Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa
File: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (raw, json)
Hash identifier: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=
Subject key identifier: 42:68:F4:AE:35:34:38:13:B0:44:93:A3:F1:C7:CC:71:8E:3E:C3:62
Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5
Certificate serial: 72CE8A1BCD4226E140395366F3EA65675CB4D27F
Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa
Signing time: Fri 23 Aug 2024 15:07:53 +0000
ROA not before: Fri 23 Aug 2024 15:02:53 +0000
ROA not after: Fri 22 Aug 2025 15:07:53 +0000
asID: 63883
IP address blocks: 103.62.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ce:8a:1b:cd:42:26:e1:40:39:53:66:f3:ea:65:67:5c:b4:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5
Validity
Not Before: Aug 23 15:02:53 2024 GMT
Not After : Aug 22 15:07:53 2025 GMT
Subject: CN=4268F4AE35343813B04493A3F1C7CC718E3EC362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:7c:2f:1c:63:b0:2c:f4:02:c2:d7:85:2c:
03:75:02:15:06:08:f5:1f:51:aa:97:b3:33:02:91:
ec:70:e5:c4:5d:68:14:2b:d0:0c:c1:4e:7e:a0:99:
71:84:1b:e5:f9:98:99:56:34:3e:5f:ca:38:23:23:
00:7d:3b:fa:6f:65:cd:ee:a5:ef:39:9a:a0:6b:3a:
47:e6:47:71:5b:9b:11:61:75:80:2e:cc:e0:3f:70:
95:29:d8:7b:fc:4a:ad:18:9b:d4:f5:89:28:03:6b:
64:4c:99:1d:89:e2:98:94:c0:a7:ac:51:11:1a:f1:
b6:2e:35:50:ef:78:8a:6d:89:d1:f4:ff:e8:bd:31:
63:f6:9d:c2:32:0d:7b:71:7b:91:5b:a9:5a:e2:f5:
2e:8e:27:cb:72:c8:63:38:33:14:61:95:db:e3:a6:
43:4f:8e:8c:af:c3:eb:39:b7:21:cf:16:9c:c5:fb:
9f:86:a0:89:3a:37:4d:a7:77:2b:d5:fc:d9:fe:f9:
e7:1c:d3:e4:28:81:ec:3e:53:5c:61:5d:89:cf:06:
be:eb:0e:73:7e:2f:22:c0:31:93:ce:06:b2:93:53:
59:df:e4:ae:bd:50:0a:ca:6f:44:b5:1c:b2:2e:70:
f9:8b:cc:5e:84:e1:db:bc:32:fb:f2:af:a4:11:ca:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:F4:AE:35:34:38:13:B0:44:93:A3:F1:C7:CC:71:8E:3E:C3:62
X509v3 Authority Key Identifier:
keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.62.202.0/23
Signature Algorithm: sha256WithRSAEncryption
17:71:26:7c:ed:32:6d:20:16:88:39:5a:d7:10:93:8b:ab:31:
15:c7:0c:51:fa:cd:d7:94:1c:c9:b2:ca:8c:b0:7e:d9:ba:62:
e9:ff:d8:ae:c3:47:2a:21:4c:6d:71:8c:e6:d1:2b:34:b4:01:
de:82:1c:e9:2d:b2:91:0c:2e:19:21:3d:d9:a5:8a:d1:61:6a:
3d:a2:2b:21:88:c5:9f:00:9d:5c:2c:1d:82:63:5a:45:e6:ae:
69:3f:c9:fe:d9:d3:91:8f:e6:b4:58:1b:fe:98:32:a1:49:2d:
ec:ba:e5:27:aa:21:9a:5e:80:4c:fe:ad:24:d2:61:22:53:2c:
6f:37:05:a1:2e:fa:3a:e7:1f:37:5f:e2:f6:6c:eb:9b:37:b7:
1d:2d:30:fc:ec:da:2b:9d:29:34:2a:f2:ff:fd:e8:ea:6e:cc:
6f:1c:f3:d8:63:fc:85:ab:ea:62:32:7c:c0:91:48:1c:a9:09:
2e:d8:9f:f8:c7:8a:74:f2:af:03:9a:e7:95:68:75:28:79:99:
4e:80:7f:2e:59:6b:9a:be:46:c7:d5:dc:d3:6b:d5:6a:c5:fd:
bf:5e:85:97:7d:ee:3d:33:f6:17:68:45:43:b5:1d:d6:af:d8:
e4:73:26:38:f1:81:dd:c4:85:fd:bd:fb:40:73:c6:53:c5:79:
8e:82:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:27 2025 by rpki-client