Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa
File: 3130332e33312e3233352e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier: Pl0k84M+uRUK3d2s5+JiFSNduQ79jcJskl6fGOuHObU=
Subject key identifier: 12:04:6D:CA:4B:7E:E5:12:64:B4:E2:40:6B:0C:F0:5E:87:76:22:A3
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 042B10BC8C8E8C04F70456524F7B27475489BA01
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa
Signing time: Wed 11 Sep 2024 03:00:02 +0000
ROA not before: Wed 11 Sep 2024 02:55:02 +0000
ROA not after: Wed 10 Sep 2025 03:00:02 +0000
asID: 55701
IP address blocks: 103.31.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2b:10:bc:8c:8e:8c:04:f7:04:56:52:4f:7b:27:47:54:89:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: Sep 11 02:55:02 2024 GMT
Not After : Sep 10 03:00:02 2025 GMT
Subject: CN=12046DCA4B7EE51264B4E2406B0CF05E877622A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:59:79:9e:e7:33:f8:7a:00:71:59:f4:b2:
6e:07:17:ac:69:c8:32:e6:fd:cf:7d:e7:84:f2:5f:
aa:c3:1d:7f:aa:b5:cd:c9:15:1e:43:0d:8a:75:77:
af:10:76:fb:f4:7d:31:55:08:6f:2f:e5:cc:39:11:
5e:de:61:0d:78:a6:6e:b7:8b:ed:59:e5:76:c5:6c:
46:88:2e:10:80:2f:7f:a2:e6:6e:74:fb:62:65:07:
3d:5f:cb:d5:cf:06:8a:cc:93:3c:82:4a:cc:71:9b:
5c:27:32:68:d0:c1:a8:44:c3:fc:65:01:1d:5f:05:
d4:b3:e6:24:c5:f7:f1:d2:39:71:fe:b5:d0:01:be:
be:14:99:e3:32:10:e7:6c:97:32:7b:45:d8:77:5d:
f3:32:23:12:59:47:e6:21:fc:ca:72:99:b0:60:aa:
5d:3b:5d:02:b6:5a:a3:7b:7b:26:8c:32:76:04:ef:
04:8f:52:91:28:69:b6:e6:28:79:16:03:1e:d5:9c:
53:6f:24:6c:a8:77:62:92:62:08:ae:a3:80:8e:e4:
24:c0:3d:0f:c9:81:d0:6a:f6:6f:a1:4a:c3:99:00:
82:4c:22:7f:37:1b:15:20:a1:04:0f:f0:06:d9:5b:
c9:04:45:57:a0:38:ac:a8:a9:18:a7:48:a6:31:f5:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:6D:CA:4B:7E:E5:12:64:B4:E2:40:6B:0C:F0:5E:87:76:22:A3
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.235.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c0:82:c6:de:03:e6:cb:c8:fb:5d:a7:e7:36:89:4f:06:f2:
4a:57:69:c6:00:ba:e4:07:eb:36:f1:13:4c:c6:f6:31:13:d6:
ba:56:fb:b5:b8:f8:d5:37:54:96:2d:b1:4f:5e:60:70:8d:5d:
a4:05:95:87:74:73:1c:50:61:70:26:cc:6c:69:f6:00:5c:56:
9b:e8:a2:59:e7:49:14:64:9b:a3:af:e5:c0:b0:85:b2:15:3f:
99:43:3b:30:5f:0c:76:c9:bb:11:46:3f:7d:b4:c8:d3:6a:22:
b6:5f:8c:91:f2:cb:90:96:ff:07:90:f7:8c:c9:e3:83:eb:64:
bd:58:30:ce:0c:34:f0:51:f7:1b:b0:99:5d:0c:4f:52:ae:01:
a3:fb:38:b7:4d:d2:d3:f9:1b:f5:66:d1:d8:5e:34:e1:4a:ad:
32:52:79:47:42:73:f4:d2:1a:85:cb:12:e4:a3:78:b9:c6:15:
ca:da:1b:6e:d6:3e:d5:bd:12:96:df:85:9a:e0:0b:55:36:ce:
55:32:8a:3c:18:69:23:2c:cd:72:c3:1d:01:c5:56:c7:db:ab:
30:6f:44:07:62:7c:c3:ae:ad:28:d2:bb:9d:f5:d7:24:2e:ef:
2b:43:24:f6:1d:b6:6b:1e:47:63:0c:8e:54:5b:ca:f9:5d:b0:
06:3f:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:43 2025 by rpki-client