Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
File: 3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: nmvQwofPaVpB9qgokk7jMkkLyMYbaNxgr2yvSpIbRe4=
Subject key identifier: 2F:7D:69:12:77:2D:C1:E8:14:9E:CC:3B:B4:29:A4:97:62:A4:6D:CB
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 38F4E0B9F5801F098C19AD1579F18AA82815DBE8
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
Signing time: Thu 23 May 2024 01:00:01 +0000
ROA not before: Thu 23 May 2024 00:55:01 +0000
ROA not after: Thu 22 May 2025 01:00:01 +0000
asID: 9341
IP address blocks: 103.206.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f4:e0:b9:f5:80:1f:09:8c:19:ad:15:79:f1:8a:a8:28:15:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: May 23 00:55:01 2024 GMT
Not After : May 22 01:00:01 2025 GMT
Subject: CN=2F7D6912772DC1E8149ECC3BB429A49762A46DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:2a:c2:fd:5c:75:8c:c4:9b:93:83:8c:85:
37:24:21:2b:4c:e1:4c:6f:e7:38:0e:64:94:64:29:
ad:f2:3e:19:e8:a1:f6:ba:59:67:b7:0f:6e:53:12:
36:3f:be:72:89:bf:82:c5:d6:56:86:9a:9b:94:b7:
02:b7:9b:da:5b:aa:6b:9b:6b:1c:4c:29:dd:77:c6:
db:01:d8:7d:66:9b:99:a0:8e:68:62:aa:92:80:78:
0c:4e:56:57:5c:1a:ec:2d:c1:dc:90:12:40:ac:6a:
3c:b9:71:70:45:41:70:55:62:cd:69:38:97:ac:92:
3e:36:2d:34:8e:7b:b4:89:f9:47:79:af:d3:8e:b1:
e5:01:30:e0:5c:6b:46:b2:45:db:45:29:14:e2:ca:
fd:f6:a0:99:4a:ab:cf:06:4a:bf:52:b5:6c:d2:94:
1f:b7:df:5f:bd:8e:6e:d7:ba:9b:c0:11:74:e9:c9:
76:52:a2:00:f3:61:19:c1:4d:44:a5:c9:65:ae:44:
01:fc:6b:bc:69:ab:30:79:27:5c:80:5b:04:43:2f:
c0:5a:9c:e4:1b:e5:9a:fb:75:f4:a2:ee:18:fb:8a:
f0:1d:52:b5:12:8a:96:65:1e:06:9b:1c:fd:58:50:
72:0e:4e:a3:db:f2:1b:df:42:79:59:4d:27:43:41:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:69:12:77:2D:C1:E8:14:9E:CC:3B:B4:29:A4:97:62:A4:6D:CB
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.206.240.0/22
Signature Algorithm: sha256WithRSAEncryption
29:d8:a5:8a:7f:32:56:b0:30:1f:7d:cb:16:35:8e:ed:e8:5f:
4f:09:4b:13:fd:b7:c0:1f:6a:23:54:2b:d5:0e:b9:22:0d:3b:
73:a8:cb:ca:de:16:46:ed:f9:5a:98:2a:d3:4d:f1:56:c3:01:
dc:d5:af:02:50:b4:79:11:16:88:6d:b6:d3:4a:cf:7a:a6:5b:
9a:e0:a5:ee:f9:24:5e:5e:4f:87:ea:9a:2a:ba:84:d4:80:6d:
29:0c:9c:e0:9e:21:9a:2a:8d:0e:4c:aa:b0:4d:68:d0:af:2d:
1a:ec:92:83:39:0b:29:cc:83:10:01:6c:77:9a:81:4a:91:ae:
22:df:16:02:89:58:3d:c6:45:53:53:79:8a:b9:b5:c9:bb:b9:
0e:6d:4c:8b:cf:cc:30:32:88:e3:fd:54:d4:a3:c9:88:6a:cc:
7d:c0:bf:61:d7:7e:f7:d9:91:8e:c3:47:37:f4:35:c0:10:30:
37:18:01:22:cb:75:59:b0:24:b0:fa:6d:22:ab:9c:bf:68:f5:
3e:fa:8c:65:13:c6:f2:63:ca:ba:a2:a9:c4:8b:5d:24:cb:7f:
b1:3c:92:00:04:2e:79:15:88:91:8d:1d:b2:c1:e8:56:26:51:
6f:cb:70:60:64:78:e6:d4:ea:ee:22:2e:64:08:ad:70:02:a6:
7e:b3:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:29 2025 by rpki-client