Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa
File: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (raw, json)
Hash identifier: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=
Subject key identifier: B1:8A:E1:3B:77:10:72:23:10:EC:65:FD:6B:8C:A8:25:86:49:C5:1D
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 6891BDB5F2B22091EE9C4403D0DADC4A4505568C
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa
Signing time: Tue 13 Aug 2024 10:00:05 +0000
ROA not before: Tue 13 Aug 2024 09:55:05 +0000
ROA not after: Tue 12 Aug 2025 10:00:05 +0000
asID: 131694
IP address blocks: 103.7.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:91:bd:b5:f2:b2:20:91:ee:9c:44:03:d0:da:dc:4a:45:05:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Aug 13 09:55:05 2024 GMT
Not After : Aug 12 10:00:05 2025 GMT
Subject: CN=B18AE13B7710722310EC65FD6B8CA8258649C51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:73:15:da:e6:39:cb:ec:57:7e:97:e1:42:
18:b1:44:a9:c7:91:d7:cc:9b:d1:e9:82:7b:ab:f4:
6a:9a:e8:d8:49:94:cd:a6:bc:8d:5d:04:b1:c3:b7:
58:22:85:3c:8f:16:be:94:29:db:f5:9c:f9:00:ba:
db:cb:49:05:5d:f8:f5:4b:14:85:cf:1f:2b:ce:8d:
0c:28:c6:9a:9b:f1:1a:7e:eb:dc:e5:d1:62:e9:8f:
2b:2b:65:e9:06:93:ef:a6:bf:19:4a:24:15:b7:2a:
a3:a0:e1:ce:f6:15:b6:76:04:27:5a:08:1d:7a:d8:
60:96:a6:17:39:07:a7:dd:ef:41:00:c4:14:4c:b8:
ac:81:c4:fb:cf:90:2a:30:74:4c:42:c7:2a:ba:cb:
93:e0:2e:c3:82:cc:bd:24:c6:ad:41:c3:81:60:0d:
58:cf:d9:11:19:66:d0:79:51:e6:ed:5d:95:8f:fa:
35:a9:bb:b0:4e:f2:03:2e:c4:2a:32:f5:be:53:9f:
48:ac:b2:24:db:3a:05:dc:c6:a5:3e:7b:2c:f3:13:
8d:62:8d:59:a6:8b:a3:fb:9f:90:ac:91:fa:de:cb:
16:22:d2:31:2f:5b:bf:3a:a1:6f:b8:7d:04:65:eb:
b1:da:26:82:a6:1b:61:b6:f9:b1:ff:b9:00:0c:bf:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:E1:3B:77:10:72:23:10:EC:65:FD:6B:8C:A8:25:86:49:C5:1D
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:65:59:73:fb:e8:31:cd:ba:e7:1c:1f:78:08:bd:ac:98:e0:
2d:7d:07:e9:19:e1:ac:79:54:f6:2e:80:55:23:3b:51:2b:32:
93:87:97:c4:3b:65:a6:fb:2c:3a:a0:9d:3a:a5:07:bb:2b:2e:
5e:80:1b:42:24:ec:53:ad:85:37:52:2f:ce:80:f3:1d:3e:d5:
4e:a8:47:67:dd:d6:fa:b1:f2:24:38:2f:c9:e9:3c:0a:d2:10:
6f:07:d1:9e:5b:6d:4b:c1:b5:8b:78:9d:49:44:6c:a0:0b:cf:
26:e5:74:e4:c7:aa:20:c9:81:90:ca:14:60:5b:ce:6a:f4:0e:
8e:1f:57:ce:07:ca:6b:ca:a3:c9:0c:5e:a1:db:ca:eb:72:31:
4b:45:0a:d5:25:db:55:4d:b8:eb:1e:1f:7b:a0:bb:0a:c6:9c:
45:3c:18:5e:e2:f7:64:d2:3d:63:c6:b6:9c:41:b0:70:06:8c:
86:ab:b1:64:27:14:ea:98:c5:4b:e5:56:99:75:54:ac:d7:8e:
9c:98:91:37:eb:2f:04:2d:48:dd:4b:c1:19:fa:87:62:7d:62:
ba:16:9a:eb:9d:9d:cd:56:d0:19:58:53:c8:bd:4a:57:79:b2:
d2:ca:37:3a:aa:a9:d4:f1:2b:be:15:68:cc:cd:a2:c8:19:a0:
3c:de:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:25 2025 by rpki-client