Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa
File: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier: E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=
Subject key identifier: 94:FF:2E:34:35:17:83:F5:2B:A7:29:49:34:77:FE:A5:FF:74:2B:77
Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
Certificate serial: 7B66565B398902F77EDA030A4063BB67DD6E2D4D
Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa
Signing time: Fri 02 Aug 2024 11:02:27 +0000
ROA not before: Fri 02 Aug 2024 10:57:27 +0000
ROA not after: Fri 01 Aug 2025 11:02:27 +0000
asID: 141107
IP address blocks: 103.220.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:66:56:5b:39:89:02:f7:7e:da:03:0a:40:63:bb:67:dd:6e:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
Validity
Not Before: Aug 2 10:57:27 2024 GMT
Not After : Aug 1 11:02:27 2025 GMT
Subject: CN=94FF2E34351783F52BA729493477FEA5FF742B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:5d:bb:98:49:72:26:9b:23:73:ae:61:b3:
cd:b2:de:bc:0c:b8:9f:79:7b:48:eb:e9:e1:c0:8e:
16:70:ef:f8:75:72:15:94:99:f5:0d:f7:53:b7:7e:
d5:69:39:2d:a9:be:41:f9:b5:be:c4:8a:91:5b:0c:
c8:fe:05:a2:2e:e1:9f:db:a3:f1:a2:30:32:fd:11:
fd:b4:48:e3:4c:aa:34:a1:3d:33:2a:3a:39:d1:3a:
81:09:e0:a8:81:6f:b0:ef:db:e0:f8:e2:33:33:5b:
bf:03:b3:f1:ed:a2:32:54:30:01:1d:20:bc:b0:04:
c3:27:41:f6:02:b2:ed:e6:49:95:57:07:3a:89:0c:
f8:e9:52:94:b5:60:e1:01:5d:64:3d:f2:2b:07:11:
6f:ec:54:5a:13:19:bd:f5:0a:0a:dc:b2:e4:b4:d4:
ca:a0:f9:05:58:59:cc:4d:c8:31:81:ae:71:23:f9:
5c:a8:c9:45:1f:1f:cc:fd:13:97:c6:d5:5c:3c:55:
83:90:6c:50:fb:0b:0f:4b:ae:05:79:ea:3a:aa:a6:
db:a5:0f:ad:92:52:83:fa:cb:e6:8a:03:e1:32:88:
b4:6d:1b:50:23:dd:35:08:ad:c9:cc:be:d0:93:82:
9f:86:c5:1b:48:79:86:4b:39:07:88:c0:dc:1b:15:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:2E:34:35:17:83:F5:2B:A7:29:49:34:77:FE:A5:FF:74:2B:77
X509v3 Authority Key Identifier:
keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ab:08:ea:69:3a:e4:35:cc:81:d1:5a:f7:fc:f1:41:df:be:
74:18:30:f0:8e:18:a9:92:ba:86:91:fb:5b:d4:77:dc:6b:6f:
d4:58:37:7c:c4:93:83:fc:ea:fe:cb:32:95:09:22:2f:1f:43:
7b:a6:b6:34:7c:77:b6:b4:15:88:e2:1e:f2:49:d7:8b:ef:87:
ca:06:4b:ee:c8:77:6f:7b:19:78:6d:d6:d0:7c:e9:64:a8:34:
bd:e3:5c:74:81:5e:6c:dd:4d:9e:ab:c4:b7:15:47:74:24:7e:
06:cd:da:d7:c6:02:fc:12:6d:a5:69:3a:c8:1c:8b:6c:e1:06:
49:a5:84:f4:cd:9c:c5:2e:01:0f:5e:43:ea:10:4d:75:57:f3:
15:20:f4:38:7f:eb:90:50:63:cc:78:f0:b2:c2:80:96:a3:d0:
1a:c2:7b:8d:66:18:6d:25:f7:c4:18:f2:4f:ac:e3:0e:b6:a6:
51:9b:fb:f3:9e:80:e9:44:b6:c3:6b:20:53:44:1c:64:22:22:
b4:d7:02:d5:71:23:93:51:e8:70:ea:a8:02:09:e7:97:b2:d0:
bf:08:94:09:62:29:c1:5f:0d:ca:07:4f:4c:79:d2:2b:02:07:
77:fd:b6:e0:93:74:de:44:88:c3:64:df:39:96:a9:35:64:8a:
ca:e0:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:41 2025 by rpki-client