Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
File: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (raw, json)
Hash identifier: 7/FOTR+Rqt1leDK8dBKstHSCymrmqo5dgA2OK8mRPQw=
Subject key identifier: 1F:A5:87:5E:5E:7B:19:9F:6D:F7:98:20:E1:04:04:3D:A7:1E:C4:1C
Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial: 01E1EB0CD015821F83B38D5865EF8AF20DA92971
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
Signing time: Mon 09 Dec 2024 09:00:00 +0000
ROA not before: Mon 09 Dec 2024 08:55:00 +0000
ROA not after: Mon 08 Dec 2025 09:00:00 +0000
asID: 45287
IP address blocks: 103.31.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e1:eb:0c:d0:15:82:1f:83:b3:8d:58:65:ef:8a:f2:0d:a9:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Validity
Not Before: Dec 9 08:55:00 2024 GMT
Not After : Dec 8 09:00:00 2025 GMT
Subject: CN=1FA5875E5E7B199F6DF79820E104043DA71EC41C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:04:92:e1:97:ff:ae:64:2b:e9:0e:38:7a:
b3:0c:11:70:b5:a3:7f:ff:c5:ff:1f:e6:bb:c7:6d:
a0:36:ef:c3:a0:c1:08:29:fb:d9:12:32:b8:81:eb:
90:26:7e:b6:bb:76:40:61:54:92:3c:7e:b1:a1:b3:
c5:15:d1:71:00:96:07:ee:a5:b4:7a:3b:79:bd:81:
ff:2a:25:24:46:56:2c:cb:19:5f:1b:74:15:2e:45:
f7:03:19:3e:f3:db:f4:68:3f:93:1d:12:6e:5e:6a:
37:e0:fc:cd:a0:3d:58:84:f0:d7:27:e7:17:26:59:
c4:c0:06:4c:d1:86:42:54:9e:3c:e6:64:a8:7e:2d:
98:22:d0:42:4d:fa:e3:d8:1e:3e:93:bc:8f:1a:44:
21:ee:26:3e:be:fe:e5:72:bd:1f:be:f0:3a:3d:b6:
e1:6e:0a:38:ee:ac:ce:9d:35:68:3b:b3:19:fd:5e:
bb:14:a1:a3:db:11:7d:f4:d2:0d:59:61:80:eb:85:
43:36:ba:cb:8a:1e:9d:5b:01:4e:85:75:69:96:ec:
ac:ec:d6:09:41:82:f1:84:9f:3b:fd:01:20:ac:75:
ef:24:1c:c6:eb:6d:1c:a9:e4:98:aa:ac:cc:41:0f:
34:bc:a5:db:8e:8c:f5:5a:19:72:fe:cb:d5:b0:36:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:87:5E:5E:7B:19:9F:6D:F7:98:20:E1:04:04:3D:A7:1E:C4:1C
X509v3 Authority Key Identifier:
keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:17:79:f0:bf:76:0d:bb:3e:0c:df:a6:0f:4d:c5:0f:0c:51:
ef:c3:32:b6:f8:82:3b:2c:64:09:ce:e7:d8:9c:10:db:52:d4:
34:46:5e:fa:48:df:c3:ae:2a:63:2b:89:be:18:7f:95:59:b7:
6e:0e:54:8d:79:7e:83:87:73:8f:10:ed:be:60:f0:5a:af:51:
3b:de:31:77:a6:24:d8:d0:66:87:9b:5e:5d:3e:83:ce:39:9a:
41:1d:1b:0e:81:ac:e9:59:86:37:f9:de:46:f5:b9:98:3a:43:
27:e1:a1:7d:95:6d:1a:6b:48:fa:df:55:3a:4d:30:71:0f:1f:
2b:87:49:f3:2c:61:99:b8:b9:9e:49:7f:34:f8:a9:86:29:78:
0d:13:ff:12:f1:40:a3:36:f1:26:3d:ad:90:69:a8:69:9e:6b:
b4:54:5f:b6:97:39:6c:b7:31:ba:11:f7:e6:55:15:2c:11:c5:
09:4d:cf:18:4b:0e:44:02:93:45:c2:bb:ff:e6:f8:95:de:2f:
11:81:85:d6:b1:37:4d:ed:35:5e:cd:68:a7:81:8d:70:35:fe:
86:1f:e4:78:d6:c4:42:ee:9e:72:2e:d7:dd:2f:19:75:ba:92:
3e:fa:bf:a6:b3:4b:c0:a2:1b:3a:67:ec:79:9d:7b:44:2a:95:
cd:2e:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:41 2025 by rpki-client