Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
File: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (raw, json)
Hash identifier: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=
Subject key identifier: 60:9E:27:3B:E9:C0:59:19:2F:21:3A:51:6E:12:37:42:BE:8D:82:D9
Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial: 2FE05BF2BC41ECDA1F3582188730B930202D4769
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
Signing time: Wed 22 Jan 2025 11:00:00 +0000
ROA not before: Wed 22 Jan 2025 10:55:00 +0000
ROA not after: Wed 21 Jan 2026 11:00:00 +0000
asID: 149340
IP address blocks: 103.178.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e0:5b:f2:bc:41:ec:da:1f:35:82:18:87:30:b9:30:20:2d:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
Validity
Not Before: Jan 22 10:55:00 2025 GMT
Not After : Jan 21 11:00:00 2026 GMT
Subject: CN=609E273BE9C059192F213A516E123742BE8D82D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:8c:18:3c:af:ce:07:c4:d8:b4:d1:43:dc:
63:75:c6:8f:e3:47:73:ea:cb:77:44:b0:68:2c:2c:
11:2c:4f:4e:43:90:a8:0c:e4:de:17:39:27:52:2e:
6c:34:40:6c:43:e6:ec:30:65:51:b5:6c:1f:9d:31:
28:1d:23:9e:57:2f:47:6c:1d:20:42:9a:11:f6:29:
a7:29:2e:3b:fd:31:a3:eb:05:c8:68:71:66:1b:76:
0e:40:c3:4e:94:06:5c:8b:e4:36:3b:5d:9f:86:bb:
d3:48:77:d4:5d:c9:b7:91:c4:01:29:c8:fa:03:ca:
86:77:52:a4:2e:61:2c:58:4a:d2:5b:48:8a:97:8e:
49:e5:c6:be:8f:11:ea:4f:a5:d6:82:34:dc:d3:91:
84:8d:b0:a1:a3:4c:47:40:d7:5a:84:b2:f0:48:14:
6a:22:a5:26:3d:a0:e0:97:5d:55:1a:e2:0a:b6:91:
a3:e2:07:41:41:a1:20:9d:ac:5b:ce:c5:14:f8:ed:
15:62:40:27:60:e3:81:78:2e:71:15:17:e5:15:a6:
fc:67:5f:ba:8c:33:be:00:3a:d8:39:16:46:5a:37:
e4:0b:b1:41:11:0b:c4:13:4e:3a:e1:16:27:d0:35:
d9:63:a2:dc:52:40:3c:a5:1b:18:18:47:d3:a7:bf:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:27:3B:E9:C0:59:19:2F:21:3A:51:6E:12:37:42:BE:8D:82:D9
X509v3 Authority Key Identifier:
keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:25:e2:f0:3b:54:4e:5d:8e:3d:9c:71:29:5a:6a:b1:ee:31:
c8:70:21:6c:32:94:9e:6c:03:77:ff:a8:84:f5:3c:1a:fd:06:
f9:1c:68:f4:30:a0:de:d2:94:4f:fd:fb:91:3b:c4:1b:df:c1:
c3:fa:1b:ae:c0:e6:06:0a:63:38:6d:6e:a4:09:17:a1:4e:fd:
d3:6a:d6:2c:eb:21:f5:bb:53:20:ef:06:54:ce:85:c9:97:10:
3c:43:8a:a2:9b:5e:e0:57:13:9b:e7:e1:f6:bd:ff:32:08:ce:
e0:b4:2f:d8:f2:44:cb:0e:f4:da:2d:55:a7:f0:a5:55:cf:6d:
b8:0d:b5:c3:4a:ad:15:8f:35:0d:cf:5f:73:7b:9d:6f:c9:9f:
d8:fa:9c:70:3b:b9:8c:63:bc:50:89:eb:30:f7:cb:e0:dd:bf:
77:22:ef:a1:be:29:27:60:cb:a3:6c:d5:79:bc:3e:53:68:46:
96:03:ef:3d:fa:d4:03:b7:20:4d:f8:e1:83:41:3d:a7:0d:a1:
3c:34:7e:e8:64:2e:49:8c:80:7a:97:22:af:34:e7:dc:c5:b0:
30:e6:f4:a7:36:c7:f4:5e:69:22:8d:8d:db:ae:b1:c3:a3:5d:
db:a4:c1:38:5c:ae:2d:9d:60:b9:19:f4:41:ad:b5:d5:45:c6:
f2:d3:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:21 2025 by rpki-client