Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa
File: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: MpHOToxaZFJCjw2k5H3oUXqKj/fG2hglRtV60kyYteg=
Subject key identifier: D6:E9:D7:9C:6B:51:36:CF:7F:9B:80:3C:80:A4:9F:D2:D1:10:6E:F5
Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245
Certificate serial: 413CD40FDB700D2C644FF3243F51F2B781EAF2B9
Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa
Signing time: Fri 02 Aug 2024 10:03:49 +0000
ROA not before: Fri 02 Aug 2024 09:58:49 +0000
ROA not after: Fri 01 Aug 2025 10:03:49 +0000
asID: 17995
IP address blocks: 103.164.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3c:d4:0f:db:70:0d:2c:64:4f:f3:24:3f:51:f2:b7:81:ea:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245
Validity
Not Before: Aug 2 09:58:49 2024 GMT
Not After : Aug 1 10:03:49 2025 GMT
Subject: CN=D6E9D79C6B5136CF7F9B803C80A49FD2D1106EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:be:2b:1d:44:60:a8:89:fe:4f:2b:0c:b7:
97:b4:93:f6:d2:62:e4:5a:12:4e:ec:dc:52:34:50:
b5:60:59:6d:83:6d:2a:68:dd:ab:da:7a:4b:20:51:
f9:dd:b0:35:58:b4:2c:7f:c3:42:a2:57:44:83:83:
08:85:34:d0:e0:d8:01:11:f4:9b:d1:d8:ea:35:9e:
62:a2:88:81:2c:19:2f:43:fb:56:61:e4:17:ad:e8:
a3:1c:49:69:f4:78:d0:e4:80:66:d8:a0:94:ca:c0:
ed:13:aa:97:41:d0:40:ea:e1:c6:b9:b4:09:75:7e:
63:b3:46:63:b4:b7:1a:a9:78:5c:43:b4:d8:7d:cb:
0b:f3:f7:49:14:c5:6a:77:d8:81:53:11:3d:af:f0:
79:c7:98:09:3a:39:0f:bd:c5:36:07:51:fb:8f:39:
6e:85:f0:e3:8d:38:42:14:52:70:84:97:11:bc:1e:
0d:92:ed:13:c1:4c:20:26:02:a7:ee:3c:46:58:ab:
4c:1e:e8:92:66:77:7c:38:74:a8:b2:48:b1:c3:87:
9c:b3:e8:e1:11:8c:cf:1f:94:2f:39:fb:84:a6:f0:
8e:3f:b5:74:32:a2:04:d3:72:36:c9:58:c5:ae:f9:
9f:91:5b:f0:7e:0b:90:24:e7:b2:0b:50:2b:6f:b6:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:D7:9C:6B:51:36:CF:7F:9B:80:3C:80:A4:9F:D2:D1:10:6E:F5
X509v3 Authority Key Identifier:
keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.170.0/23
Signature Algorithm: sha256WithRSAEncryption
84:9c:74:c6:fc:cc:17:51:03:d0:87:a2:f8:24:5f:9e:58:fb:
94:a0:81:58:3b:9e:6b:67:bf:9c:46:a9:74:14:88:50:5a:9d:
5b:cb:80:2f:69:ce:64:b6:f6:e4:ef:86:79:f2:1d:ac:17:d1:
4d:98:5b:47:f9:31:7d:d0:8a:b4:8f:2d:0b:63:c8:f0:a3:32:
11:6f:98:77:c5:74:0f:9a:6b:b4:c4:18:1c:eb:32:27:ac:39:
19:06:bd:af:4f:dd:9e:d4:fd:d4:82:bd:45:fa:77:c6:27:6c:
fa:a3:c1:82:75:a4:92:bc:aa:ed:95:3f:07:ca:6b:ed:bd:9b:
ab:6c:96:19:d7:50:99:87:c0:71:57:d1:af:86:ae:0b:8f:29:
c9:ad:7a:4d:c3:28:fd:56:3c:37:4e:e1:e6:44:4a:0f:68:9c:
7b:71:3e:45:35:a3:c6:56:39:b3:ee:11:9a:42:c5:23:e4:3a:
24:61:62:54:dd:05:a7:79:c9:08:7e:c3:b0:ce:d1:7c:4d:b5:
e1:fc:df:df:a8:56:49:eb:95:0d:df:41:e1:d2:3a:bb:00:3e:
eb:38:43:94:24:e1:9a:9c:c0:05:82:2c:03:39:d4:bc:71:2f:
0a:75:bf:a3:2e:f8:88:e9:69:b8:a9:4c:45:9c:2d:e2:f4:4a:
c4:d7:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:01 2025 by rpki-client