Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
File: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (raw, json)
Hash identifier: 9Fgs7hWJuuOtFl0pJ1PAqQEu5PslUFaq/LB6Vrj8s2c=
Subject key identifier: 04:BE:6E:19:55:4F:D7:2D:31:45:80:FD:A7:86:9F:00:B4:C1:D5:F4
Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial: 42DB25681C91ADEF4B60B9F3D278F6BA069C097A
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
Signing time: Thu 29 Aug 2024 17:00:01 +0000
ROA not before: Thu 29 Aug 2024 16:55:01 +0000
ROA not after: Thu 28 Aug 2025 17:00:01 +0000
asID: 147107
IP address blocks: 103.174.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:db:25:68:1c:91:ad:ef:4b:60:b9:f3:d2:78:f6:ba:06:9c:09:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
Validity
Not Before: Aug 29 16:55:01 2024 GMT
Not After : Aug 28 17:00:01 2025 GMT
Subject: CN=04BE6E19554FD72D314580FDA7869F00B4C1D5F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:a8:22:22:b5:de:36:aa:ec:20:ab:97:62:
56:b6:40:5a:c4:a3:77:da:31:55:69:ff:ca:fc:ae:
f9:a3:4d:00:a7:ff:e7:96:ed:53:2d:37:67:23:f9:
81:33:fc:de:ca:92:c5:7d:ba:42:ae:61:1d:af:4a:
19:31:58:fd:f1:ff:39:9e:3d:c5:b0:36:90:3e:4b:
34:5f:e0:25:19:68:ad:63:62:79:85:09:8d:46:07:
80:a5:ad:6a:48:8e:5e:3b:09:5f:78:a9:d6:b4:fc:
88:9c:bd:2b:c5:d7:73:37:30:13:a6:29:7a:55:51:
87:f8:57:65:fb:90:c3:60:b9:06:dd:1a:26:bb:64:
6c:6b:73:d8:94:f1:88:dc:25:2f:06:f1:cd:2e:26:
83:5b:d9:7c:85:4f:d9:0d:95:7a:1f:10:4b:1f:4d:
71:97:aa:21:f0:d4:37:d9:7c:c4:44:af:d1:d8:6d:
7c:71:9b:ab:83:d3:f5:62:d9:aa:34:bf:7c:99:68:
ab:c4:aa:8c:84:98:8b:db:d1:d1:c3:4a:39:6d:6d:
da:56:30:9d:b8:38:df:60:13:54:9c:70:2e:29:a6:
fe:5c:89:80:e7:91:e2:b8:1f:a0:56:ca:e5:3d:a8:
95:5c:a7:09:39:c7:89:e3:d0:5f:f5:f0:94:37:93:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:6E:19:55:4F:D7:2D:31:45:80:FD:A7:86:9F:00:B4:C1:D5:F4
X509v3 Authority Key Identifier:
keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b4:9e:7f:15:b0:a3:c7:2e:e6:57:6d:f0:13:78:1c:e5:7b:
f4:d4:ba:74:df:c1:db:af:f5:4e:e9:48:b2:52:1b:5d:89:be:
4e:2d:a8:91:2f:2d:4b:de:eb:62:0a:0c:8c:2d:91:2f:3e:f3:
a0:8f:f4:4c:4c:2c:99:12:4a:3f:52:0f:42:95:87:62:be:88:
35:f2:0f:34:71:6e:69:69:ac:6f:e9:2a:fe:48:f9:24:3b:a2:
b9:ca:86:2a:43:5b:98:0f:36:96:7c:3c:9d:14:c5:64:60:f7:
31:f7:38:c3:f8:1a:8b:72:ec:94:bd:8b:f8:d5:a8:8e:22:8c:
1d:6b:c3:73:5d:cb:f6:ce:07:d3:b2:5e:77:fa:6f:aa:b9:b0:
ef:bb:84:77:bf:a3:01:b2:88:3a:a7:e6:2e:ec:af:0b:24:db:
06:f3:87:14:cd:27:9e:2b:73:ce:14:fc:6e:23:35:79:b1:24:
66:02:4c:ed:e7:0f:04:25:e5:48:2c:ba:31:05:23:48:5e:1d:
86:42:5a:79:29:4b:cc:2d:5d:ce:86:71:ea:c0:62:e7:86:e7:
9e:06:ec:2e:a0:da:2b:e0:46:d0:c6:e1:61:41:3d:46:ae:5f:
b8:62:eb:d7:b6:d9:fc:a8:ac:28:ea:9b:4f:b4:53:aa:f7:76:
4f:7b:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:10 2025 by rpki-client