Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
File: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier: fAVVxSm1nFToQNyaLISt2LBq4Gsk+4pHivG2KqSxFZg=
Subject key identifier: 0E:6C:12:61:CF:21:79:7D:09:AD:D5:F8:D0:08:73:4F:FE:07:60:18
Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Certificate serial: 55FA935D36BB3AE253B2BBEBF1F1C8470EF20437
Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
Signing time: Fri 17 May 2024 09:17:17 +0000
ROA not before: Fri 17 May 2024 09:12:17 +0000
ROA not after: Fri 16 May 2025 09:17:17 +0000
asID: 59133
IP address blocks: 103.43.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fa:93:5d:36:bb:3a:e2:53:b2:bb:eb:f1:f1:c8:47:0e:f2:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Validity
Not Before: May 17 09:12:17 2024 GMT
Not After : May 16 09:17:17 2025 GMT
Subject: CN=0E6C1261CF21797D09ADD5F8D008734FFE076018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:e6:14:e7:9d:78:15:46:86:c0:8e:c7:94:
76:97:eb:9d:14:78:1f:02:6a:bf:4f:e1:8a:66:07:
cc:f1:19:1c:8d:6c:7e:08:f6:27:da:be:67:74:5f:
71:f5:9f:9f:73:73:b7:1e:7c:8c:e4:c3:90:17:00:
5c:88:bc:75:83:38:65:fa:f1:47:22:a3:52:9f:89:
52:8c:df:fb:81:13:b8:29:0d:20:cb:6a:7f:15:93:
1c:63:03:68:5b:65:fa:5b:c4:40:85:c4:7e:50:22:
de:8c:f3:d3:cf:2c:3f:a8:e0:1c:f6:e8:25:4c:32:
e6:84:9f:25:4a:64:da:20:aa:00:4d:38:9d:4e:a3:
d9:d9:4f:84:f7:b1:3d:10:09:3c:52:10:d6:ad:a1:
00:6a:ea:88:45:5d:1a:c2:94:8c:95:6e:c6:64:d0:
4a:50:81:49:c7:29:4a:78:6c:85:6e:b2:7d:f6:71:
12:c6:11:f8:c6:9f:04:a8:3f:fb:0c:cb:ff:7a:ce:
65:4f:6e:02:93:eb:b2:33:9d:7a:6b:4c:d2:2d:62:
5b:12:a3:d9:f2:61:bd:72:37:f2:c7:52:d4:14:2e:
dc:7a:0f:f5:0d:c6:d5:00:03:00:b9:d6:ce:26:bc:
55:da:c7:02:e2:0b:cb:b2:3c:ae:37:eb:0b:61:80:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:12:61:CF:21:79:7D:09:AD:D5:F8:D0:08:73:4F:FE:07:60:18
X509v3 Authority Key Identifier:
keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:2a:cd:ef:56:de:f5:60:cb:98:71:0e:6b:77:4d:0c:f4:
31:5d:65:00:c9:86:a7:4b:4a:94:2b:a5:5e:a9:f4:15:f1:0c:
d3:35:31:8f:da:04:14:66:fc:a9:77:7d:25:0a:50:30:e7:87:
7c:3e:61:08:5d:e6:e3:a8:8c:89:ad:79:1d:77:cc:a9:b3:f1:
38:5e:cb:f3:57:2d:59:b0:79:a5:79:55:45:11:93:8a:0d:7b:
06:18:f3:3b:39:fc:0a:bb:f0:7e:3a:81:d6:7e:17:9f:66:e8:
88:53:8a:08:28:a4:fa:c8:40:d6:19:e4:fd:67:8e:a3:7a:f2:
03:92:9e:74:91:3e:65:57:06:a1:36:8c:8e:42:df:2b:25:89:
84:00:81:f8:d2:d7:01:7c:33:f1:d3:a1:5b:d0:a9:77:53:7f:
b6:c8:f8:1c:56:2f:99:50:35:c1:09:0b:87:01:da:63:3c:ba:
c4:4d:3a:8d:e8:7d:31:17:37:99:1c:9c:21:1b:29:2b:c9:c6:
af:83:26:d6:54:be:7a:d0:7d:a3:ec:99:7c:d3:d6:99:29:0e:
c9:b2:29:04:72:22:74:0b:57:73:f9:0c:8e:20:ce:4a:83:6d:
f8:ab:c9:74:05:46:77:cc:27:d7:7c:df:27:ee:ab:79:a4:75:
ce:43:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:28 2025 by rpki-client