Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
File: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier: wD7K3L0wZgkXzx2g24s15kQ0Tlwyq9mWDYoDHZigfT4=
Subject key identifier: 09:D7:B6:80:EA:42:20:48:3A:19:64:6A:55:3D:9B:18:58:AF:09:D5
Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial: 4E3DD8D4FE1A0BB13CB0338FC23FF9F1B7AF322F
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
Signing time: Wed 17 Apr 2024 10:06:41 +0000
ROA not before: Wed 17 Apr 2024 10:01:41 +0000
ROA not after: Wed 16 Apr 2025 10:06:41 +0000
asID: 138855
IP address blocks: 103.169.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3d:d8:d4:fe:1a:0b:b1:3c:b0:33:8f:c2:3f:f9:f1:b7:af:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
Validity
Not Before: Apr 17 10:01:41 2024 GMT
Not After : Apr 16 10:06:41 2025 GMT
Subject: CN=09D7B680EA4220483A19646A553D9B1858AF09D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:2c:30:26:71:60:bf:a3:24:17:49:fa:c8:
b0:8c:83:7f:66:31:58:cd:e6:48:c2:02:68:b1:54:
61:44:f0:54:dc:bf:0b:53:1f:fc:39:40:73:e7:07:
8f:af:03:ee:1f:84:78:c4:19:09:09:29:31:ff:24:
b5:1f:4f:6e:82:32:99:9f:d6:cf:cc:37:fa:74:53:
8e:40:42:9f:b4:d2:7e:ba:3d:11:4c:56:fc:5a:ec:
15:83:5e:e7:c8:c3:3d:e6:66:a1:d8:2b:49:9e:94:
76:32:67:38:bb:0e:4f:f5:82:cf:ea:6b:41:86:7d:
a2:3c:3a:f1:cc:15:14:0c:5e:92:03:e8:76:17:66:
2c:a1:cd:1c:b8:40:81:34:a0:32:7b:17:33:02:72:
82:19:0f:62:de:f3:bd:de:92:41:86:87:27:1b:65:
20:ac:70:8b:c0:4a:e1:5f:f5:d6:5f:3c:ea:1d:df:
b0:6a:28:b7:8d:c4:67:68:32:84:1f:11:eb:85:98:
c7:b9:cf:e0:18:9b:79:a7:c2:9f:d3:46:80:1d:c3:
82:01:af:9f:a7:43:72:ac:4c:2e:5e:0c:30:bb:f8:
e1:d1:d5:c1:77:63:87:23:20:ef:7f:37:f5:50:63:
14:d3:92:fe:14:d5:82:68:f4:86:2d:b5:43:e1:6f:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:B6:80:EA:42:20:48:3A:19:64:6A:55:3D:9B:18:58:AF:09:D5
X509v3 Authority Key Identifier:
keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.222.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:72:70:1a:be:a1:20:ee:23:02:c1:26:6b:28:db:51:0d:38:
77:77:db:b2:61:28:55:b3:60:55:dc:9d:76:8c:22:2e:dc:e8:
1f:d7:c1:c4:d5:fb:01:ff:88:be:4b:fe:9f:3f:0a:c6:57:ee:
20:71:7c:5e:13:b3:19:be:4f:91:d6:c7:af:f6:75:13:a1:1d:
cf:67:97:69:21:5b:5c:eb:3d:c8:0b:75:2d:88:3f:e9:43:1c:
75:28:43:91:43:4d:9f:0c:62:23:cd:e1:f7:76:37:f4:8f:40:
ba:56:88:26:50:f1:9b:e7:f2:59:22:3d:60:f4:52:b1:fb:33:
36:b9:ff:1d:d4:fe:9e:f8:e2:7e:2e:77:39:3c:44:4c:50:b6:
4c:b0:ec:8d:89:4c:d0:31:73:1a:19:d2:0a:4d:d6:cd:c2:c1:
31:62:89:25:fd:26:cc:8a:0e:05:b6:a0:48:2e:f5:79:80:8c:
00:49:26:d0:07:9c:84:7b:56:53:d7:e7:05:b2:3a:b6:d7:c7:
0d:a4:6a:21:9d:d1:02:ad:7d:06:a9:72:2f:cc:1d:34:ae:a0:
1b:24:e3:c5:d9:27:ff:2f:d6:f3:02:8a:98:02:dc:33:39:00:
f3:32:fe:8b:70:f3:e7:04:49:89:c3:27:44:b8:45:01:9a:c6:
cf:ce:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:15 2025 by rpki-client