Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
File: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier: t9NUx3DtxecIaFZHSk+mCoxwNcnsYC+1/pLtEn9rLWQ=
Subject key identifier: 76:71:6B:EB:13:E1:BE:CB:A8:97:06:6B:E5:06:DA:62:46:AE:65:2A
Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial: 71C22BC040F58F5D3ACA7EE7188DB5A6F1E2D0D6
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
Signing time: Fri 30 Aug 2024 08:02:33 +0000
ROA not before: Fri 30 Aug 2024 07:57:33 +0000
ROA not after: Fri 29 Aug 2025 08:02:33 +0000
asID: 138115
IP address blocks: 103.191.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c2:2b:c0:40:f5:8f:5d:3a:ca:7e:e7:18:8d:b5:a6:f1:e2:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Validity
Not Before: Aug 30 07:57:33 2024 GMT
Not After : Aug 29 08:02:33 2025 GMT
Subject: CN=76716BEB13E1BECBA897066BE506DA6246AE652A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:85:b8:a1:e2:7a:eb:e5:e1:40:74:2f:3a:
f5:d7:86:3d:aa:a4:1f:10:81:55:16:e1:57:06:6c:
d2:40:01:ae:b4:2d:e8:93:39:bb:dd:f5:9d:ae:b5:
d0:cd:42:20:7c:ee:80:f4:08:c0:a6:49:ca:d3:e0:
d0:97:de:d2:de:66:85:d5:d8:e0:03:eb:32:b1:aa:
f8:4e:f5:15:a2:61:c3:7c:00:87:ba:be:a3:db:e3:
aa:22:bb:c4:77:36:b0:e3:9d:e2:c4:01:1b:64:b9:
6f:3d:a0:87:77:4d:fe:d2:d0:61:a2:62:d9:65:86:
ab:5e:a6:de:32:0f:2b:11:94:94:02:ca:bd:ac:cf:
b6:55:f6:2c:4f:8c:fa:33:6f:1e:c9:98:e2:22:08:
08:47:dd:bb:4e:0f:d5:1b:8f:32:0f:84:1d:69:35:
2e:4c:a8:53:63:d8:fb:ff:54:f4:1f:c3:e1:8f:52:
38:b1:42:dd:67:d4:ab:2e:95:75:6d:e4:03:cd:27:
e4:1c:83:8a:22:88:c4:89:79:98:34:fd:53:08:f2:
05:4d:0d:83:a3:06:2c:20:1a:1a:77:f2:8a:6c:a1:
f1:75:0f:67:5e:bf:f8:35:9d:4e:97:02:6f:d7:64:
e1:b0:c2:e5:b0:9b:ff:f2:cb:ba:c2:fb:56:71:97:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:6B:EB:13:E1:BE:CB:A8:97:06:6B:E5:06:DA:62:46:AE:65:2A
X509v3 Authority Key Identifier:
keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:35:88:77:e0:a7:c5:31:98:24:06:54:41:6d:23:08:7f:41:
5a:a5:0f:80:89:e5:74:68:84:a8:4f:ec:66:1d:59:d8:31:ae:
2c:28:be:cb:e8:3f:8e:0f:f9:d3:1a:22:7f:9d:23:a8:29:f3:
04:ed:d9:95:91:91:3c:fb:c1:11:34:fe:21:72:7c:ed:96:68:
61:ac:43:d2:05:fb:76:66:03:f2:90:d6:02:bc:d0:3c:32:7d:
54:ab:26:82:3f:de:0e:8b:f4:a5:bc:8b:44:93:d0:81:51:a8:
c1:7a:b5:be:9c:54:29:6f:47:7b:52:00:79:66:1a:2b:4f:a6:
b3:ad:16:a3:23:0e:b6:c9:58:0b:9f:65:ff:6d:8d:57:25:8d:
36:cc:d3:53:15:81:ca:db:93:bf:5d:92:ee:e8:b8:e3:39:1b:
43:06:5e:7a:8d:0a:1b:e7:65:1c:d9:48:0d:2f:cf:77:d4:d3:
e4:aa:01:86:cc:3b:ea:f8:8e:56:3c:59:d6:c5:50:ab:57:d6:
5b:6b:b5:c2:c0:95:66:75:c3:7f:44:a4:da:f1:ef:7b:fb:5a:
82:25:08:3c:9c:ae:3a:6d:71:ae:77:62:8a:1b:6b:bb:c4:ec:
9c:d4:d6:a4:47:81:ee:ae:5c:79:96:53:88:ca:9f:a4:4a:47:
03:fd:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:09 2025 by rpki-client