Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
File: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (raw, json)
Hash identifier: zY6MeVih11oEA5Y6wZpVQeAXzh1zZ/fzkIYHt+si4VA=
Subject key identifier: 5D:DD:B4:06:77:50:22:34:02:93:F9:80:B9:8B:ED:97:42:00:52:F4
Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial: 7474E2F95E35B23FD62F9A54E90084FEE22E1ACA
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
Signing time: Sat 15 Jun 2024 12:00:01 +0000
ROA not before: Sat 15 Jun 2024 11:55:01 +0000
ROA not after: Sat 14 Jun 2025 12:00:01 +0000
asID: 136820
IP address blocks: 103.98.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:74:e2:f9:5e:35:b2:3f:d6:2f:9a:54:e9:00:84:fe:e2:2e:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Validity
Not Before: Jun 15 11:55:01 2024 GMT
Not After : Jun 14 12:00:01 2025 GMT
Subject: CN=5DDDB406775022340293F980B98BED97420052F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:d8:a2:04:67:90:b4:63:51:aa:97:8e:d1:
02:7d:9a:e8:84:a9:1f:1c:db:84:0b:8b:87:aa:bd:
c9:25:dc:3d:ec:78:c3:07:31:1e:ff:cc:3d:d3:fc:
8c:0f:00:ec:6c:8c:04:4e:a4:37:ad:bc:20:bc:c7:
ef:fd:b8:95:5e:7a:97:0c:05:26:1d:68:84:b4:88:
ca:d0:e8:ca:84:3e:59:d3:f3:bd:51:f7:9d:d1:8b:
66:86:be:c1:64:07:fc:c5:41:49:51:c5:69:a3:ce:
d4:f9:f8:4a:d5:5a:78:5f:5b:27:5a:19:26:41:fc:
38:69:2c:75:2a:7b:7b:0a:ff:76:a1:43:28:6d:44:
b8:ba:21:29:84:34:47:c5:d4:6d:c3:ed:42:f2:d1:
23:32:00:73:ff:d0:59:1f:d1:50:4c:a5:6a:14:24:
56:5f:70:6a:d3:09:ed:98:56:96:e9:c9:b8:93:6d:
0a:81:0a:0c:bf:ed:03:84:46:68:c9:9a:6d:a4:7d:
90:49:a2:73:ea:45:3f:2e:37:f6:32:7e:ea:ad:0c:
ef:4e:6c:ce:96:92:84:f9:da:5b:03:46:68:79:c2:
5a:04:bf:34:a7:36:94:92:2f:09:c0:d3:8a:40:7e:
9e:fe:7f:03:59:cf:c6:ff:55:5c:5e:4e:20:d3:d5:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:B4:06:77:50:22:34:02:93:F9:80:B9:8B:ED:97:42:00:52:F4
X509v3 Authority Key Identifier:
keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:06:cb:68:da:86:fb:22:90:cd:75:9e:b1:1b:d2:26:aa:2d:
9a:00:1f:2b:c9:ba:3d:96:1b:88:d9:f9:1c:90:bc:ea:f8:e4:
d9:7e:0a:e9:bb:80:7c:50:62:cd:cc:fb:9a:02:fa:ac:b2:f3:
71:ff:75:5f:13:66:ee:6c:e2:64:90:45:21:40:7e:c1:27:59:
64:39:d2:e3:f8:39:3b:87:05:ba:76:21:d4:a5:ab:e5:0b:b6:
01:c7:75:43:8e:32:d2:b2:1a:79:53:5f:ef:72:6a:a8:c7:06:
bb:67:92:2c:e1:79:ff:bb:32:91:bf:21:49:42:02:bc:86:a7:
0c:6f:34:5c:d5:10:a4:5c:76:2c:9d:61:22:da:44:95:cd:03:
2b:87:bd:99:e2:50:27:12:69:84:87:73:3a:3f:ce:1e:7d:97:
87:c7:94:fd:55:42:b8:e4:a4:33:14:f0:6f:97:3d:fb:3b:78:
c0:f9:31:40:8f:71:eb:7f:97:8b:4a:d7:7f:fb:45:c8:32:54:
ac:cd:6a:5b:06:55:0a:1f:dd:07:f9:89:cd:ac:98:e9:aa:c1:
a3:94:78:c4:a9:98:e2:40:6e:26:60:28:64:5d:8a:44:2e:c3:
cc:e5:51:55:5e:25:83:42:b3:5e:36:e6:b6:ab:c6:78:06:f3:
23:93:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:35:44 2025 by rpki-client