Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
File: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (raw, json)
Hash identifier: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=
Subject key identifier: E0:71:EE:E6:77:BA:B9:54:FF:15:7B:5F:5C:D3:9C:B4:CE:CA:01:6C
Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Certificate serial: 66941B9E1E7880AEEB5308C6077C042298FB908F
Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
Signing time: Sat 19 Oct 2024 10:00:02 +0000
ROA not before: Sat 19 Oct 2024 09:55:02 +0000
ROA not after: Sat 18 Oct 2025 10:00:02 +0000
asID: 150216
IP address blocks: 103.4.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:94:1b:9e:1e:78:80:ae:eb:53:08:c6:07:7c:04:22:98:fb:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Validity
Not Before: Oct 19 09:55:02 2024 GMT
Not After : Oct 18 10:00:02 2025 GMT
Subject: CN=E071EEE677BAB954FF157B5F5CD39CB4CECA016C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:30:6d:49:a6:ab:73:ad:3f:f3:85:38:8c:
90:ae:0f:59:e2:75:8c:ba:7c:70:87:d9:d3:fe:bf:
a2:b0:f9:5d:a2:c3:ff:2b:b1:76:0b:52:7a:5d:26:
03:f7:81:a9:39:e3:d6:bd:fe:1d:98:54:80:d7:8c:
b4:5c:34:c4:50:16:74:25:65:c9:d8:0a:f0:70:d2:
6c:92:2a:dc:65:63:0b:63:ef:f8:78:b9:b7:f2:90:
a9:43:8e:28:f2:df:76:9d:8d:f3:2b:54:05:47:b1:
16:7b:96:d9:66:f1:ff:b1:09:c5:a4:a6:47:be:6f:
10:7b:c6:9d:0d:9b:27:36:d2:45:c0:72:54:3c:a0:
b3:b2:62:57:5f:a8:0e:c5:c1:9c:44:5d:2d:ca:5f:
e8:d7:59:98:43:f6:18:20:8f:5a:c4:cb:40:98:f7:
c7:c9:b7:69:06:42:40:d9:16:f9:3d:21:18:43:0e:
93:93:e8:cb:d1:d6:a6:d6:54:84:0b:f0:be:4d:ec:
c2:d1:42:d6:e0:23:b6:d9:95:2b:79:e5:09:ef:61:
cf:8a:0c:18:84:68:a3:25:7d:4d:cb:db:3d:8f:47:
0c:c7:44:8a:93:61:d4:52:f0:2f:4d:31:75:1c:33:
6a:a0:e3:20:2e:da:8b:7d:fd:cd:54:0c:be:d4:ef:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:EE:E6:77:BA:B9:54:FF:15:7B:5F:5C:D3:9C:B4:CE:CA:01:6C
X509v3 Authority Key Identifier:
keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.76.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:88:6d:dd:ac:c2:39:54:cb:36:a7:81:e2:86:1d:1f:16:9b:
76:d2:57:07:9e:c9:cb:51:3f:a9:92:86:09:36:c5:f0:88:49:
1a:0a:37:be:d4:5c:f4:c6:7a:b8:cd:c4:dc:8e:c5:49:11:41:
a4:a2:5d:56:80:06:b4:db:3e:d9:35:9e:7a:db:c3:c8:64:73:
f0:31:86:e3:c8:2c:8f:0b:98:bb:c1:a6:8d:5e:8d:ba:14:19:
56:2d:36:ed:a3:1b:f0:b3:e1:34:74:b5:02:77:73:b6:cf:32:
c8:75:62:3a:06:c4:36:4a:04:65:0d:64:fc:ae:ec:dd:08:89:
d4:24:c8:2e:0d:60:e2:e9:57:c1:9a:a6:3b:f8:5f:5d:69:60:
bd:83:1a:91:9b:9e:0d:a8:0f:18:58:16:88:26:01:92:cb:fb:
bf:fb:12:d0:cf:37:a1:0a:86:01:d4:db:91:35:e6:f0:3a:a4:
aa:04:42:4d:82:ee:5f:3c:61:b4:91:95:27:ac:4d:6f:17:0d:
9e:75:2c:5c:c6:75:bc:e5:5f:4c:03:69:c1:10:44:af:47:d4:
5f:cf:9a:f5:36:c3:9c:77:3c:9a:56:8e:f0:54:ca:82:26:e4:
70:00:f6:80:c2:0f:9f:d0:69:fc:ed:e3:8d:32:43:30:64:29:
19:08:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:44 2025 by rpki-client