Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
File: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=
Subject key identifier: E8:F7:65:6D:77:01:9E:64:11:88:6A:2A:BD:D6:EC:9B:14:E1:63:B7
Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial: 314C2259D1248540EFD7577D42141303592DEABD
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
Signing time: Fri 13 Sep 2024 08:00:01 +0000
ROA not before: Fri 13 Sep 2024 07:55:01 +0000
ROA not after: Fri 12 Sep 2025 08:00:01 +0000
asID: 136842
IP address blocks: 103.100.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4c:22:59:d1:24:85:40:ef:d7:57:7d:42:14:13:03:59:2d:ea:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Validity
Not Before: Sep 13 07:55:01 2024 GMT
Not After : Sep 12 08:00:01 2025 GMT
Subject: CN=E8F7656D77019E6411886A2ABDD6EC9B14E163B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:18:76:ce:99:0f:d9:14:e1:c3:54:ec:0d:
b2:c8:fb:96:d4:3d:ea:19:cb:7a:b3:b4:c6:db:52:
67:7b:81:bf:74:24:c6:d6:c9:27:87:92:c4:21:e4:
0a:91:22:ba:b6:40:97:5b:6a:20:11:e9:1e:0c:8a:
4e:61:c4:8c:06:4f:b1:8f:46:2b:21:70:58:0e:71:
0c:b8:e0:2a:7e:d0:ee:5e:9f:b4:d7:f6:29:bf:f5:
b8:3c:3b:1a:fa:a5:10:cd:5c:17:5e:85:34:b4:95:
d7:7c:54:12:fd:9a:f9:41:27:5b:62:7c:9a:2f:6d:
da:fa:f2:d5:4a:d6:c5:0a:ce:93:ea:97:3f:8c:89:
09:2a:9d:cc:b1:ae:a9:6d:63:f8:4c:c8:ab:a0:dc:
30:f6:db:f0:c7:7a:2d:ed:ad:7a:a1:7b:c5:0a:f5:
a7:ee:c2:a9:25:63:81:37:5a:a9:04:d5:cf:09:c3:
2f:03:6c:4d:d4:48:4f:47:6e:20:02:aa:66:7d:60:
7f:4a:22:23:91:a9:5b:18:64:15:39:ee:0d:a1:d5:
dc:37:80:d7:ea:f0:31:3d:86:d2:bd:1b:19:22:6f:
c0:65:b7:46:f9:5b:22:3a:d2:29:57:3e:b2:7a:7e:
5e:1a:1e:8f:cd:9e:4f:b0:6c:38:9b:05:88:f8:a5:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:65:6D:77:01:9E:64:11:88:6A:2A:BD:D6:EC:9B:14:E1:63:B7
X509v3 Authority Key Identifier:
keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d9:8d:52:db:c0:06:b0:fc:d8:83:ba:2a:ec:65:bf:94:f8:
79:e9:da:dc:a0:70:ac:f2:61:79:5b:b8:14:6f:a4:47:58:d8:
84:cf:9a:c8:c7:25:e8:eb:9a:57:c7:02:b3:27:ad:ff:77:fb:
be:a3:71:06:98:10:2a:23:84:10:94:1b:b4:48:36:ed:82:06:
7c:8a:5f:52:bc:c9:06:a9:48:aa:2a:18:f7:ef:29:d9:f1:b1:
5d:02:ea:d6:9c:4c:1f:9f:d4:a0:d4:f9:dd:0d:25:24:50:10:
f7:1b:e3:e6:77:74:24:1b:a0:5e:ff:af:a8:4a:b5:09:df:b9:
e8:5d:02:ac:76:d3:bf:95:8f:ce:54:3d:ad:1f:31:6a:b8:69:
b7:f2:5a:34:98:cf:7e:86:14:3f:af:1d:4c:36:8e:ce:3c:0f:
f9:91:dc:5f:99:52:7b:f0:18:f4:30:34:47:fb:07:70:25:89:
04:0c:96:6f:1a:a0:b9:dc:c5:ac:2c:b6:8d:81:59:34:28:90:
e4:6c:10:d4:20:3e:04:e2:45:33:74:e5:5a:f9:e3:fd:b8:b2:
70:7c:62:5d:66:be:98:ed:c9:76:a2:4c:c2:f7:7f:68:85:de:
ba:b7:d2:d0:25:71:07:db:95:27:3c:bf:f7:8b:fa:9f:66:9d:
5c:2c:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:31 2025 by rpki-client