Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: ZrInKy3rN8CQHG74U5DNNhQz02tlUukWAziTX5F6+yM=
Subject key identifier: 36:7F:B5:E1:8D:14:3B:A4:CF:10:7D:7B:C0:FC:BC:AE:4B:10:06:A0
Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
Certificate serial: 7E33FCCB35A8F4B55B72C55490E7AAF182B7DC06
Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa
Signing time: Thu 02 May 2024 06:00:01 +0000
ROA not before: Thu 02 May 2024 05:55:01 +0000
ROA not after: Thu 01 May 2025 06:00:01 +0000
asID: 38496
IP address blocks: 103.91.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:33:fc:cb:35:a8:f4:b5:5b:72:c5:54:90:e7:aa:f1:82:b7:dc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
Validity
Not Before: May 2 05:55:01 2024 GMT
Not After : May 1 06:00:01 2025 GMT
Subject: CN=367FB5E18D143BA4CF107D7BC0FCBCAE4B1006A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:84:45:bc:c1:05:af:f6:70:4e:af:3e:1c:
69:eb:d6:af:41:1b:c3:75:ce:0f:51:0e:fd:c3:0d:
ea:1a:65:23:68:f1:5d:2d:19:67:6b:32:fa:87:51:
f7:ee:f9:17:ca:5e:fd:ce:26:2e:7c:01:43:68:f9:
50:8d:12:71:c7:09:f0:09:e4:71:d1:7b:51:d0:44:
7a:a5:9f:df:f4:74:c8:c6:ea:bf:38:c4:8d:71:2d:
c1:22:33:ac:f4:ae:03:0d:63:38:d6:05:58:d8:ed:
b4:c6:90:c0:b4:a1:9d:6b:cb:a5:19:4f:f2:39:97:
5d:c5:92:bd:45:d6:e7:99:24:45:6c:86:74:bf:21:
d7:54:a4:4f:f4:62:93:e9:dc:78:f9:dc:f7:a9:b7:
80:6f:ce:21:83:f8:14:53:81:63:f5:ce:7d:a8:26:
f7:65:01:c4:2e:20:37:da:86:0e:3c:16:f9:38:c2:
d7:60:95:9a:8e:ab:5e:c3:2f:6c:47:22:74:20:96:
e3:61:3f:5b:06:51:6a:39:21:10:e2:4b:6f:ab:3f:
41:4f:96:cd:95:0c:91:2f:77:7f:8d:fc:29:48:57:
35:9c:60:89:de:c8:12:9e:07:c1:e6:49:b4:43:0b:
ca:cd:17:a2:fd:2b:33:84:d8:8d:2a:94:93:5e:dc:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:B5:E1:8D:14:3B:A4:CF:10:7D:7B:C0:FC:BC:AE:4B:10:06:A0
X509v3 Authority Key Identifier:
keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:dd:d5:5f:00:4c:f3:09:2f:fc:38:f4:a7:98:3f:d3:97:d6:
36:09:56:21:9b:9c:29:54:d3:1e:fc:d7:8b:21:34:6d:9a:e6:
ec:94:d5:b0:84:19:60:c4:a6:7e:7d:2f:55:d6:42:42:fd:52:
ec:77:b1:f6:35:ad:ee:25:ad:9c:77:fb:cd:73:7b:b2:a4:77:
90:ca:3e:cf:15:ef:23:c4:14:31:b6:2c:0f:65:1d:2e:1a:8c:
bd:98:56:f3:33:1e:9f:9f:fe:3b:7d:27:ba:1c:a5:66:fd:0e:
26:cf:4b:1d:96:10:0c:d9:12:c4:50:b9:be:aa:78:02:54:23:
ff:92:1a:e4:53:af:62:23:e1:06:00:3c:cb:ed:00:15:e6:a0:
a5:f8:19:cf:a9:6a:c6:88:2c:ac:21:06:cb:7b:d2:0e:96:b3:
ba:f9:d5:0b:ec:30:e2:56:92:56:46:93:de:6c:62:2e:5a:24:
dc:90:fd:c2:c0:ba:d9:62:a9:98:b0:c4:41:78:1a:a8:38:c0:
57:96:b1:82:8c:ee:be:6c:85:98:37:36:da:b8:b6:fe:b2:fa:
53:b8:29:0c:a2:bc:8f:3e:66:f6:af:bf:c6:45:1b:f5:99:3d:
3b:3f:8b:8c:94:48:34:5d:45:26:66:ab:1e:78:28:81:bc:57:
7c:1d:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:07 2025 by rpki-client