Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
File: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: tKnvOcGTVqsW/yS5Z2lvba/Xzg8OV2BXKtMn/U4SLRQ=
Subject key identifier: A3:3B:A0:D6:B1:28:06:31:53:E8:1A:36:A7:19:15:FA:97:CA:23:4B
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 18AB9CC607AC9026959ACD3AFE2D0E1222FD3D12
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
Signing time: Mon 17 Jun 2024 07:00:01 +0000
ROA not before: Mon 17 Jun 2024 06:55:01 +0000
ROA not after: Mon 16 Jun 2025 07:00:01 +0000
asID: 58369
IP address blocks: 103.188.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ab:9c:c6:07:ac:90:26:95:9a:cd:3a:fe:2d:0e:12:22:fd:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: Jun 17 06:55:01 2024 GMT
Not After : Jun 16 07:00:01 2025 GMT
Subject: CN=A33BA0D6B128063153E81A36A71915FA97CA234B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:94:b7:63:26:de:d5:e4:98:ab:98:0c:c0:
68:90:8e:7f:91:16:70:86:27:d3:26:71:6e:96:7d:
25:1d:02:ab:ed:44:31:f7:3c:4a:05:64:a3:cc:a1:
0a:7f:00:4f:18:35:f0:07:b8:04:62:f4:03:f0:8b:
61:49:ad:49:8c:3a:57:0f:79:96:a7:b2:bf:7b:22:
06:cb:74:ec:b2:c7:f1:8a:ee:f6:24:f6:6e:05:93:
ee:15:66:a7:84:f2:0d:f4:02:cc:92:3e:0f:80:8e:
9a:b5:97:47:9d:7d:6b:15:6f:3e:1c:e4:41:14:93:
97:08:92:f0:1b:e8:22:dc:35:5c:b2:30:31:f2:f6:
86:9c:bd:ee:35:7b:1c:78:59:c8:bc:5d:46:e9:a9:
f2:53:5d:9f:df:69:a8:e9:6b:35:e0:18:45:6d:7b:
f8:c9:e2:26:2c:59:40:8e:a8:05:7a:83:0f:47:73:
50:21:87:30:92:60:3b:61:ec:71:ed:51:d4:e9:d0:
46:55:04:3a:13:c9:bc:ef:f5:b7:8d:90:5b:6f:9a:
d7:ee:23:8d:55:86:62:b2:02:60:50:73:41:5c:e8:
2a:23:b2:c5:eb:7b:b3:fe:13:39:27:41:ae:91:18:
cb:ab:59:f5:f3:50:7f:b2:98:b5:7f:b1:ef:83:e4:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:A0:D6:B1:28:06:31:53:E8:1A:36:A7:19:15:FA:97:CA:23:4B
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cf:13:ff:c5:75:e6:16:c1:55:73:69:5a:a5:63:14:de:bd:
98:bb:41:71:7f:e8:3a:3e:3d:d1:a7:8c:8d:cb:33:48:e2:70:
d8:6c:2b:18:5e:26:82:f0:62:dc:33:a9:a7:d4:2f:83:38:de:
7f:d1:d1:d7:d7:9a:59:66:52:68:d0:62:d8:23:28:00:fe:b2:
83:09:a9:23:22:40:31:dd:58:29:b1:e4:3c:9d:80:aa:ef:84:
2f:1e:e5:e2:01:40:84:ab:ff:72:ca:ae:42:17:52:86:22:b5:
d3:94:a6:7a:f1:00:87:a2:1f:e3:93:4d:b8:dc:a5:96:0d:b6:
15:36:29:89:df:14:10:32:79:d1:61:c1:fe:ab:8d:67:ef:67:
8c:78:fe:9d:65:81:6f:04:ff:d3:c6:d7:b2:58:39:cc:fa:7b:
18:89:b6:47:c2:d0:69:2b:80:b9:a8:a5:ec:c3:96:6d:55:43:
df:34:a8:32:f1:3a:9c:1f:79:68:d0:0e:15:3f:05:cb:85:cd:
fd:b3:dd:14:11:15:75:03:17:9a:10:18:93:62:7c:62:3a:22:
3e:0c:4b:77:0e:a3:89:4e:7e:86:0c:43:7d:7f:87:bd:f4:7c:
ee:30:ae:d4:ce:2f:5e:a2:97:f1:da:18:0e:1c:c3:02:56:3a:
b4:a3:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:09 2025 by rpki-client