Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
File: 3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (raw, json)
Hash identifier: FGwbd9tIyRJHyRLZhA3WCejnwIFVTTW/Zh4pthqgOTY=
Subject key identifier: 06:5E:65:AE:61:9F:57:D1:5E:A6:74:10:70:BE:77:35:44:CC:49:3E
Certificate issuer: /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial: 7D61D79DCA444DB210922E1EBB52CE92F7B0263A
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
Signing time: Wed 11 Dec 2024 04:00:01 +0000
ROA not before: Wed 11 Dec 2024 03:55:01 +0000
ROA not after: Wed 10 Dec 2025 04:00:01 +0000
asID: 141657
IP address blocks: 103.161.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:61:d7:9d:ca:44:4d:b2:10:92:2e:1e:bb:52:ce:92:f7:b0:26:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Validity
Not Before: Dec 11 03:55:01 2024 GMT
Not After : Dec 10 04:00:01 2025 GMT
Subject: CN=065E65AE619F57D15EA6741070BE773544CC493E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:ac:41:9c:60:1f:72:c4:bc:d5:ed:6b:3f:
54:9f:c0:e4:79:5a:a0:63:ba:b4:34:a2:bc:81:01:
f9:41:3e:a4:fc:04:d4:10:e7:c7:da:d2:c2:80:c1:
5b:ad:ce:40:dc:cb:10:a6:9e:46:69:22:1f:73:b1:
61:db:74:71:48:34:32:8d:cd:1b:46:d3:03:dc:c2:
7e:55:a3:cb:dc:52:23:d5:22:f7:cd:c3:dc:f1:a6:
eb:6a:03:6c:9d:ec:a9:d5:1d:bc:7f:19:a7:fe:44:
6e:68:69:78:d9:8c:4d:30:52:6d:9e:89:35:38:08:
c9:95:cc:77:94:81:50:4a:d7:0a:32:0f:5b:6f:be:
94:69:f9:20:cd:28:7b:da:1a:ac:0a:43:9d:04:d0:
ee:c1:2e:d7:40:80:cd:01:89:6c:cc:01:4c:c8:7e:
91:d3:4c:0a:5d:64:93:82:05:9a:99:fb:f3:2d:51:
b8:a3:4c:13:14:5d:57:15:0c:1f:0b:95:1d:e6:18:
4e:f8:b1:73:79:53:a2:96:8e:88:0b:06:a8:2b:dc:
7a:0a:f9:83:9c:6d:a8:55:4a:98:a3:04:50:c8:4f:
ac:4b:f5:13:c0:9f:8c:61:f9:a2:1e:42:f0:88:9b:
5b:2a:ef:18:a4:e7:f0:c3:5b:a4:6b:5e:5c:43:9c:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:65:AE:61:9F:57:D1:5E:A6:74:10:70:BE:77:35:44:CC:49:3E
X509v3 Authority Key Identifier:
keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:2f:46:5b:7b:50:fb:56:5a:d3:cb:f1:f6:57:54:e6:ee:
28:53:6d:4c:d6:51:1e:f7:4d:5f:ce:e9:90:f9:68:4c:5d:f5:
d0:f9:f2:e4:42:96:70:08:fc:67:5a:bb:87:8f:6d:15:fb:1b:
4e:fa:97:5f:75:49:4d:d4:5f:02:e1:17:bb:20:d3:af:ca:87:
85:1e:30:ef:fb:6a:84:44:02:01:8d:fd:77:f2:be:e8:83:62:
27:47:fa:ee:84:ed:da:d5:47:15:33:54:32:e8:14:6b:63:7c:
ef:73:de:99:3e:fb:d3:1a:72:79:56:7c:cf:5c:05:b3:25:57:
02:eb:ce:ea:07:5c:a9:27:60:25:d8:66:5e:72:c3:53:85:5c:
26:7b:d2:a3:04:90:8d:d4:f1:a5:b4:fa:20:50:c3:7e:5e:83:
2b:b1:e9:81:97:bd:88:0c:02:2c:a3:d4:2b:82:38:0e:67:fb:
f0:fe:e3:44:e3:05:07:6b:35:eb:27:0a:c3:5b:8b:71:aa:34:
2f:b9:5f:39:19:ca:c5:89:b9:ca:55:60:0e:b2:4c:9c:4a:f2:
8c:7e:a1:f9:c0:5a:2d:88:9f:0e:aa:77:53:c1:6a:b2:29:b6:
ab:cb:f3:7b:99:88:8c:7c:20:30:75:8b:d4:f3:ce:81:eb:d5:
1c:78:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:31 2025 by rpki-client