Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier: lKc98uyaChQPn1CaGH2R2he43NF0eULLFB1Ix5Ch2+Y=
Subject key identifier: 23:F3:E4:18:11:67:93:7B:84:D0:16:F7:69:B3:8B:2D:E0:9B:A1:1F
Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial: 659D4023D918CB9FAEC84904709F2D78A38993E4
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time: Mon 01 Jul 2024 01:02:34 +0000
ROA not before: Mon 01 Jul 2024 00:57:34 +0000
ROA not after: Mon 30 Jun 2025 01:02:34 +0000
asID: 131749
IP address blocks: 103.31.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9d:40:23:d9:18:cb:9f:ae:c8:49:04:70:9f:2d:78:a3:89:93:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Validity
Not Before: Jul 1 00:57:34 2024 GMT
Not After : Jun 30 01:02:34 2025 GMT
Subject: CN=23F3E4181167937B84D016F769B38B2DE09BA11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:47:b5:58:cc:53:ea:cc:d6:94:6d:7c:cc:
80:41:a4:91:56:56:67:71:74:33:b4:06:12:6e:ee:
6b:54:a4:70:ce:52:7b:14:c5:3b:24:cd:dc:46:29:
b2:bb:25:e5:3c:af:24:d3:17:cb:6d:e3:99:d7:91:
ad:e6:d2:73:a9:ab:86:c1:d4:27:16:b8:80:71:0c:
d4:dd:90:2b:30:5d:bf:88:58:57:db:f9:de:28:f6:
4b:ce:64:b2:9f:80:a7:aa:3e:e9:51:7d:8f:42:ec:
7f:a3:2f:e1:56:e1:66:f6:c4:4a:dc:c9:ae:6b:9a:
8b:bb:a2:7f:ba:a1:bf:df:24:16:29:d0:9e:0c:2f:
44:5b:0f:53:4a:ec:88:c1:48:cc:18:b7:3f:4d:28:
30:00:50:d7:f1:c0:ef:a7:b3:a3:be:15:22:dd:b6:
73:bb:22:a5:eb:78:21:98:5d:c7:81:34:05:78:f1:
31:6b:d5:58:62:63:e5:38:d8:66:ba:3a:42:72:d5:
da:09:25:e6:8d:61:52:41:50:75:27:8f:9a:c7:5e:
cd:ee:cc:fe:48:80:0b:4d:47:02:5e:59:09:36:2c:
8c:e0:9e:c5:d0:2f:e6:6b:ab:9b:f2:fb:c3:67:7a:
3b:91:f7:0a:5a:64:9d:74:95:15:de:46:81:d2:6b:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:E4:18:11:67:93:7B:84:D0:16:F7:69:B3:8B:2D:E0:9B:A1:1F
X509v3 Authority Key Identifier:
keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.132.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:d0:ed:e8:1d:12:fa:8b:ee:a9:f9:96:bc:62:99:64:44:0c:
9b:20:19:5e:1b:56:9a:52:4d:27:40:0f:43:7a:9b:c6:cc:10:
7d:c8:2f:76:9d:4a:e0:8f:34:93:94:87:c6:ea:98:11:08:1a:
b0:87:76:29:34:15:ca:51:f5:b1:17:53:66:04:79:6d:5a:f8:
29:8b:e1:dc:0b:dc:f0:7d:f6:67:da:0b:f2:1b:05:1b:9e:c0:
32:bc:fd:e3:f4:41:57:49:a9:b6:66:2f:50:46:7a:f3:50:2d:
fd:74:9e:38:7a:55:6e:51:17:fa:f2:18:86:7b:33:5d:23:9b:
a6:2d:57:f1:6a:37:e2:9a:a9:65:1a:fe:45:8e:57:31:04:30:
53:0b:5f:5f:19:89:39:77:eb:50:1b:ca:ad:2b:ba:89:46:22:
87:0e:b4:54:ab:8a:38:ae:81:ba:ed:5a:1b:f3:44:75:c9:c7:
99:1c:84:6f:a2:da:16:0c:97:cd:ca:3a:d5:1c:59:67:b2:6d:
6b:f9:ca:3e:65:e9:cd:36:bd:80:37:37:c6:1d:3b:6d:15:51:
5f:ea:c3:ea:f5:fb:6e:90:9f:bb:9a:ea:e0:bf:7d:eb:13:41:
c0:0e:47:12:ec:4d:d6:47:96:fd:a2:e9:20:85:df:2d:dd:d2:
9e:f2:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:41 2025 by rpki-client