Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
File: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (raw, json)
Hash identifier: 8g3xpmivFCkMM+35rK/Ufc/dzyXuCsYY9zwLfPimwco=
Subject key identifier: F7:6D:14:B9:5D:39:73:90:89:B5:C5:04:67:D2:DB:2E:DC:1F:0C:11
Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727
Certificate serial: 6AB740CE7B77AF6DB4DDC5B6C147F14DF897C5F1
Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
Signing time: Wed 10 Jul 2024 07:04:41 +0000
ROA not before: Wed 10 Jul 2024 06:59:41 +0000
ROA not after: Wed 09 Jul 2025 07:04:41 +0000
asID: 152058
IP address blocks: 103.46.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b7:40:ce:7b:77:af:6d:b4:dd:c5:b6:c1:47:f1:4d:f8:97:c5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727
Validity
Not Before: Jul 10 06:59:41 2024 GMT
Not After : Jul 9 07:04:41 2025 GMT
Subject: CN=F76D14B95D39739089B5C50467D2DB2EDC1F0C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:c1:21:a9:c9:a3:92:10:46:78:a9:ff:34:
35:d6:1e:1f:db:98:26:13:3e:1e:91:35:60:5b:15:
ab:c1:af:85:4e:8a:96:f0:bc:10:23:00:76:d8:78:
3d:ed:fc:e1:36:88:e5:8a:5f:f4:6a:72:a3:15:c9:
19:dc:99:88:67:b2:1b:41:71:df:e2:5e:2b:ba:86:
36:d2:c8:a7:b8:89:5e:16:cc:00:54:59:39:43:79:
9f:c8:2b:06:47:7c:d0:ea:2a:a6:ee:97:91:18:df:
58:76:5b:0b:13:46:57:3d:4e:49:96:7d:b8:02:2b:
7c:31:ac:d6:6f:ac:cc:a4:0e:3e:9e:ac:06:2c:72:
c3:a8:4c:ed:0b:88:5a:5f:ab:d7:f6:8b:c1:dc:89:
a9:14:8e:15:2f:7a:fd:f0:9a:c9:89:44:d7:62:29:
a2:9b:0b:d7:6a:64:3f:0c:34:9a:57:cf:40:23:ad:
c9:e3:4c:8c:c5:52:91:d6:4b:14:cf:1a:f4:eb:1c:
cd:f2:b5:b9:5d:f4:8c:19:dd:9f:9f:ef:52:eb:c5:
fe:08:8a:a2:7d:f1:f0:32:e4:5a:b2:fc:61:8f:be:
17:12:cd:86:0f:a8:a6:f4:95:c9:8d:64:f9:c8:40:
be:5d:bb:3b:21:fc:a5:56:d9:84:65:9a:2e:8b:88:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:14:B9:5D:39:73:90:89:B5:C5:04:67:D2:DB:2E:DC:1F:0C:11
X509v3 Authority Key Identifier:
keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.46.8.0/23
Signature Algorithm: sha256WithRSAEncryption
30:a5:9e:aa:9e:47:93:eb:c1:da:46:06:d0:8a:b4:14:5b:9d:
ae:0f:c7:6d:30:d9:c7:17:cc:81:b0:e1:08:51:aa:e2:4b:c2:
07:6f:16:2f:02:ee:72:f7:f1:7d:3e:f6:00:a9:30:7c:39:31:
fe:54:65:13:81:06:1d:58:8d:6d:20:9d:88:07:0f:85:ed:18:
95:fe:62:13:a7:89:f8:47:ce:61:a1:e8:e4:da:57:78:7d:20:
83:e8:06:d9:11:56:98:c5:25:2e:6d:52:ec:df:59:ce:a2:fd:
a5:f1:ae:e0:97:34:9b:d6:99:c9:10:9e:71:0f:2c:a7:12:fa:
5a:5c:44:92:bb:53:51:2f:e7:e6:2e:9c:0f:2e:8b:9e:a7:d8:
78:15:ac:64:76:ad:08:6b:52:77:ef:4c:61:17:ff:ba:f4:e8:
a0:30:52:5f:89:a6:61:28:94:20:4c:e5:83:8d:aa:29:79:43:
b3:17:9c:4b:4f:8b:35:2b:11:d4:d6:fe:ec:85:32:22:ec:42:
9c:fc:29:87:45:a0:8d:ec:5d:3f:56:5b:39:81:9a:7b:49:11:
a5:e0:0f:3e:1b:b5:a0:b8:de:04:04:7d:a6:e9:bb:a7:50:39:
71:82:2f:57:50:04:11:e5:2b:79:8f:f3:05:0e:64:dc:9c:84:
23:48:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:48:33 2025 by rpki-client