Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
File: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier: QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=
Subject key identifier: 74:17:99:41:2B:CD:0F:A7:0B:49:6C:53:BD:57:58:C4:08:F4:06:DE
Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial: 081020F8A07D938B876081D927F880692084CD18
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
Signing time: Thu 06 Jun 2024 05:01:52 +0000
ROA not before: Thu 06 Jun 2024 04:56:52 +0000
ROA not after: Thu 05 Jun 2025 05:01:52 +0000
asID: 141126
IP address blocks: 103.172.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:10:20:f8:a0:7d:93:8b:87:60:81:d9:27:f8:80:69:20:84:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Validity
Not Before: Jun 6 04:56:52 2024 GMT
Not After : Jun 5 05:01:52 2025 GMT
Subject: CN=741799412BCD0FA70B496C53BD5758C408F406DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:e2:f6:94:5e:4f:ab:09:50:f7:06:db:19:
ed:f9:96:bc:e2:dd:ff:ce:16:fe:33:65:5c:bd:4c:
35:e7:ca:16:46:a2:fb:41:67:9e:97:6d:cc:2d:ed:
bf:d5:e4:c4:99:93:c0:c1:eb:48:e9:3c:84:71:ab:
f9:4c:b1:fd:de:6e:b3:c9:74:e6:9c:d3:e2:ec:0f:
bd:0d:e0:1d:bb:1e:36:c2:7c:7d:8a:b9:25:49:27:
f2:7f:97:9c:ce:65:32:8d:e2:f2:df:75:a4:18:f5:
28:52:41:23:9e:ef:81:9e:06:77:22:91:9c:ca:b8:
ca:f6:fc:92:66:fd:45:89:23:cc:e1:28:26:b1:2d:
9f:a2:2f:64:99:85:53:70:7d:51:03:2c:7f:89:ba:
0d:8d:da:63:ee:02:87:2d:cc:c3:2d:5d:6b:88:eb:
39:db:23:76:c7:eb:6c:b6:98:4b:80:c9:ed:87:f1:
ec:84:46:b1:37:71:db:66:3b:f2:c4:5d:d2:7a:5c:
fb:23:a1:b3:ad:29:cc:a1:d1:6b:bb:b4:73:ba:a7:
07:95:67:29:d0:ae:23:b3:7b:5b:6e:31:dd:1a:e2:
f0:85:84:14:dd:6e:0e:75:4e:db:54:bc:37:00:dc:
b2:28:f3:aa:15:84:d6:c8:fa:d1:23:9a:55:27:57:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:99:41:2B:CD:0F:A7:0B:49:6C:53:BD:57:58:C4:08:F4:06:DE
X509v3 Authority Key Identifier:
keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.1.0/24
Signature Algorithm: sha256WithRSAEncryption
09:67:da:e2:7c:38:bf:df:e1:09:de:db:72:e2:06:4a:d8:3e:
33:3a:e7:06:b2:3a:f6:22:ef:38:99:67:e8:7d:b7:2e:44:90:
b1:a5:52:3a:10:6b:e0:1c:64:8d:51:15:8b:5f:6e:ff:57:96:
ff:4f:f6:b0:9f:c7:f5:b4:96:5f:ab:c0:63:d7:71:37:3e:ee:
01:cf:1c:3e:09:a9:be:21:a9:af:01:12:88:f5:0d:0e:f8:8c:
e6:81:53:fe:41:45:24:8b:d4:63:8b:65:2a:e3:63:d0:eb:7e:
78:c4:aa:be:8a:67:af:2d:b3:10:04:35:bd:b6:49:73:bc:cb:
7b:93:fa:90:f1:d0:af:2a:2c:c9:72:67:9b:0d:f4:46:31:f5:
f5:0b:28:29:e5:34:26:c0:16:af:ca:aa:10:fd:9d:d0:88:d4:
77:59:8a:7f:68:11:11:5e:f5:2d:98:f7:88:bc:14:c7:21:b4:
cd:45:9b:38:fe:55:13:df:2d:01:59:2c:65:e1:4c:bd:00:0d:
78:3f:55:56:2a:aa:50:7a:2d:18:c7:62:43:55:0e:8e:26:3e:
e4:8c:4f:8e:77:68:ad:56:5a:79:82:d8:03:d7:06:04:b1:04:
85:00:f5:e6:f3:85:2d:cc:43:17:21:1c:50:07:48:28:c7:ea:
db:a1:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:07 2025 by rpki-client