Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
File: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier: hDClbQDSswgVDEu/DPM7msozDc/R6vqroB52plI4h4s=
Subject key identifier: E5:9A:92:4A:6F:BF:CC:69:F6:C4:AA:BB:69:D5:5B:76:1A:BF:13:4D
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 7BCE8EEFAA977E8C735DBE0BF5B84D5E6550720C
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
Signing time: Wed 22 May 2024 10:02:22 +0000
ROA not before: Wed 22 May 2024 09:57:22 +0000
ROA not after: Wed 21 May 2025 10:02:22 +0000
asID: 58369
IP address blocks: 103.188.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ce:8e:ef:aa:97:7e:8c:73:5d:be:0b:f5:b8:4d:5e:65:50:72:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: May 22 09:57:22 2024 GMT
Not After : May 21 10:02:22 2025 GMT
Subject: CN=E59A924A6FBFCC69F6C4AABB69D55B761ABF134D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:8f:04:e2:c0:8a:0a:08:c3:90:90:2f:1d:
72:90:ef:c2:3a:ea:70:42:33:31:c6:80:21:7e:35:
03:e1:65:80:9d:17:7a:8e:6f:da:49:f0:fc:a5:ec:
bb:03:3b:2b:d0:6c:54:55:4b:42:f9:90:06:c9:35:
47:dc:83:9b:5a:2f:ed:78:02:43:68:0f:69:e1:76:
0b:e5:31:21:38:e5:d8:50:ae:f6:04:14:b6:fb:19:
61:a3:0f:fe:4a:db:f4:7b:5f:b6:d8:ba:05:e3:15:
d2:28:64:c5:67:96:f8:60:d4:76:ba:87:8f:bf:7a:
dc:58:c2:d4:5f:7d:4c:4d:d8:39:79:fc:4c:f6:00:
1e:55:8e:24:c5:45:03:23:dd:5f:b8:b2:b7:59:8b:
de:9c:38:37:63:20:7b:e8:97:c2:1d:9e:bc:f8:d7:
0b:18:a1:54:04:1e:19:6c:30:b9:e5:21:89:67:5c:
ef:59:b4:38:f6:20:82:d6:56:60:6e:8c:b4:09:7c:
a8:ab:30:4b:10:4a:9b:7d:e5:35:ab:ab:a1:6c:16:
6f:64:cc:da:b1:72:e6:8a:cf:63:b8:d7:d9:a5:fa:
e0:d1:e8:cc:7b:8d:19:71:5b:01:32:51:e8:e6:c7:
11:c8:18:f8:86:91:c6:9c:58:e2:ec:ef:02:61:6c:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9A:92:4A:6F:BF:CC:69:F6:C4:AA:BB:69:D5:5B:76:1A:BF:13:4D
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:68:25:3b:45:db:a8:af:ed:f8:12:fb:09:92:90:7c:22:68:
6f:ad:3f:f5:18:c7:15:88:a1:1f:93:f0:1e:a4:bd:56:84:4a:
da:fc:74:d0:82:66:8a:25:9f:18:3c:09:99:ed:58:53:41:8a:
66:9e:3a:fd:7e:ca:a7:07:42:e9:2e:2c:03:bd:20:a6:3c:b3:
cc:07:9a:b8:1d:32:16:0e:f5:98:eb:e7:e4:5f:85:99:81:8e:
f8:33:67:6c:a0:56:77:61:ae:27:9e:e6:e8:26:5f:c4:42:b8:
ae:fd:d8:1a:1f:ed:78:f2:f8:ab:2c:fe:6c:3a:9c:26:13:2f:
e2:78:c6:b8:e1:82:1b:42:5b:2f:dc:b0:b0:6a:e7:0a:de:30:
bc:e4:ab:23:a2:c7:25:86:53:52:c5:8d:bd:35:b3:be:f8:da:
c9:be:f5:ae:d1:81:55:ce:7e:59:03:d8:19:60:3e:22:6e:06:
8f:60:15:35:19:6c:4d:78:3c:70:f1:c4:b8:ab:0f:a9:08:ce:
fc:c7:38:b2:06:10:23:0f:17:87:57:93:06:e6:34:ef:e5:02:
a7:e5:35:2e:8b:04:db:b5:f6:8d:05:f5:b4:f8:4d:e0:ad:45:
ac:f5:6a:15:1e:e8:e7:55:d8:3f:64:32:f5:9f:43:e0:80:d2:
b5:7f:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:08 2025 by rpki-client