Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa
File: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier: x4DDjlfJXD8JPTM+yjgeUkBoc/VsMYv5J2mqGIAVt3k=
Subject key identifier: 7F:C1:A1:BC:54:D6:18:9B:C0:E9:37:80:B0:C3:EA:CE:84:5A:7B:96
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 758C7BC39F74ECCA2EEE89DB64212725848B9347
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa
Signing time: Wed 02 Oct 2024 15:00:03 +0000
ROA not before: Wed 02 Oct 2024 14:55:03 +0000
ROA not after: Wed 01 Oct 2025 15:00:03 +0000
asID: 46061
IP address blocks: 103.24.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8c:7b:c3:9f:74:ec:ca:2e:ee:89:db:64:21:27:25:84:8b:93:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Oct 2 14:55:03 2024 GMT
Not After : Oct 1 15:00:03 2025 GMT
Subject: CN=7FC1A1BC54D6189BC0E93780B0C3EACE845A7B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:d0:bc:b9:76:67:9a:4d:96:6b:ec:d9:3b:
b1:30:d5:e2:0f:3e:54:1a:75:bc:4e:18:40:8e:12:
1b:df:f0:89:02:f8:b1:bd:ab:5a:4a:db:f4:d0:14:
3f:d2:57:40:37:e2:ec:d7:15:28:47:42:eb:3e:88:
3b:58:26:39:0a:0a:30:53:61:84:78:a0:0d:0d:df:
10:30:ee:7e:12:5b:4d:31:6e:d6:8f:50:b5:ed:46:
cf:d2:28:fa:7e:cd:15:8d:e4:04:fe:2d:51:13:73:
76:94:ec:55:63:48:18:8d:2d:91:2b:e4:3d:aa:bf:
0b:82:29:76:45:26:f4:7c:aa:be:89:52:2d:13:db:
18:b2:e1:1c:32:96:8f:3a:84:c0:9e:cb:af:06:db:
4c:f7:dc:21:99:ac:bb:33:0b:de:b7:a9:f9:01:8a:
d7:5c:72:da:3d:9a:1d:04:0f:f5:21:62:e8:3c:4a:
ae:07:52:5f:ef:f3:bd:87:8b:df:50:70:aa:0d:e2:
2c:a3:76:f5:fc:f7:28:66:45:81:cf:c6:3e:88:93:
32:f3:1d:74:2b:26:59:b9:fa:d4:3b:34:95:1c:52:
db:8e:e4:2b:70:12:17:82:a3:7c:a6:0c:99:99:ce:
05:a1:28:e3:a2:5a:10:6e:7a:d7:34:3c:a5:f0:46:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C1:A1:BC:54:D6:18:9B:C0:E9:37:80:B0:C3:EA:CE:84:5A:7B:96
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.72.0/23
Signature Algorithm: sha256WithRSAEncryption
65:e4:d2:1b:2f:98:9d:11:81:ee:a2:23:9b:6c:6a:35:5d:15:
e3:8e:1d:3b:3b:3a:40:7a:63:08:3a:2d:c5:cb:96:92:b4:ce:
6d:8c:25:1e:d3:d4:c1:bf:15:95:8b:bd:b2:a5:37:ec:e2:34:
23:7b:68:b9:5a:10:28:27:d7:f3:ef:c4:17:d8:b5:43:51:f0:
d5:44:5c:d1:be:e2:d1:e3:de:c0:5f:6d:47:34:a5:f9:7c:01:
8f:a7:61:67:cb:cd:ca:39:71:19:77:47:4f:02:02:30:a4:bc:
10:c4:28:c0:1f:6b:cb:bb:21:ca:dd:2d:fe:34:3b:ab:f5:9d:
da:80:a4:99:6a:2e:bf:04:86:f0:ca:20:b8:72:87:ac:e6:cc:
1d:7c:cf:65:1f:9a:77:42:05:a2:88:4d:16:be:e8:b2:30:7c:
35:15:8e:0e:5e:a7:48:48:13:8a:c7:ac:4f:88:b7:18:97:73:
90:a7:7a:9e:20:34:3b:d5:71:3c:4e:55:fb:8a:0d:cd:b0:c1:
50:e8:ea:fc:45:52:0f:ca:00:85:50:a6:76:96:57:47:be:13:
1e:5c:82:a3:98:df:c1:08:4d:fe:a2:88:29:c8:fb:65:ad:61:
fe:34:44:0c:93:d2:b9:32:c0:07:55:65:bb:cc:a2:96:66:b4:
ef:6f:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:08 2025 by rpki-client