Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa
File: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=
Subject key identifier: 1F:88:3A:7A:5D:4F:CC:42:30:56:FD:C1:AA:D9:91:66:6E:25:FC:3C
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 26B8860311AE9EA4A73336CAAC8C476915E64A16
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa
Signing time: Mon 01 Jul 2024 01:03:49 +0000
ROA not before: Mon 01 Jul 2024 00:58:49 +0000
ROA not after: Mon 30 Jun 2025 01:03:49 +0000
asID: 45722
IP address blocks: 103.94.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b8:86:03:11:ae:9e:a4:a7:33:36:ca:ac:8c:47:69:15:e6:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Jul 1 00:58:49 2024 GMT
Not After : Jun 30 01:03:49 2025 GMT
Subject: CN=1F883A7A5D4FCC423056FDC1AAD991666E25FC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:e5:44:9e:c6:5c:df:7b:2b:7d:fc:ce:91:
fb:6f:cc:83:17:3f:4b:71:19:2b:90:ea:b0:bc:97:
6e:35:2d:ad:37:3f:cf:80:78:5e:58:26:51:48:22:
43:b0:8f:a9:ff:d9:8e:67:ae:78:44:17:d0:18:c0:
d3:d2:ee:62:ae:1b:2f:f1:a8:60:91:01:63:62:46:
77:87:1c:7c:d1:f5:68:28:8e:a3:99:82:8f:27:ba:
4f:cc:73:99:6f:19:16:73:79:71:4f:ae:6e:2a:5a:
dc:6b:6b:14:2b:ca:38:e3:c1:a7:ac:f7:08:5b:32:
2f:96:48:86:b6:77:d2:58:4b:10:96:61:92:7a:97:
41:fe:70:bb:50:33:de:4d:31:06:83:92:b2:f5:a3:
05:89:55:f9:f2:aa:e0:24:f6:99:8b:99:40:a8:ac:
1a:87:5d:5d:28:42:b6:ee:57:11:ae:97:c4:c0:0c:
c2:94:27:7f:6b:18:e2:e3:ae:09:c8:f9:e3:06:49:
98:20:2f:65:0b:4c:62:1a:40:fa:a0:5f:e0:ca:a9:
e0:cb:27:cf:34:ae:bf:18:72:0c:cd:f4:74:47:7c:
2e:a0:dd:fb:ab:46:2f:6e:a5:d6:98:94:60:7d:8f:
66:42:d3:d0:fe:c4:91:a2:3b:86:01:58:70:61:28:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:3A:7A:5D:4F:CC:42:30:56:FD:C1:AA:D9:91:66:6E:25:FC:3C
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.11.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c3:96:f8:78:72:d3:4a:ca:28:e4:2f:b5:64:5d:0c:40:e8:
7a:2f:fc:16:37:b2:14:4f:61:c0:2d:9a:07:8f:0a:7d:bb:3c:
18:84:1f:d4:49:70:89:d7:0d:21:5e:51:2a:2e:8f:8d:9c:6a:
0a:b4:5d:c3:8f:81:ec:94:57:78:31:e9:45:08:69:e0:82:03:
9f:87:ae:55:4d:90:39:35:19:4a:72:b5:ee:28:8f:90:85:52:
47:a0:46:75:07:39:86:51:69:79:34:e0:52:7d:c3:41:13:36:
bc:0f:7c:16:cc:4e:4a:f4:76:96:54:05:f2:f2:71:10:eb:67:
16:c4:37:d4:3e:2a:62:5c:19:e9:9e:b1:47:58:59:8c:18:3b:
63:49:63:a2:7a:d8:a7:ca:a9:a0:57:9e:fc:41:34:d5:52:84:
a9:5c:6b:a1:b2:ca:a7:ee:b1:70:90:44:48:5b:ec:1d:dc:89:
bc:7d:92:97:2c:5d:72:aa:1a:1e:d5:8d:5e:ed:b6:d0:36:0e:
b6:2f:ed:8f:a1:af:39:97:78:64:30:f9:ca:ca:4e:15:9c:0e:
a0:81:d7:42:20:ce:05:c3:45:14:1a:c4:0a:d5:e6:82:6f:5b:
09:6d:bd:27:83:ee:66:60:e4:b8:e1:8c:db:e9:b2:5a:41:39:
b5:46:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:03 2025 by rpki-client