Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
File: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (raw, json)
Hash identifier: SPAwpGkaSWc0uNdATDp1XNpucbYxl6+PHS3pp5iqZpw=
Subject key identifier: F2:D8:8B:5C:47:B5:A6:FC:4D:48:3B:3E:22:DE:B7:17:46:A2:AB:99
Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial: 7DD3AC9EE0F9A5F5E78A482256168D6EEA24ABDC
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
Signing time: Tue 12 Mar 2024 09:00:53 +0000
ROA not before: Tue 12 Mar 2024 08:55:53 +0000
ROA not after: Tue 11 Mar 2025 09:00:53 +0000
asID: 59278
IP address blocks: 103.184.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d3:ac:9e:e0:f9:a5:f5:e7:8a:48:22:56:16:8d:6e:ea:24:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
Validity
Not Before: Mar 12 08:55:53 2024 GMT
Not After : Mar 11 09:00:53 2025 GMT
Subject: CN=F2D88B5C47B5A6FC4D483B3E22DEB71746A2AB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:e6:5c:2c:07:14:76:5b:77:92:2d:e0:82:
96:70:bf:bc:da:2c:57:84:13:61:a0:7b:77:d8:d6:
3d:62:d8:ca:53:96:4f:0b:36:ca:1c:9f:03:d5:ec:
8c:0c:22:86:de:7d:26:80:21:c1:2b:2e:5c:8a:7b:
73:11:0a:cc:08:22:ae:79:11:d6:c9:a7:74:7a:ec:
31:16:4b:0a:97:f1:d0:0e:e9:a4:88:1f:d7:a4:b9:
97:bd:d4:15:e0:40:26:60:27:89:95:ec:41:cf:9b:
b3:ec:03:d8:01:4c:ec:a4:a0:3d:8e:88:a1:fa:01:
9f:3b:33:d6:d0:0e:cb:70:eb:68:52:9c:91:f9:2c:
f6:cd:a1:99:64:75:55:8d:ba:72:c6:69:8b:77:71:
69:be:3f:67:c4:3b:c4:0f:5b:12:e7:06:e6:b1:56:
2b:e1:2f:d7:27:e3:b1:50:7f:04:e2:43:32:76:5b:
00:c0:22:85:a2:d9:29:62:49:da:3d:4d:75:4b:3d:
07:1c:fc:05:48:79:35:9e:ac:aa:4e:d4:1b:45:77:
99:89:9e:ea:53:72:7b:9f:92:f3:84:b3:2b:99:e3:
0e:a7:31:63:80:a7:15:15:1a:c2:e9:c8:96:c2:0d:
c4:d6:e4:1d:fd:ed:da:85:83:50:1c:f8:62:61:04:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:8B:5C:47:B5:A6:FC:4D:48:3B:3E:22:DE:B7:17:46:A2:AB:99
X509v3 Authority Key Identifier:
keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.64.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b5:d9:ed:f4:cf:2f:3a:ec:fe:75:73:7c:38:cb:f6:6f:c1:
0b:9d:99:91:6b:08:22:59:b1:f3:25:bd:3a:a9:8b:1a:bd:92:
8d:ee:7a:26:ef:e5:d3:6d:24:36:f4:f1:6b:32:55:bc:1f:2f:
aa:fe:3a:2a:02:f2:6f:d7:59:d7:9b:cf:60:89:77:36:85:40:
6b:ba:9b:7a:69:88:6c:5b:15:45:27:95:8a:46:99:e7:64:38:
94:0e:5d:c6:2c:2e:bd:20:44:54:91:a6:28:07:4e:68:c1:c6:
d2:8e:ac:b2:c6:dc:aa:a8:81:3e:6a:0a:b6:b3:56:0f:87:45:
ea:ba:31:9e:35:ea:59:b1:29:ec:12:ff:cd:a2:83:32:40:59:
77:b7:1b:1e:42:8d:c8:97:6f:9e:4d:50:c4:47:83:81:ae:54:
c0:5a:67:db:f6:b0:3c:36:74:6a:94:cd:5b:12:38:b5:a2:b6:
f0:36:a1:d3:78:1d:b0:9b:e0:2f:06:08:a1:82:19:63:6b:68:
fb:88:93:d3:c4:fd:15:23:a9:a3:9f:92:e6:52:29:a7:53:79:
d1:7e:e9:ca:e7:29:d0:b4:d9:c3:42:cb:1f:1d:a4:9a:52:fa:
83:5a:df:59:a6:a7:6c:e4:bf:07:43:e8:ae:5a:18:f0:de:38:
e1:56:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:29 2025 by rpki-client