Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa
File: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (raw, json)
Hash identifier: k8LPKavn2jpgCCIKamnb82qp+kRRRyndZdhtxlhOO+I=
Subject key identifier: 07:E0:C4:5F:2C:5F:88:C7:23:1B:CA:8F:38:FD:12:6D:57:86:17:51
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 774A18097AD2000F3FAC7AC7684C596EDBD2C957
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa
Signing time: Thu 11 Apr 2024 10:00:52 +0000
ROA not before: Thu 11 Apr 2024 09:55:52 +0000
ROA not after: Thu 10 Apr 2025 10:00:52 +0000
asID: 149744
IP address blocks: 103.187.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4a:18:09:7a:d2:00:0f:3f:ac:7a:c7:68:4c:59:6e:db:d2:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Apr 11 09:55:52 2024 GMT
Not After : Apr 10 10:00:52 2025 GMT
Subject: CN=07E0C45F2C5F88C7231BCA8F38FD126D57861751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:26:fa:97:5b:65:bb:89:21:91:19:52:d6:
75:2c:1a:2c:9d:17:d0:95:b7:23:d7:6e:16:21:30:
d6:ec:98:40:7f:d5:93:79:d2:19:2f:97:52:fc:c7:
4a:90:05:fe:67:86:15:f1:c9:c5:b2:99:d6:b0:00:
7d:01:dd:d9:69:06:4b:dd:5e:7f:8c:81:b6:05:59:
dc:f9:33:d5:d4:90:25:e4:cd:ec:b6:cb:68:ad:22:
1e:4e:cb:82:3c:42:dc:21:93:46:18:30:0c:4a:60:
88:71:38:5c:05:f4:ad:40:09:e3:4a:47:6c:59:6e:
92:46:c5:71:47:dd:f8:3a:1b:aa:09:4a:74:f8:45:
eb:2a:f8:01:3f:2e:2c:2a:ad:d6:1d:9f:6d:00:da:
be:78:39:62:88:90:1e:ed:c4:3a:17:d7:92:4a:43:
ad:bc:80:cc:fb:5f:f5:ff:2a:16:49:b7:b8:b8:77:
09:6c:e5:8c:05:55:68:08:e1:c5:f5:a3:c3:30:38:
b7:6e:21:dd:f3:ef:38:45:f3:89:92:7c:b7:5c:65:
54:eb:1a:b7:14:14:34:1f:f1:bc:c9:3e:58:75:8c:
c8:73:7f:82:41:87:86:55:a4:bb:6d:5d:0b:36:e9:
39:bf:a8:e4:88:08:9f:31:99:db:8c:79:12:d3:2d:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:C4:5F:2C:5F:88:C7:23:1B:CA:8F:38:FD:12:6D:57:86:17:51
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:37:5c:94:37:67:82:e3:6e:90:d1:98:39:3b:f2:5d:2b:6d:
c9:eb:ba:26:da:47:b1:71:88:37:5c:79:18:b2:c8:cb:8d:9c:
39:71:91:e5:ea:b7:dd:4e:90:2b:38:52:41:d7:69:e3:aa:4b:
2f:d0:8f:1b:b0:a6:8a:28:67:92:d0:3a:bd:44:97:d1:01:60:
c5:cb:6b:08:16:a5:ab:09:b8:8c:ef:ca:46:46:e8:ff:e2:ae:
45:f3:33:9f:a8:89:31:71:92:42:af:45:f7:cf:c7:69:c1:b7:
4d:21:a3:d3:05:50:57:0f:d7:f6:58:0b:24:2a:dc:6b:d5:64:
c9:1e:10:0c:c4:47:2b:db:90:8a:65:f2:21:60:20:26:77:95:
84:af:3e:8a:3f:f4:60:b3:95:2a:f9:8f:e1:3e:54:ab:bf:27:
0e:56:cd:c1:09:bd:c2:50:34:78:4f:f1:32:ef:43:66:ca:5e:
b0:9f:37:fe:f2:5a:f6:26:02:b8:7d:3b:f6:a9:2b:a9:aa:e3:
64:5c:de:0f:88:0e:45:e6:d0:99:44:a1:66:35:86:6a:fe:a7:
2e:aa:14:86:0f:b7:48:29:fc:4a:b7:e8:ce:28:d4:28:6d:af:
2c:c3:00:27:95:f4:47:18:e5:e7:a0:9a:f0:3c:f7:2a:3f:5d:
fb:a7:77:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:53:36 2025 by rpki-client