Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa
File: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier: 5WAjPQFyaB8VU/xV/L/W+MpTyoJtVsIgPQ74sNXdzhE=
Subject key identifier: EA:C2:4D:75:94:87:FE:3E:09:15:5E:72:7A:80:1A:7E:C6:04:9A:18
Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial: 247497FB198A73E35407B303EF5681DEC094F9A5
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa
Signing time: Sat 16 Nov 2024 14:34:09 +0000
ROA not before: Sat 16 Nov 2024 14:29:09 +0000
ROA not after: Sat 15 Nov 2025 14:34:09 +0000
asID: 58378
IP address blocks: 103.161.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:74:97:fb:19:8a:73:e3:54:07:b3:03:ef:56:81:de:c0:94:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
Validity
Not Before: Nov 16 14:29:09 2024 GMT
Not After : Nov 15 14:34:09 2025 GMT
Subject: CN=EAC24D759487FE3E09155E727A801A7EC6049A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:80:d9:27:08:09:2a:7c:7f:c7:d2:13:07:
a4:4b:1c:df:10:8a:ce:cd:19:d5:3e:8c:77:b1:2e:
e0:8f:4a:99:92:94:5a:22:cf:33:4f:45:7c:1a:0f:
c7:ff:d6:73:9e:e5:6b:bd:1b:3e:31:76:e2:da:f7:
7d:8c:d5:0e:07:c3:5f:d4:af:b7:bd:dd:57:18:8b:
96:a0:cb:05:b3:1b:58:21:7f:e9:53:f3:74:4f:57:
8f:f2:be:39:23:68:ea:f1:d9:c2:51:ee:ca:49:f5:
0a:3a:b2:63:3a:0f:35:64:18:c1:62:60:be:35:17:
25:4f:c0:71:1a:6a:f8:ef:ae:9a:aa:d3:3b:51:c3:
8c:c6:49:40:42:60:d5:17:b8:35:0a:7f:a4:f4:e7:
c7:7c:30:ea:75:42:90:aa:dd:fb:2a:e5:8a:41:4d:
49:48:b4:fb:dc:6e:db:cc:30:77:7c:84:53:ae:ee:
24:8d:3d:31:ab:36:4c:90:60:e2:7e:43:41:a3:76:
b7:4f:47:66:d4:b8:53:f8:a8:40:2d:c1:66:57:7a:
95:65:cb:5f:70:81:40:5a:77:d9:47:25:43:17:ad:
50:32:61:06:d6:77:ca:7f:3e:bd:8e:0b:8a:01:99:
e5:2f:b9:f5:5d:24:c7:f9:94:ff:50:2e:56:66:23:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:4D:75:94:87:FE:3E:09:15:5E:72:7A:80:1A:7E:C6:04:9A:18
X509v3 Authority Key Identifier:
keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.117.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1e:6d:eb:d8:78:76:3f:0e:53:94:bf:a0:1f:9a:83:d3:a5:
c7:b9:ed:be:99:25:de:7f:92:b6:a0:b0:99:dd:1b:eb:a9:f3:
bb:aa:70:50:0a:cb:f0:91:61:c1:5d:27:d5:c5:21:34:2a:03:
1a:ab:cf:f8:f9:04:91:52:14:f8:4b:fe:ad:41:37:3c:db:7e:
66:ad:fa:f2:3c:cb:ed:fb:41:31:28:73:75:a8:e0:10:e3:47:
d4:4a:59:fd:7c:30:5d:d4:94:1f:89:21:95:61:b0:30:ea:cd:
13:33:85:1f:6a:f8:70:f7:19:88:ac:b8:ce:86:fc:2e:1e:75:
b5:b5:b4:b7:62:87:7c:1f:c6:27:18:3f:bd:45:0f:fe:5a:73:
1a:f6:0a:db:19:aa:52:f0:67:56:3f:34:39:94:63:71:b4:8c:
68:3f:32:4e:07:cd:04:84:cf:81:f7:28:ca:50:83:df:e3:c3:
24:d6:4f:f4:87:87:c9:b3:0a:5a:e4:de:17:d3:96:ce:ed:9d:
d4:5d:b2:ae:33:e1:f7:5b:3d:66:da:66:bd:b1:ae:c6:35:9d:
28:79:4c:37:98:7c:f7:c8:6f:7c:76:08:f6:dd:c4:49:f6:b9:
e5:66:2c:bc:db:db:21:a3:0a:5a:70:95:09:54:50:27:46:3b:
6d:53:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:15 2025 by rpki-client