Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
File: 3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier: Hr3uwLJxBNfzsV6Q0+ifmRmuIRlu8pn04eRFkJEK8Pc=
Subject key identifier: EF:88:25:CE:D1:C3:D5:11:C5:EE:0B:8A:24:8E:EE:5A:6C:3F:2D:15
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 0A549C8EF75685BD628DBA3F475579F4CCE537FC
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
Signing time: Fri 16 Aug 2024 15:00:01 +0000
ROA not before: Fri 16 Aug 2024 14:55:01 +0000
ROA not after: Fri 15 Aug 2025 15:00:01 +0000
asID: 137316
IP address blocks: 103.109.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:54:9c:8e:f7:56:85:bd:62:8d:ba:3f:47:55:79:f4:cc:e5:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Aug 16 14:55:01 2024 GMT
Not After : Aug 15 15:00:01 2025 GMT
Subject: CN=EF8825CED1C3D511C5EE0B8A248EEE5A6C3F2D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:1f:03:21:08:fa:da:c1:99:e3:4d:15:08:
ee:59:ba:23:00:f9:6b:a3:7d:4a:ee:3f:5f:fe:85:
13:78:3a:47:22:b6:0b:4b:7c:09:d0:08:97:0c:75:
c3:8f:f5:3c:05:3e:db:66:1f:d3:7e:fc:c1:f5:31:
fd:a8:35:bd:70:99:b8:69:da:f9:6a:29:1f:6f:30:
20:95:36:fe:35:94:e3:9d:3f:4c:8d:67:d6:02:5f:
d1:06:15:e1:9e:fc:e2:ee:02:78:8e:30:81:5b:d2:
15:73:a9:da:b6:ff:d4:3c:99:3a:fa:09:1c:62:ab:
d7:52:68:56:b0:29:ba:b0:fc:97:e2:22:5b:6d:ec:
00:55:9e:01:e2:a9:df:49:25:34:1e:b4:ef:87:df:
bd:bd:94:84:a4:d9:da:ed:5f:52:a7:86:41:c5:6e:
c4:a2:4c:7a:f6:66:10:8d:0c:a1:35:0e:06:84:39:
85:ce:c6:35:18:8a:1b:2c:0e:88:93:c6:9f:40:ab:
7d:f6:c3:ee:a7:68:35:be:c0:f2:33:5f:76:06:b8:
42:93:a9:7d:6d:bd:a5:d7:84:3c:01:95:23:88:27:
b7:8a:a5:c4:b9:e5:bf:84:d3:43:5c:50:0a:4a:4c:
42:1b:6e:70:47:6e:fe:5b:36:12:33:dd:98:f4:6e:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:25:CE:D1:C3:D5:11:C5:EE:0B:8A:24:8E:EE:5A:6C:3F:2D:15
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.124.0/24
Signature Algorithm: sha256WithRSAEncryption
86:33:79:1d:d1:ca:5f:b3:f0:78:b8:8b:e6:c1:26:fe:5e:cb:
1e:b9:6e:c4:49:52:a6:39:aa:ed:29:04:a1:b2:50:3f:b0:b4:
44:32:1c:c9:f0:dd:00:41:62:7f:48:0f:5c:94:f2:e0:90:60:
fc:0e:7b:75:14:d8:8b:ee:9b:1a:64:f0:0f:b8:c4:a8:b3:b9:
4b:ba:37:fc:2f:0e:07:d4:ff:2d:c2:61:3c:68:56:51:63:82:
0c:1c:13:6e:9f:82:7c:f4:2f:09:1d:10:d9:6a:c6:e5:ad:ff:
57:33:d7:5e:03:72:11:a2:66:c7:03:27:8f:21:00:6d:b7:a3:
b3:24:d5:a5:b1:81:78:0a:a9:38:b4:60:c5:42:d1:08:0d:d9:
e1:74:4d:ae:ee:63:ce:ee:d4:ae:3b:6d:69:f4:85:a7:68:44:
bc:b2:6d:23:17:42:f8:8d:50:f2:23:6f:7f:0d:df:21:6a:81:
b1:53:3b:ea:c1:04:76:11:6a:91:60:5e:f0:36:32:35:a1:35:
be:2e:8d:28:35:0a:53:10:5f:23:75:51:64:95:6a:f2:22:25:
be:7b:9c:4e:ec:72:93:55:96:cd:40:c2:42:34:a0:e8:2f:df:
2e:f4:f1:7b:49:c8:24:f4:8d:16:b0:8d:c5:42:4d:dd:a9:dd:
86:f1:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:37 2025 by rpki-client