Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa
File: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (raw, json)
Hash identifier: 9Q99Kg7kcs5TlK0zDsAJUsyJe4V4AmWVrmwNiBBnVIg=
Subject key identifier: 70:7B:5E:7B:5C:0B:EA:25:C6:74:D8:40:0B:A7:E0:38:DA:11:81:52
Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial: 1628937C21541355DD819F1996A631E94AD8CC3D
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa
Signing time: Sat 07 Sep 2024 04:00:02 +0000
ROA not before: Sat 07 Sep 2024 03:55:02 +0000
ROA not after: Sat 06 Sep 2025 04:00:02 +0000
asID: 138080
IP address blocks: 103.131.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:28:93:7c:21:54:13:55:dd:81:9f:19:96:a6:31:e9:4a:d8:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Validity
Not Before: Sep 7 03:55:02 2024 GMT
Not After : Sep 6 04:00:02 2025 GMT
Subject: CN=707B5E7B5C0BEA25C674D8400BA7E038DA118152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:d9:e5:aa:5c:ab:0b:66:94:d8:56:f5:2c:
93:88:55:b0:22:07:ff:ad:cb:f7:4c:43:08:bf:5a:
71:1c:26:d1:2d:0b:a0:95:72:ff:57:24:37:db:15:
32:b3:0e:63:c4:e3:fd:df:38:2e:fe:3c:c3:9d:6a:
29:13:49:84:dc:5b:b9:31:18:9c:81:9a:87:89:3b:
04:d9:57:56:a3:b5:99:f4:70:d4:ac:ca:46:e8:a0:
a1:27:8f:93:d3:37:47:b2:01:af:62:5f:bf:2e:71:
6f:7c:a7:09:6e:f4:40:2e:6b:ea:30:77:f8:72:66:
1f:fa:36:28:ea:35:1f:ac:f3:41:81:5b:90:d8:81:
94:a3:4c:10:aa:a5:d9:85:f6:73:de:e4:cb:09:31:
aa:e1:c3:25:58:dd:b1:67:da:9e:e6:71:d1:3d:36:
d9:07:f8:04:6a:5d:a2:ed:51:b6:36:6e:d0:f7:7a:
76:c0:04:f8:44:3e:36:04:51:44:83:f2:03:2e:b9:
93:73:5a:43:15:a7:f3:86:02:eb:72:15:0f:e7:e9:
a3:96:57:f8:e6:0e:93:93:81:80:71:21:b4:80:c8:
1e:f1:eb:c9:ff:a7:24:f6:ca:1c:af:95:db:a7:5a:
53:bb:fb:7f:4e:fe:e4:05:ef:81:3d:1c:26:20:59:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:5E:7B:5C:0B:EA:25:C6:74:D8:40:0B:A7:E0:38:DA:11:81:52
X509v3 Authority Key Identifier:
keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.16.0/23
Signature Algorithm: sha256WithRSAEncryption
15:5a:d8:0f:fa:ce:ce:0a:d8:67:43:41:1c:d7:02:fd:37:24:
15:08:b4:54:f7:56:39:44:14:4d:5b:e8:0b:61:85:c6:5d:50:
d1:02:c5:ec:77:d4:ac:36:44:9b:1e:3c:7d:e6:b4:9b:24:31:
71:40:e6:ec:f4:c9:4a:21:bd:07:09:f5:6b:b5:67:ea:4b:9b:
c9:c8:e8:05:69:91:c7:99:83:c4:de:10:2b:9d:25:2b:9d:c8:
e3:a2:42:1f:48:cf:96:d0:2e:45:fb:2f:70:12:4a:85:a0:ca:
7d:6d:f8:8e:a2:63:cc:e7:3d:19:b2:c9:d9:96:cf:dd:ae:6c:
1d:cf:ed:e9:df:c3:06:18:bf:80:14:bd:1c:59:ad:eb:ac:7a:
1f:fb:15:07:28:a5:19:c4:5c:2e:6b:6f:2a:bc:21:c5:7e:d8:
16:11:76:26:08:2a:56:00:dc:af:0a:af:30:2e:47:f3:5e:53:
33:5e:2a:68:c7:d8:3c:df:ed:5c:45:2d:87:51:a4:9f:c8:c0:
68:d3:02:ca:d0:ca:1c:d3:36:f4:84:52:1c:41:6b:83:ad:21:
27:81:d2:fb:52:74:a8:c1:3c:8c:33:d2:9e:63:a6:56:8f:37:
bb:48:22:74:6b:1f:16:09:57:43:1b:50:c7:b2:80:37:45:85:
a4:b1:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:17:27 2025 by rpki-client