Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa
File: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (raw, json)
Hash identifier: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=
Subject key identifier: 76:02:60:CA:33:01:D1:C9:C1:44:13:7C:F6:60:EF:1A:F0:8E:CD:F1
Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047
Certificate serial: 6172FF2C70B42788B4D5B8C74914493C148E20A1
Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa
Signing time: Thu 16 Jan 2025 17:00:00 +0000
ROA not before: Thu 16 Jan 2025 16:55:00 +0000
ROA not after: Thu 15 Jan 2026 17:00:00 +0000
asID: 141612
IP address blocks: 103.161.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:72:ff:2c:70:b4:27:88:b4:d5:b8:c7:49:14:49:3c:14:8e:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047
Validity
Not Before: Jan 16 16:55:00 2025 GMT
Not After : Jan 15 17:00:00 2026 GMT
Subject: CN=760260CA3301D1C9C144137CF660EF1AF08ECDF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:5c:e9:fc:0e:5a:b7:49:cb:44:04:62:e8:
a1:ec:7a:18:b4:a1:03:96:79:08:7b:4d:c0:8a:f0:
89:17:bb:2f:3d:2c:36:c8:8e:95:e0:55:8d:85:1c:
a9:86:d8:3f:f6:b3:7b:8b:06:70:82:93:e8:f7:c0:
19:b0:d8:10:cc:01:c5:08:68:c0:64:b2:35:93:05:
f6:ef:29:ae:85:1d:31:95:1d:48:97:8c:8a:6a:15:
84:6c:df:f0:0b:5f:c4:dd:f5:19:70:65:9c:3e:01:
e5:35:df:5d:0d:84:0a:32:2d:70:30:0d:63:3b:a1:
2d:ce:01:18:2b:4b:18:4b:2d:7a:68:03:6a:c3:73:
ae:8a:ad:90:b9:03:43:0b:48:70:79:46:4c:ff:9a:
e6:3d:d1:87:5d:2c:a3:c9:92:8c:3b:31:0d:7b:90:
6f:a1:44:22:d8:00:e3:73:f8:4a:14:8b:c7:3a:c7:
1c:95:37:03:a0:3c:df:a4:67:6f:2e:ce:97:44:1f:
fe:78:78:2f:e4:d6:59:86:9d:f8:e8:b2:9b:80:7a:
4c:ff:5c:68:68:3d:a0:a9:d3:b9:51:89:64:de:d9:
cc:b2:b0:bb:c6:13:2f:d1:4e:59:21:02:9e:29:37:
20:6c:52:3b:57:e5:66:2f:c9:3d:83:6d:6e:fa:c1:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:60:CA:33:01:D1:C9:C1:44:13:7C:F6:60:EF:1A:F0:8E:CD:F1
X509v3 Authority Key Identifier:
keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.114.0/23
Signature Algorithm: sha256WithRSAEncryption
87:60:98:94:01:b1:ca:cc:37:a2:d5:5d:df:e1:01:8e:f9:53:
dc:1d:5b:c7:81:0a:7e:0d:1a:94:87:13:7a:04:5a:2c:51:70:
03:47:58:af:c4:1d:09:46:b0:06:53:d1:bd:71:7d:ee:a6:ec:
2b:b2:6c:75:62:a6:7d:b1:44:43:d9:ca:d1:73:73:48:4b:e6:
6c:10:1e:7e:72:45:dc:19:b5:d6:43:18:7b:70:f8:7a:96:bc:
0d:01:a2:8e:0e:75:8d:6e:fc:d0:9c:c9:69:90:84:07:70:c2:
9b:73:51:4c:eb:58:61:0f:ed:14:b2:32:92:03:f9:32:3e:70:
8c:6a:5f:83:ef:17:1e:b2:dc:5a:5f:54:20:9a:0d:26:45:c4:
d9:e9:f6:57:4d:0f:27:b2:c1:5e:46:3c:a1:93:9f:05:8c:de:
0b:2f:7e:d9:60:02:53:63:f7:ea:df:b8:a5:04:82:30:cd:2f:
62:a5:a5:66:47:99:70:c8:36:1d:9c:50:ef:a8:1e:27:95:a2:
8d:6d:07:55:6d:af:81:39:5d:0c:5d:ed:83:76:62:9a:d3:a3:
63:f0:36:6b:c3:42:6c:09:e1:71:41:86:a3:6c:4d:b6:87:71:
9f:82:27:ee:6b:96:3f:82:8c:3c:e8:7c:1f:4d:a8:e7:e1:d3:
10:42:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:08 2025 by rpki-client