Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa
File: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (raw, json)
Hash identifier: FPt98Jlb07JrGQGNjE2/vKY/2MGs525PrXsgLkmv66M=
Subject key identifier: 51:1A:0E:71:A2:E9:40:07:79:54:C9:19:64:E4:4A:E6:F9:6F:8E:08
Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6
Certificate serial: 73DFB6418ACC0204E05839E64FB16487EA96D706
Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa
Signing time: Mon 01 Jul 2024 10:01:11 +0000
ROA not before: Mon 01 Jul 2024 09:56:11 +0000
ROA not after: Mon 30 Jun 2025 10:01:11 +0000
asID: 134623
IP address blocks: 103.197.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:df:b6:41:8a:cc:02:04:e0:58:39:e6:4f:b1:64:87:ea:96:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985976A4B3081770748882703E16497964D05A6
Validity
Not Before: Jul 1 09:56:11 2024 GMT
Not After : Jun 30 10:01:11 2025 GMT
Subject: CN=511A0E71A2E940077954C91964E44AE6F96F8E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:3e:35:dd:70:a7:50:78:20:62:9d:39:61:
8c:23:77:3d:fc:27:25:df:09:fb:a7:da:d8:c4:e7:
4a:62:d8:db:82:30:a7:d4:74:e5:3b:a5:f1:00:f9:
a1:f7:62:ec:1a:59:ab:d8:55:24:be:04:73:31:bd:
0d:5c:78:c7:b7:70:ca:be:b3:0b:26:2f:06:22:67:
fc:a7:d7:43:8e:bc:d1:90:4c:69:36:2e:8a:32:44:
4c:4d:c5:1c:12:4d:ca:49:9c:00:2f:49:41:0e:3c:
4c:50:c6:40:d4:bf:1c:47:b3:85:4d:25:56:f8:84:
37:26:f3:93:16:fe:fd:2d:1b:8a:b6:37:75:33:dc:
22:cb:77:31:75:e9:a3:e9:cf:b1:45:5c:27:98:a8:
91:a8:e7:ec:b4:97:a7:31:5a:54:a4:a5:cb:c3:23:
4d:c1:3c:a6:72:e4:1f:89:2b:78:1c:69:6a:ef:91:
0a:fd:11:d6:6b:38:4c:99:8e:70:13:e3:7d:a6:83:
a7:70:cd:9e:20:47:14:53:54:43:45:1f:aa:4a:ee:
5d:cc:f0:bb:a9:50:0f:5c:3d:5b:a2:c1:0e:70:d4:
a2:7c:94:14:68:39:8d:a8:97:1a:9c:60:f7:6a:d9:
13:4c:c1:7d:68:e1:f6:c7:49:96:65:59:48:36:01:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:0E:71:A2:E9:40:07:79:54:C9:19:64:E4:4A:E6:F9:6F:8E:08
X509v3 Authority Key Identifier:
keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6c:c3:a5:e6:b6:7b:97:2b:87:f5:32:60:40:f0:19:83:c6:
07:35:98:3a:57:1e:69:ba:fe:10:cc:61:50:d4:52:35:46:77:
70:ef:8a:4a:07:6d:74:3a:a4:be:97:bb:a8:0e:f8:7f:38:f3:
7d:ee:ae:a5:25:6f:8a:33:f6:96:19:d3:ab:16:9e:ff:1c:ae:
68:16:26:42:21:00:b3:65:e5:a9:f0:cd:6f:48:b4:16:4b:e7:
46:87:37:3d:ac:c1:f5:08:0c:f0:a8:1c:58:40:30:46:44:71:
e1:40:d7:19:ea:81:67:d0:30:73:b7:35:52:eb:ad:3d:f5:bf:
01:b2:98:dc:d6:f7:66:7a:b9:d2:77:6f:b2:a1:e5:6c:b2:9f:
2f:9a:1f:53:e9:d0:0a:42:a1:cf:06:21:8b:5b:93:28:45:51:
96:c3:45:dd:e8:b0:2d:86:9f:70:29:52:82:d7:27:b9:0a:d5:
0e:b7:2e:2d:ec:40:44:c1:46:75:8f:12:73:d9:ae:eb:84:38:
6e:3b:dc:5b:01:eb:07:bc:26:49:aa:a9:c4:03:ce:ac:5e:64:
53:7c:9c:e6:4f:45:a0:bc:10:25:08:87:19:a1:25:4e:07:53:
32:86:c5:f5:97:e3:99:c1:50:aa:83:63:0a:13:94:4f:04:6a:
5f:a4:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:41 2025 by rpki-client