Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
File: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: u5JVGQmxvj3SJ9WytNZrx/nb4K6p/OHUxMnvwFFfbV0=
Subject key identifier: 16:DC:D6:F8:14:10:B4:A1:FE:84:BF:16:F2:12:46:BB:B5:8B:14:5F
Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial: 3F9271D3949BBF32B042C88222D7B5EB002D4714
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
Signing time: Tue 09 Jul 2024 18:00:01 +0000
ROA not before: Tue 09 Jul 2024 17:55:01 +0000
ROA not after: Tue 08 Jul 2025 18:00:01 +0000
asID: 23679
IP address blocks: 103.238.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:92:71:d3:94:9b:bf:32:b0:42:c8:82:22:d7:b5:eb:00:2d:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Validity
Not Before: Jul 9 17:55:01 2024 GMT
Not After : Jul 8 18:00:01 2025 GMT
Subject: CN=16DCD6F81410B4A1FE84BF16F21246BBB58B145F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:c5:3c:5d:7f:5f:5b:04:e8:ef:c0:27:97:
e1:08:b5:b4:30:85:27:cb:49:aa:24:db:1f:c2:e9:
b3:82:12:e4:e7:3f:6e:37:0f:7d:16:47:5f:02:f6:
f1:95:ad:02:3c:93:0f:cc:7c:e3:11:31:c2:11:e3:
a5:23:b6:76:6b:7d:a7:55:7e:6e:34:cb:b5:81:f4:
00:c4:a6:7d:76:98:bd:8b:00:a6:72:82:8f:3f:c8:
82:f2:e1:19:40:31:35:dd:49:4d:10:e5:85:6c:58:
1a:4e:27:2f:a0:0e:ab:93:db:89:c5:63:2e:6f:7f:
b9:83:30:f9:cb:4c:c2:49:45:4c:77:a8:66:36:14:
ba:b8:e7:74:cd:0f:ce:c5:7c:71:c9:ce:a2:ef:0f:
e7:c5:1e:00:2e:63:8a:da:97:a6:9f:4d:c2:49:36:
ee:e8:8d:6a:55:18:40:13:1a:51:7d:fa:73:50:73:
a9:fd:93:1c:fd:92:6c:cc:2a:2b:30:2f:08:a2:dc:
d3:8b:04:de:ff:30:5f:05:84:e5:f1:c3:70:39:ad:
09:ab:ce:f3:c9:47:72:a4:3a:71:c1:f1:03:73:39:
ed:bf:ce:e4:ca:21:f9:6b:c7:44:fd:72:ac:89:9e:
9c:e0:f3:ca:51:76:86:5a:4b:16:74:b9:48:63:ae:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:D6:F8:14:10:B4:A1:FE:84:BF:16:F2:12:46:BB:B5:8B:14:5F
X509v3 Authority Key Identifier:
keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:39:4f:cd:0f:e7:a4:24:66:44:02:11:85:bd:19:f5:b9:e9:
55:7f:11:7d:78:88:8a:73:6b:3e:ba:3f:15:78:d7:95:fb:da:
7f:03:47:eb:9e:e4:4f:01:45:a0:29:63:a7:ad:11:f0:05:b2:
88:62:59:eb:df:09:4a:7b:e1:5c:f5:d2:8c:2a:da:7d:53:fa:
ac:45:c7:40:01:a1:04:78:58:d2:1a:d7:78:f6:04:35:80:74:
e8:c0:f1:1f:20:06:5d:93:25:70:65:07:41:74:78:77:a4:9f:
c5:e4:24:7d:19:62:d2:c4:1d:9f:ef:72:a9:5b:57:45:7f:f6:
23:c2:bc:89:19:b7:85:21:a1:49:07:df:ff:56:35:5d:04:bf:
d6:3c:4e:67:5a:ce:e1:07:ae:8f:35:20:d6:a3:39:e6:92:5a:
b3:c9:13:57:ae:e1:1d:51:b2:d9:5b:3b:b7:8f:7d:68:63:ad:
48:1b:29:36:e8:51:27:8b:ec:f1:df:61:55:9d:83:0b:a4:7c:
ce:54:cf:31:b7:7d:f0:ef:f7:8f:d9:86:66:b0:0a:5e:c2:d1:
dc:e6:72:a6:fc:7a:55:14:d2:a5:cf:3d:d4:da:27:9e:15:1d:
4d:6f:28:5f:62:41:ac:1c:36:be:f8:6f:39:a6:4e:95:58:cc:
05:79:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:17 2025 by rpki-client