Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
File: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: fIHZqGWuZY3lEs/zXPWmQlLoo+8xZeuSfASg+zrg9mc=
Subject key identifier: 68:67:83:8F:33:48:3C:41:5E:AD:0B:88:20:B0:F9:5F:9E:91:DB:EC
Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Certificate serial: 6A13F0C7DD03949362A7A12A33D9B1C416EF9C24
Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
Signing time: Sat 16 Mar 2024 09:00:01 +0000
ROA not before: Sat 16 Mar 2024 08:55:01 +0000
ROA not after: Sat 15 Mar 2025 09:00:01 +0000
asID: 58369
IP address blocks: 103.167.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:13:f0:c7:dd:03:94:93:62:a7:a1:2a:33:d9:b1:c4:16:ef:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Validity
Not Before: Mar 16 08:55:01 2024 GMT
Not After : Mar 15 09:00:01 2025 GMT
Subject: CN=6867838F33483C415EAD0B8820B0F95F9E91DBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:4c:17:23:ad:9a:10:13:dd:c2:ba:d4:07:
e2:14:d1:29:0c:1a:d3:95:ef:67:0a:9b:d2:1b:40:
54:f2:e0:7c:84:17:45:d9:b5:c1:f8:1c:cf:ba:c8:
ac:f0:7a:5c:6d:42:96:ca:30:ee:95:0e:26:ed:f7:
16:24:af:8c:15:85:3b:e3:6f:9b:c9:3b:57:9c:32:
73:3c:79:64:22:0e:c6:9a:40:d8:56:37:88:c4:b5:
a4:f0:69:b5:4a:ac:74:f0:58:42:ad:d4:9c:27:03:
34:03:3c:fe:7f:cd:b4:ed:e5:a8:9b:e4:9d:45:8a:
38:98:7a:8d:b8:1c:25:79:56:68:8e:69:3d:bb:4a:
99:72:20:79:e8:8b:58:1e:e2:d4:6d:76:cb:18:6b:
e0:57:17:82:af:80:b1:3b:43:78:ec:8b:a4:01:70:
d9:4a:5b:60:c5:38:6d:a5:77:78:ae:2c:0c:ab:e6:
7e:a6:82:88:58:fd:46:cf:de:91:8b:e2:d5:10:ef:
9b:55:c1:26:3d:c4:3d:6a:0c:15:15:a0:cf:14:0b:
91:d9:23:54:1d:c1:bc:e0:b3:97:aa:1b:3e:96:d0:
6f:00:14:86:aa:7c:d3:a8:d9:05:b3:bc:19:39:ba:
c4:5f:e5:66:cf:a8:f9:21:d3:b9:cc:40:9f:db:b9:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:67:83:8F:33:48:3C:41:5E:AD:0B:88:20:B0:F9:5F:9E:91:DB:EC
X509v3 Authority Key Identifier:
keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:9b:4d:52:4e:b1:55:2c:b1:58:84:82:e7:c0:e3:e6:e7:56:
c0:cd:f9:9e:01:25:51:53:48:13:22:36:e0:e9:e0:5f:80:0b:
9c:96:6c:34:08:2a:1d:e4:3c:3c:10:c5:51:a9:02:0c:41:ef:
18:78:91:d9:34:8f:7a:83:38:30:87:ad:01:36:bd:42:85:8f:
35:31:c9:e0:71:02:7f:ea:22:e8:ce:7b:64:7d:58:73:46:98:
73:f8:cf:8b:88:03:ec:3e:8f:42:c8:45:2a:b6:84:af:37:38:
a5:71:f7:8b:2d:53:1b:04:cf:86:6d:81:2b:df:c4:13:84:70:
25:7f:73:ce:9e:fb:a9:d1:7e:50:75:3c:be:b0:3c:b7:de:ef:
2b:f5:37:3f:d3:aa:ed:71:78:21:e8:e1:58:0b:14:75:18:ac:
5d:71:97:c2:ab:0e:92:7a:8b:eb:aa:17:c4:12:b7:d8:bf:a0:
bd:c7:32:15:79:76:b2:52:10:d2:8f:45:69:34:a3:36:8f:2b:
3a:e2:2b:8b:9b:0f:0a:99:07:91:6b:d8:dd:c4:df:65:3e:ee:
83:b8:f1:d3:e7:0f:87:03:a9:f4:57:bd:f0:2f:25:d3:9e:4c:
6a:6e:ce:e4:e7:95:91:e4:15:9e:49:b5:45:85:5d:f4:c0:f5:
51:31:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:08 2025 by rpki-client