3:e5:d9:be:13:9d:ff:c2:
06:81:a7:6b:ff:8b:46:5f:4b:37:80:47:de:a4:0a:
72:4c:5a:0e:fc:c0:6a:ee:6b:31:51:d0:e5:0d:27:
8c:40:77:b7:ca:66:96:ba:fe:84:e2:04:cc:b9:d3:
94:80:11:4e:6c:b3:2b:cc:a3:05:02:fc:81:25:c8:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:C4:A3:32:8B:77:FF:13:C1:84:B1:FD:90:A9:BB:CC:7D:F8:0B
X509v3 Authority Key Identifier:
keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.201.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:6f:f9:69:b1:7b:14:81:ac:5d:02:d1:3f:cf:e1:3a:4e:8a:
e9:cc:c3:41:b6:85:d2:52:d8:f3:12:f6:8b:5b:db:ff:72:82:
59:41:20:05:d9:71:dc:3a:1e:64:8a:27:0c:f8:6d:68:3e:e5:
7f:5e:dc:65:b9:b6:fe:b6:6c:40:69:13:b8:3f:34:e9:59:fd:
9d:10:5f:58:c5:b2:35:3d:46:cb:cd:83:80:93:54:5b:c4:77:
60:2d:7c:a6:0f:1b:0b:b6:1f:4f:c8:4e:1f:4e:79:dd:70:3b:
81:73:e3:38:1d:8d:dc:d1:ae:8b:61:0d:77:9f:ae:d3:be:79:
5f:1b:04:15:9c:32:73:b8:1b:25:9f:e1:a3:f5:e8:99:46:73:
16:22:41:7b:eb:f4:38:f2:7d:43:41:7a:17:22:4f:70:2e:b5:
93:87:24:62:15:20:c6:bb:38:cc:cc:bd:1e:4c:13:6c:96:fd:
13:e0:0b:a1:22:b7:45:2a:45:ed:e9:97:d9:93:a0:d7:ef:60:
1b:1b:bf:da:a1:46:71:30:95:27:e4:a8:33:e7:f8:62:82:05:
b8:86:40:40:1e:20:f4:18:2b:34:b8:f0:8a:be:a7:2e:47:18:
8b:5f:32:f6:5b:3c:6d:a7:14:f7:4b:0f:f0:78:e1:d9:8c:14:
84:fa:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:35 2025 by rpki-client