Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
File: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier: JbWzlg1lnWum+3WuBwswrM9CMw427j/ZXnbxFo3i/MI=
Subject key identifier: 3D:13:E9:25:03:97:CD:85:06:06:3A:71:7C:EA:72:56:A9:09:B5:5B
Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial: 417D9BA8F6D80391585C49279545E24C0AE9225B
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
Signing time: Wed 03 Apr 2024 01:16:36 +0000
ROA not before: Wed 03 Apr 2024 01:11:36 +0000
ROA not after: Wed 02 Apr 2025 01:16:36 +0000
asID: 149693
IP address blocks: 103.186.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7d:9b:a8:f6:d8:03:91:58:5c:49:27:95:45:e2:4c:0a:e9:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Validity
Not Before: Apr 3 01:11:36 2024 GMT
Not After : Apr 2 01:16:36 2025 GMT
Subject: CN=3D13E9250397CD8506063A717CEA7256A909B55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:21:11:82:e1:97:6e:91:ba:8b:3e:73:16:
49:c1:c4:47:b3:3b:1a:b1:52:00:75:39:22:e8:d4:
97:01:3d:7b:9b:da:9b:19:d4:01:34:f6:03:48:de:
09:f2:8d:61:f7:27:c0:e1:21:d3:88:07:b1:73:27:
2c:f2:3a:3a:0e:da:89:86:58:4f:42:38:12:8f:29:
9e:5c:16:95:3f:e0:3f:6c:01:21:4e:df:63:01:b6:
94:0c:10:f5:5b:24:59:4e:05:86:3d:f2:23:37:89:
b7:e8:6d:8b:4f:26:3f:cb:3f:ba:38:01:ae:25:9a:
b6:a0:01:59:86:aa:de:9c:a4:af:10:cf:0c:4b:aa:
7b:3a:5c:e0:89:ae:38:ad:d7:b9:56:69:45:0a:b7:
6f:cb:56:ca:f2:7b:23:b9:90:76:2b:37:fa:f0:ea:
a7:40:61:8d:c1:ae:29:f3:27:93:65:29:d4:82:03:
87:bc:71:6c:d5:eb:4a:74:a1:93:58:d8:cb:d1:22:
ff:f8:60:94:76:42:6c:99:4e:05:5f:a3:c0:5b:4e:
66:c6:13:80:18:a4:4e:d3:d0:76:a1:35:9e:8c:be:
40:a6:b0:9e:bd:24:91:92:cf:4f:06:3b:4b:d9:b4:
bb:cd:97:7e:e7:59:5b:17:bb:8e:81:cb:07:fb:60:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:E9:25:03:97:CD:85:06:06:3A:71:7C:EA:72:56:A9:09:B5:5B
X509v3 Authority Key Identifier:
keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a9:cc:f3:e2:87:a6:b7:ca:1b:a3:d6:48:b4:b1:ae:40:d4:
f3:77:5c:b6:49:cc:5d:cb:c8:97:e8:e8:fb:84:82:41:3a:af:
93:16:b8:9f:76:a1:2a:1e:b4:e7:fb:5e:1a:ee:a7:f3:3c:48:
24:20:47:2b:a3:b9:9c:7e:f9:5e:55:59:7f:47:c3:f5:cf:5c:
85:02:ce:3a:cd:8a:e3:17:61:0c:28:21:e1:a2:88:22:61:be:
e9:e4:01:d6:07:32:2d:9e:51:b1:b6:1a:a5:4e:74:68:8b:97:
b8:ad:3d:d3:ad:f4:9c:67:63:9b:93:fa:47:e8:e9:da:5b:28:
a8:48:89:2c:4c:1e:c2:97:f9:fc:21:a3:6c:67:0c:aa:f5:e4:
bd:12:53:83:85:43:40:e8:56:15:c1:e5:ea:fe:0a:f4:20:df:
ee:89:a1:bf:e9:53:ac:d0:b1:de:f6:23:cc:ab:64:68:9c:8b:
d7:38:6f:dd:91:d8:e8:56:ff:5d:94:5d:4d:23:84:ee:fd:66:
df:76:82:7e:66:a8:b9:7b:4f:ca:49:88:74:32:9c:47:74:bd:
72:a6:dc:f9:98:2a:f7:ec:49:54:d3:30:cf:ff:7e:6f:9c:c3:
f1:d4:15:3b:7c:97:7f:ca:7c:61:84:81:b7:ee:6e:76:85:22:
0c:96:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:42 2025 by rpki-client