Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa
File: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (raw, json)
Hash identifier: V1cdbz2B4KnRWdpevX8pRA5Z1G9fpGPOBnApCOURAWY=
Subject key identifier: 6D:6F:A8:E9:BC:C7:1F:EC:37:E8:79:76:BA:FE:AC:6C:C0:ED:90:20
Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Certificate serial: 7425292D15B8342F205D19A245F04BEECF41DB1C
Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa
Signing time: Fri 13 Sep 2024 07:00:00 +0000
ROA not before: Fri 13 Sep 2024 06:55:00 +0000
ROA not after: Fri 12 Sep 2025 07:00:00 +0000
asID: 139941
IP address blocks: 103.146.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:25:29:2d:15:b8:34:2f:20:5d:19:a2:45:f0:4b:ee:cf:41:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Validity
Not Before: Sep 13 06:55:00 2024 GMT
Not After : Sep 12 07:00:00 2025 GMT
Subject: CN=6D6FA8E9BCC71FEC37E87976BAFEAC6CC0ED9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:b9:2f:85:2a:f0:07:97:5c:c2:d2:1b:72:
81:7c:d2:07:32:7b:bf:69:c6:d9:be:76:4e:62:58:
ae:9b:de:b5:e0:f7:65:83:48:0c:69:78:93:97:ad:
8c:98:40:9a:17:79:23:89:cd:87:7e:a7:4e:2c:d0:
05:9c:4e:80:5c:00:3d:21:a0:05:15:b1:32:01:97:
dc:ac:26:34:a8:b2:38:f0:6c:ba:aa:e9:6a:3f:54:
8a:1d:81:65:bb:4e:6a:9a:77:c2:01:c7:44:d0:7f:
05:bc:20:6a:4c:e1:ec:46:f0:d6:f3:06:db:1f:8e:
89:8a:fa:df:f3:64:e8:18:8d:db:12:a4:98:6f:30:
ad:5c:20:28:da:a6:c8:6e:bb:41:9f:a0:94:1f:8c:
43:6f:8a:b3:34:33:2f:e4:23:6d:56:72:36:40:94:
89:a7:76:e0:28:4a:3a:34:f9:48:2c:1f:8e:c2:47:
31:a9:74:d2:0a:12:13:5c:18:bf:2e:f2:a7:53:45:
0d:3b:b6:53:23:bd:f9:b4:b1:19:d2:a1:ac:52:4e:
2e:a6:7f:80:2b:4f:70:55:3b:ef:0b:3d:58:3a:2e:
12:ac:5e:4b:1b:50:17:c0:2b:38:95:c8:11:9c:52:
b1:13:d6:72:f2:43:3a:9b:25:6c:56:41:70:0f:3d:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:A8:E9:BC:C7:1F:EC:37:E8:79:76:BA:FE:AC:6C:C0:ED:90:20
X509v3 Authority Key Identifier:
keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0b:90:3b:db:01:eb:ba:3e:fc:35:15:31:03:c8:bb:03:e0:
a6:ca:b6:c4:d0:c2:69:eb:bf:b7:de:f1:ec:e8:9f:44:66:6f:
76:29:6e:1d:63:a2:7f:28:b1:99:95:76:00:f3:83:69:2e:0c:
ab:7f:70:19:2a:40:ec:9c:37:5e:e6:33:85:19:d8:3b:89:24:
d0:ef:b4:a5:f0:d9:85:5f:b7:aa:93:3c:98:fa:ba:8e:52:e6:
b0:e8:09:2d:2c:7f:1a:69:cc:15:9a:62:42:5a:17:e0:37:11:
a4:7b:54:50:01:59:93:2b:ff:a7:8b:99:f8:bf:17:de:3c:6b:
73:bf:63:70:e3:b9:2d:ff:e0:4a:ee:e5:d9:15:33:2a:48:c8:
c7:3f:30:9f:e2:0c:da:52:35:e2:ed:56:fb:3f:cd:34:e1:43:
37:3c:2d:1f:f5:25:86:93:0a:71:83:06:2f:5d:66:6e:1b:64:
b1:85:a2:fe:a6:0f:94:6c:f8:55:c1:51:42:da:d9:25:69:a3:
54:cd:4e:df:af:81:59:4a:7b:b0:38:60:1c:70:c6:3f:21:af:
0d:c2:a9:e1:40:ff:c2:5e:a7:5f:63:86:2a:cb:e7:e8:d6:4a:
5a:49:32:e4:9c:9a:56:9f:a8:7c:b9:f6:40:f8:93:43:02:4c:
00:94:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:44 2025 by rpki-client