Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
File: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier: RK2zH1tgWir8wheYcjszJYDPIlBKYBqZW3v1Zkn9ceg=
Subject key identifier: 9B:AB:33:B1:A7:63:14:B6:57:52:C9:4E:93:D5:28:0B:D7:08:F0:16
Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC
Certificate serial: 5DED20A406C16DBCB364DCD943A64F5205349CA8
Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
Signing time: Sat 06 Apr 2024 06:00:00 +0000
ROA not before: Sat 06 Apr 2024 05:55:00 +0000
ROA not after: Sat 05 Apr 2025 06:00:00 +0000
asID: 141595
IP address blocks: 103.160.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ed:20:a4:06:c1:6d:bc:b3:64:dc:d9:43:a6:4f:52:05:34:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC
Validity
Not Before: Apr 6 05:55:00 2024 GMT
Not After : Apr 5 06:00:00 2025 GMT
Subject: CN=9BAB33B1A76314B65752C94E93D5280BD708F016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:10:d5:81:8c:4a:82:71:af:d1:ff:3f:70:
ef:b1:ad:4d:d2:e3:62:c9:da:49:88:e8:3d:e4:0f:
dd:b5:ee:61:da:fc:74:da:53:8c:b8:1a:a4:dc:5c:
71:36:bd:88:c0:af:a3:74:2d:36:8e:b1:1d:c2:95:
5c:a3:99:68:e8:70:91:f8:63:8e:d3:eb:a4:a7:35:
11:64:e7:48:14:ca:80:27:05:96:8b:59:89:bc:b8:
a0:ef:a6:60:03:d9:fa:11:f2:c3:8d:91:23:2b:56:
c8:b4:7c:c0:17:7e:70:8b:95:45:2a:70:af:78:50:
fb:5c:09:74:af:f0:4a:71:71:9d:6a:fb:54:e1:10:
bb:eb:a4:10:08:c2:fe:ae:e4:e5:3c:d1:4b:cb:7e:
8e:e7:af:a7:55:bc:63:e7:f3:bf:35:ca:79:88:c4:
50:b7:00:38:ab:27:e2:57:56:e4:49:ce:05:22:be:
b7:c6:4d:8f:91:fa:fd:b5:3d:f3:56:05:96:67:53:
aa:66:6c:e0:11:ee:01:ce:aa:aa:23:f5:02:c6:77:
34:0a:89:d4:fe:4b:34:3c:b4:b9:ec:3c:54:7e:ae:
41:a2:06:40:aa:3a:46:6e:c4:ac:45:d8:53:80:9a:
9a:00:93:c2:5b:d2:87:63:05:46:ac:79:3a:be:32:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:33:B1:A7:63:14:B6:57:52:C9:4E:93:D5:28:0B:D7:08:F0:16
X509v3 Authority Key Identifier:
keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.205.0/24
Signature Algorithm: sha256WithRSAEncryption
68:37:84:87:34:d1:9b:23:f2:2e:60:b7:66:2c:d8:5c:0f:a9:
59:54:ee:97:0e:ad:64:ee:bb:54:0b:b4:78:b5:38:4f:dd:89:
4b:5c:92:cf:18:d4:20:20:9a:3a:5a:07:b1:01:4b:b9:15:59:
4a:b6:3a:ff:e7:c4:93:d9:61:c5:30:2a:7d:c9:7a:87:50:07:
33:14:5b:9c:99:ba:38:51:20:f4:76:7e:d5:27:53:97:33:f5:
93:4b:f0:84:3e:ac:62:57:38:5f:50:3f:f9:d6:57:f3:13:38:
ac:36:a7:f0:ce:cb:52:8e:10:64:dc:31:bb:f3:a6:b7:6e:59:
99:8e:8c:02:77:83:98:66:dc:f9:a5:af:60:74:a6:00:ec:9d:
09:fd:b9:48:4a:3c:48:70:a7:2d:75:dd:6f:ac:25:e4:81:d3:
c3:a0:dd:df:6d:f4:0d:9a:56:a7:a2:0c:47:09:5f:79:36:a7:
47:46:2a:99:68:cf:d3:36:92:51:f5:48:72:cd:6e:5c:61:09:
bc:7f:0a:82:ca:b2:b3:81:fb:5e:d7:fb:68:aa:ec:86:06:71:
6d:09:20:9b:60:b5:3b:ed:dd:9c:05:8c:65:3a:57:7b:22:c2:
78:07:ff:b3:c9:b9:7e:2c:0f:26:dd:1e:5e:38:1c:f4:50:92:
d2:c7:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:31:12 2025 by rpki-client