Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
File: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (raw, json)
Hash identifier: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=
Subject key identifier: 01:DC:9F:7A:96:55:85:24:95:11:EA:ED:DC:34:58:86:7A:90:5B:89
Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial: 3FB78EFDF19837DED0D7F2011835B0343DF81682
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
Signing time: Tue 12 Nov 2024 02:00:03 +0000
ROA not before: Tue 12 Nov 2024 01:55:03 +0000
ROA not after: Tue 11 Nov 2025 02:00:03 +0000
asID: 141957
IP address blocks: 103.166.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b7:8e:fd:f1:98:37:de:d0:d7:f2:01:18:35:b0:34:3d:f8:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
Validity
Not Before: Nov 12 01:55:03 2024 GMT
Not After : Nov 11 02:00:03 2025 GMT
Subject: CN=01DC9F7A965585249511EAEDDC3458867A905B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:db:fe:b5:f4:14:c9:4a:97:44:5d:07:6f:
0e:82:3b:8d:75:81:dc:bc:b9:ee:77:ab:92:c3:b8:
5f:e7:52:23:e4:f1:47:6c:79:52:7d:25:9b:9b:e6:
6c:e2:e3:91:00:8a:31:0f:05:1a:34:15:fa:aa:9d:
4d:90:47:df:ac:d2:c6:1a:99:e2:0e:a4:21:7f:00:
60:b8:f0:ea:08:8f:1d:2b:1e:b0:66:33:79:e7:00:
90:8e:ab:91:6e:63:75:dd:5a:cd:be:0b:80:5d:e8:
bd:2a:00:48:eb:a0:c3:d0:2d:28:7c:af:8b:cc:a3:
be:e7:7c:50:ec:7f:4f:ad:0b:58:cf:0a:bf:5d:6b:
9f:f3:8a:02:28:f1:47:9e:77:06:66:18:1e:b4:03:
a9:68:61:43:bb:f0:83:25:9b:c9:69:62:bd:a4:e9:
1f:f4:c2:dc:54:d1:4e:4b:6a:ff:9a:e7:ec:bf:a4:
d7:14:7d:c2:00:05:19:38:a6:43:03:7a:c0:fa:d6:
04:9d:33:7c:1e:22:03:b4:82:e0:40:92:62:3b:d3:
a6:fa:94:2f:1f:cf:94:6e:0e:a8:5e:4f:66:83:11:
c9:b3:fa:04:01:66:0e:b9:90:14:79:06:0b:6a:4d:
80:2c:06:c9:cc:22:a5:81:4d:f3:4d:fa:4a:aa:85:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:9F:7A:96:55:85:24:95:11:EA:ED:DC:34:58:86:7A:90:5B:89
X509v3 Authority Key Identifier:
keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.212.0/23
Signature Algorithm: sha256WithRSAEncryption
68:08:8e:42:52:0c:38:ad:aa:5f:1d:76:76:9e:00:dd:fa:ec:
55:83:18:55:b5:21:c8:b4:9b:36:1a:2e:28:b3:9c:29:d7:36:
86:d9:d6:ca:20:bf:62:23:77:0e:29:b8:e2:e9:0a:d8:a7:47:
28:1a:8e:83:45:c3:f4:67:90:c3:5b:ae:0d:f2:61:cf:d4:80:
3e:ae:d6:0f:62:0f:cb:15:83:96:65:57:dc:de:85:4b:a7:09:
d8:bf:99:f4:10:9a:16:bb:56:df:21:f6:4c:03:56:08:c5:e1:
e6:dd:2e:34:40:53:6d:0c:14:f0:6f:34:21:bf:8c:56:70:d2:
80:c2:b8:e5:64:4e:e0:16:0e:62:a8:a9:e2:83:98:dc:6f:b5:
7d:e6:48:4b:ac:f4:d1:12:99:9a:e7:31:f8:f1:7e:78:e6:4f:
84:7b:c0:96:12:d2:01:66:d9:e5:19:6a:40:93:f3:56:bf:cd:
82:7d:5d:78:4d:5e:1a:55:c5:c2:d5:86:0a:28:a8:0a:33:5a:
2b:e8:a4:58:38:d5:8f:fa:d9:b2:45:7d:c3:99:9b:99:29:b9:
c5:a9:93:b6:60:56:24:65:a4:e0:1b:6b:36:ab:a9:0c:23:99:
68:4f:87:01:ea:4a:a9:02:6a:ee:c3:41:ba:ad:64:89:18:ce:
8b:39:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:36 2025 by rpki-client