Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
File: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (raw, json)
Hash identifier: T/avkK1K5KQqb3goD2eSalwCBXNjyLMnINGvgboUmkE=
Subject key identifier: A0:FF:C0:B4:E5:7D:CC:36:A6:06:75:90:EC:7D:26:9E:49:61:F9:25
Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Certificate serial: 74FA3F2686CECB881B12C8F7938CE384CF3D1C71
Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
Signing time: Sun 04 Aug 2024 03:00:01 +0000
ROA not before: Sun 04 Aug 2024 02:55:01 +0000
ROA not after: Sun 03 Aug 2025 03:00:01 +0000
asID: 147100
IP address blocks: 103.174.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fa:3f:26:86:ce:cb:88:1b:12:c8:f7:93:8c:e3:84:cf:3d:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Validity
Not Before: Aug 4 02:55:01 2024 GMT
Not After : Aug 3 03:00:01 2025 GMT
Subject: CN=A0FFC0B4E57DCC36A6067590EC7D269E4961F925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:a8:84:75:48:8b:7f:da:82:04:38:b8:ea:
ee:6c:2b:70:52:16:1d:d1:de:49:c8:3d:6f:1e:b7:
cf:9b:8f:93:be:4e:2e:25:68:26:8b:d6:e2:bf:67:
16:d3:f8:3f:c5:5c:13:83:b0:ce:27:9f:38:b9:ef:
27:11:dd:10:9f:85:77:69:e7:ae:7b:cc:13:81:ad:
55:b4:f8:2e:d0:bd:63:5a:83:87:4d:6d:33:3f:18:
7b:e7:9e:f2:e4:ee:4f:3f:16:be:19:2c:15:54:9d:
90:44:ce:53:4b:17:08:e6:1e:d8:37:23:f1:66:23:
0a:77:af:a5:7b:1e:0b:0d:6a:f4:2a:80:94:2b:92:
04:aa:b8:25:84:52:15:92:04:c7:30:78:48:b7:84:
da:b4:93:fe:18:41:14:af:78:32:54:53:51:37:a2:
13:1d:a8:70:13:35:1c:19:82:b7:24:90:7f:64:c7:
df:64:95:34:47:0e:69:23:00:da:4e:fe:9b:16:d3:
d9:4f:47:04:28:91:17:3b:9b:d7:70:6e:96:02:2f:
31:2b:d7:fe:a7:04:82:61:49:f3:40:ad:36:95:e4:
db:b5:2d:d8:46:3f:2c:df:88:66:ce:33:6d:50:f4:
64:79:91:70:cd:15:b1:bd:18:23:97:8a:38:e4:42:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:C0:B4:E5:7D:CC:36:A6:06:75:90:EC:7D:26:9E:49:61:F9:25
X509v3 Authority Key Identifier:
keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7b:96:56:d8:9d:cb:43:89:fc:5b:c7:6e:5d:dd:3c:e4:b9:
ec:94:c0:c4:bd:ed:69:46:5e:c9:62:3d:88:4e:d9:ce:12:d4:
b7:2e:30:e1:ed:85:1c:3d:53:b0:fc:f8:b7:9a:57:a9:93:06:
44:06:35:d1:e1:e7:c4:94:e7:9e:1f:5e:b5:bc:66:25:8e:59:
2c:d0:b8:c1:98:7b:cd:56:84:70:2b:10:92:b7:dc:0d:08:8d:
bd:20:ad:d3:f2:46:14:cc:0c:52:ee:52:2e:d3:0d:f2:67:c2:
19:f0:6e:20:e6:3c:e4:c1:a6:c1:c1:db:be:17:93:5e:8f:3b:
8d:01:a1:4b:3b:c0:c0:56:3d:dc:7e:54:93:e6:3d:d0:e2:0f:
04:a6:fc:3a:2d:a8:dc:8c:90:a3:11:13:73:2d:40:28:5b:3e:
3e:53:4e:f6:1e:f0:24:a1:20:1f:67:0b:d9:4e:d7:60:94:70:
98:59:4a:1d:ec:7e:5b:32:f1:e6:22:73:eb:a8:67:a3:4a:d7:
77:c1:cb:82:ea:a4:de:b8:8d:6d:c8:e2:1d:42:cd:70:ad:4d:
79:a1:b9:9f:14:3e:1c:fa:dc:b8:5b:2d:ee:e3:f7:2e:7d:a6:
3c:d2:2b:8e:5d:bc:5b:1a:cd:e3:e2:10:53:68:0e:8e:c7:fa:
9a:d3:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:31:18 2025 by rpki-client