Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
File: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier: tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=
Subject key identifier: 46:1F:FD:25:DF:97:88:B0:A7:B0:CF:07:37:FC:8F:24:9A:37:15:94
Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial: 1DAB14C56D1011ADA078D9EFB80EEFC4ACA284A7
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
Signing time: Mon 01 Jul 2024 01:02:44 +0000
ROA not before: Mon 01 Jul 2024 00:57:44 +0000
ROA not after: Mon 30 Jun 2025 01:02:44 +0000
asID: 131717
IP address blocks: 103.25.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ab:14:c5:6d:10:11:ad:a0:78:d9:ef:b8:0e:ef:c4:ac:a2:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
Validity
Not Before: Jul 1 00:57:44 2024 GMT
Not After : Jun 30 01:02:44 2025 GMT
Subject: CN=461FFD25DF9788B0A7B0CF0737FC8F249A371594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:2b:29:a3:5a:50:a7:0f:c0:6f:85:5f:c3:
b2:62:65:99:6e:e2:ee:2f:b3:c6:ec:5c:f2:18:8f:
be:ae:42:8c:ef:14:a7:e5:b2:09:d9:cc:34:6a:92:
94:0c:58:b5:22:a3:9c:57:0f:96:c1:08:3f:cd:18:
3e:78:26:46:b9:be:52:91:20:f8:0a:77:96:d6:db:
03:f7:c3:72:70:51:52:14:e9:7a:15:06:fb:67:9b:
3f:b3:e1:7a:0c:c6:6a:84:2b:3e:e6:82:c3:cc:08:
db:bf:16:37:f2:b1:c1:f7:ba:65:9a:38:04:8e:fe:
68:4e:44:65:90:22:15:62:6b:15:88:49:ab:ed:ed:
09:9f:f6:8a:31:62:46:a5:77:01:e6:d5:bd:56:02:
82:a8:fe:3f:ec:b2:8f:c7:84:40:92:35:1c:07:aa:
5d:8d:74:47:42:3c:dc:b6:88:9d:67:63:ec:c6:87:
c2:b2:d3:93:75:e3:df:3e:01:04:ea:5c:b1:81:9e:
15:6b:71:ce:5b:19:49:a9:5f:5a:f6:e2:a1:1a:b4:
fb:d8:a8:ca:50:6d:a8:f4:91:d0:4d:6b:46:b9:35:
6c:08:ee:91:57:b8:cc:78:1f:49:75:dc:4c:54:e1:
d4:8b:08:ea:b0:a2:76:81:d4:61:64:fe:2f:8d:b0:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:FD:25:DF:97:88:B0:A7:B0:CF:07:37:FC:8F:24:9A:37:15:94
X509v3 Authority Key Identifier:
keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
37:99:69:d5:66:d2:98:94:0d:d8:40:e2:4a:30:da:95:a8:56:
9d:7b:29:b4:50:13:f5:58:72:eb:69:80:08:3e:e2:06:d0:d3:
e6:30:87:9b:35:00:2e:d4:e4:f4:60:f0:21:ec:37:88:bd:5d:
9c:5a:fd:36:e7:55:85:29:48:b8:7c:48:c2:58:56:3b:f1:cf:
49:2e:9c:48:dc:d5:a5:4f:fb:a5:11:5c:15:72:21:6c:a5:3f:
45:53:3d:fb:ad:e3:72:a7:66:40:ff:45:b0:18:30:3c:cf:90:
04:a6:db:3f:b8:bd:1d:5f:d9:3c:22:cb:b0:df:c1:d0:f3:b8:
bf:a2:60:98:17:f4:82:5c:6d:33:de:ee:81:59:3b:81:04:85:
13:b1:64:bb:af:ad:cc:f4:e7:0b:53:7c:98:0d:24:c4:30:f0:
74:c4:4d:a9:47:d4:42:09:60:7f:59:db:25:20:6d:61:49:93:
93:0a:bc:ae:6f:d7:26:09:ab:94:33:fa:fe:8e:cf:1d:65:a4:
bf:bd:cf:65:86:3c:ed:59:b8:e7:28:a8:3f:35:20:d6:24:c6:
d2:38:bd:e6:72:e6:13:38:a6:99:ba:6d:0e:d7:ae:5e:7c:78:
c6:3d:fc:9c:37:1c:f4:c9:d7:8b:ec:09:19:3a:bc:ed:25:69:
dd:92:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:15 2025 by rpki-client