Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: mDy6hC1U6WmBDKri9/UUp28n7RxhG+FOJuKv2QP4Fd0=
Subject key identifier: 44:33:70:BE:23:D2:34:34:FB:A2:52:20:CD:C6:DD:34:F5:72:5C:E2
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 570061922F05FEAE40AA1F98E66D6D5C1CB02386
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa
Signing time: Wed 17 Apr 2024 05:02:01 +0000
ROA not before: Wed 17 Apr 2024 04:57:01 +0000
ROA not after: Wed 16 Apr 2025 05:02:01 +0000
asID: 38496
IP address blocks: 117.103.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:00:61:92:2f:05:fe:ae:40:aa:1f:98:e6:6d:6d:5c:1c:b0:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 17 04:57:01 2024 GMT
Not After : Apr 16 05:02:01 2025 GMT
Subject: CN=443370BE23D23434FBA25220CDC6DD34F5725CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:59:f6:1c:9b:5b:c7:14:f6:ba:27:89:87:
cc:1d:41:18:bd:ee:2c:33:80:94:be:66:97:76:a2:
5d:ed:2c:0e:23:f5:f6:4c:d3:76:dc:59:fd:c2:46:
30:f8:33:b8:32:cf:e4:e4:32:5c:ef:28:42:7b:dd:
cf:63:74:e1:4e:7b:f4:3f:8a:67:2a:19:c8:2d:fb:
2b:d4:fc:55:79:ff:9b:60:3a:7e:32:4c:e8:15:d4:
6a:1e:ef:9c:6b:32:7c:e4:36:66:98:6a:0e:5b:58:
8a:31:1d:37:3c:03:fd:55:e3:24:b1:7b:3b:88:55:
10:70:06:f4:6d:d7:17:90:f5:75:b5:60:da:7f:0f:
58:5e:05:31:76:82:40:25:bf:c9:07:24:d8:ff:e7:
d1:d1:12:06:6d:0b:64:25:fa:fd:b9:22:5b:f1:e1:
ae:9d:e1:1f:11:9d:8f:7b:c8:0b:d6:b0:22:3f:1e:
92:56:87:94:f6:8f:86:97:db:c0:81:a5:9a:34:ad:
f9:e9:4e:d9:3e:73:ab:8d:ef:60:74:0e:fa:78:a0:
f4:09:70:3d:43:57:4a:34:92:4a:d6:36:64:24:fc:
ae:a1:4f:77:2f:31:df:2a:a0:ce:10:79:90:db:b4:
d4:80:00:72:53:53:13:95:ad:4c:f3:59:ee:57:f5:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:33:70:BE:23:D2:34:34:FB:A2:52:20:CD:C6:DD:34:F5:72:5C:E2
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.12.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a8:c9:f9:0e:20:1d:db:3f:c1:fa:23:1a:6d:1a:0c:00:2c:
86:54:4f:ff:b2:fd:27:92:84:35:30:14:de:f7:47:4a:b7:b1:
cf:d7:25:24:e6:43:7f:0d:aa:f8:d6:d5:fc:ae:85:32:cf:96:
e4:11:af:02:e3:46:04:f8:00:15:2e:2b:94:83:54:4e:b9:da:
62:1a:08:5e:90:c6:a3:2f:de:82:9f:6b:9f:c1:a6:80:c5:8c:
93:6b:53:26:b9:18:c7:ce:9c:68:18:1b:5d:36:7c:c8:0a:a9:
dc:03:1e:01:3e:f7:8c:8f:95:6f:5e:7a:46:df:30:4c:01:1b:
bb:d1:ad:8a:68:ba:67:88:02:a1:a6:e8:94:4b:96:46:39:74:
11:e7:e7:be:e1:3b:2c:2e:d1:3c:cc:56:37:49:17:8c:83:e5:
3b:07:65:8d:e4:d3:43:00:81:36:d5:c9:61:ed:69:e3:eb:41:
11:fc:0e:35:2e:fc:46:a5:76:f3:1c:62:7f:79:b8:c7:9f:ec:
79:50:28:5f:20:9b:8b:51:ef:81:27:24:db:27:f7:9d:89:44:
90:b6:1b:a8:a3:b9:8f:eb:fc:37:79:70:97:04:ae:29:eb:30:
82:a7:fd:54:e2:87:bc:3e:cf:5e:05:28:e8:5a:d5:92:aa:3c:
aa:04:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:36 2025 by rpki-client