Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
File: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (raw, json)
Hash identifier: GqpApCZsTZIotGQu+evDyWElqLkFW0uUDaRgMaB4+Yk=
Subject key identifier: 21:E9:C2:3B:2B:96:D5:7D:6A:CB:D3:1D:C1:E0:0A:2A:00:91:F4:D3
Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial: 6F2626DDEC82396F314E0CB28E168CD890336AFF
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
Signing time: Sat 06 Apr 2024 04:00:00 +0000
ROA not before: Sat 06 Apr 2024 03:55:00 +0000
ROA not after: Sat 05 Apr 2025 04:00:00 +0000
asID: 64297
IP address blocks: 103.77.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:26:26:dd:ec:82:39:6f:31:4e:0c:b2:8e:16:8c:d8:90:33:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Validity
Not Before: Apr 6 03:55:00 2024 GMT
Not After : Apr 5 04:00:00 2025 GMT
Subject: CN=21E9C23B2B96D57D6ACBD31DC1E00A2A0091F4D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:d5:8e:d3:68:53:cf:5d:a6:25:30:5f:0e:
e7:4f:98:4f:94:99:dc:7b:38:38:91:95:47:7c:a2:
e4:7b:ba:c3:ec:d8:0c:83:30:73:7e:17:1c:df:95:
e9:56:83:78:81:b0:e5:e6:6b:cd:4f:a8:b0:6f:9f:
30:e0:0e:f3:96:64:ad:33:22:47:8a:77:6c:58:41:
4e:8d:e0:8c:7b:e0:64:d4:e4:d9:6b:d8:49:47:2a:
ef:7e:7c:87:20:09:fb:60:be:f7:fe:f7:73:1a:92:
bd:eb:91:ea:bf:6a:dd:b8:16:40:00:8a:d7:ad:aa:
6e:18:a5:10:bb:84:58:cf:97:e8:73:cb:d4:3c:69:
63:4d:d5:49:7a:1e:e7:15:81:2d:25:42:95:a7:9b:
bb:31:55:fb:e0:b6:cc:7a:90:36:4c:d7:b8:1c:0d:
3b:20:b3:0f:36:5b:03:59:0a:ef:e8:98:ff:8d:4e:
7a:ce:14:d2:ce:db:8a:9b:83:de:79:93:78:3b:d6:
ab:1d:7c:75:ec:57:01:81:ac:9c:1e:75:9c:c1:46:
13:86:b6:b4:41:4d:b8:e7:9a:d0:ce:dd:be:ef:3e:
15:fc:28:2f:d7:33:f0:36:75:b1:9a:dc:aa:94:2d:
02:91:48:2b:64:d6:65:4f:36:e1:65:02:c6:df:ef:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:C2:3B:2B:96:D5:7D:6A:CB:D3:1D:C1:E0:0A:2A:00:91:F4:D3
X509v3 Authority Key Identifier:
keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:29:2c:d1:3b:a6:7a:9c:bd:57:12:78:ee:51:55:7a:3f:32:
00:a9:e5:b3:ae:ba:0d:88:ee:a4:03:4a:ab:cf:63:16:55:50:
7e:77:d8:73:f3:65:17:19:7e:f3:69:73:15:c9:3b:d4:d5:39:
62:9a:80:e9:0e:0c:b0:5c:f7:a7:cb:47:e8:6b:33:29:8e:7d:
0b:50:3a:49:7b:b7:3f:6b:12:e6:f2:cb:86:0c:2d:b0:63:3f:
c7:8e:8e:5d:bc:5a:6a:f9:4f:f1:f6:67:17:9e:e7:1f:3b:72:
7d:aa:f7:8c:5f:b2:aa:7d:06:01:8f:d7:d2:a3:fe:8f:24:c2:
56:0d:63:39:38:ae:53:80:52:a6:16:d1:8e:3f:9b:82:bb:14:
c7:b8:f2:af:da:69:45:a9:6a:ed:a6:00:96:cf:0a:14:30:ca:
7d:49:d2:fb:7d:a6:fd:41:ec:48:f0:ee:76:48:d2:e6:80:d7:
2f:28:e1:c2:a7:ff:d8:e3:18:31:35:6a:a4:53:b4:97:23:24:
fb:cb:89:65:d9:53:e5:72:3f:7b:86:bc:2e:d8:d6:84:c1:dd:
24:e4:db:5e:0d:a5:26:36:77:78:0e:f4:36:c2:44:83:ff:4d:
02:7d:12:44:e9:c8:bf:b4:64:b2:11:4f:b9:47:98:47:e4:fd:
77:5b:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:45 2025 by rpki-client