Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31352e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: jdeRb5rlVS5VGUTw0VcOvT43aqiUQFlzmn4fabUv/q0=
Subject key identifier: 5E:A8:08:A2:47:C0:1F:18:BB:EF:1C:F5:16:27:3E:0C:6D:A9:C1:A2
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 68D497D267E815E8967D3A9C6767E7A82FE2FBCA
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa
Signing time: Wed 17 Apr 2024 05:02:02 +0000
ROA not before: Wed 17 Apr 2024 04:57:02 +0000
ROA not after: Wed 16 Apr 2025 05:02:02 +0000
asID: 38496
IP address blocks: 117.103.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d4:97:d2:67:e8:15:e8:96:7d:3a:9c:67:67:e7:a8:2f:e2:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 17 04:57:02 2024 GMT
Not After : Apr 16 05:02:02 2025 GMT
Subject: CN=5EA808A247C01F18BBEF1CF516273E0C6DA9C1A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:a8:4a:11:d3:65:bc:32:58:c1:db:d5:90:
07:99:bc:91:65:93:3b:d1:8e:c7:7b:e2:e1:51:c9:
26:d9:a3:c8:1c:91:88:cd:5e:f2:07:0e:b3:88:bf:
2f:2c:a0:f5:4b:20:85:dc:cf:67:af:30:d6:65:b0:
a9:8c:e9:fa:6d:22:a0:eb:04:63:5f:86:7e:9f:aa:
e4:1b:9c:68:ab:9c:8a:f5:96:67:4d:71:b6:ad:e9:
8e:c6:59:c2:a4:ea:1b:b4:b3:ba:41:42:a0:57:5b:
53:c6:10:f5:75:9d:eb:e0:45:27:48:f2:d2:ac:98:
87:36:b9:1f:57:f7:33:80:ed:29:12:0e:ce:de:b2:
06:6e:57:f6:19:8d:15:d2:7c:18:bb:4f:68:8e:28:
6d:27:79:83:ca:66:fd:af:7a:08:05:b9:71:75:0f:
01:b7:01:1c:2a:30:b3:ea:b9:02:9d:59:38:4f:3f:
1f:ca:94:c7:31:13:5e:08:6f:f9:26:38:65:37:6a:
8f:db:97:bf:c5:ce:fb:cc:39:1a:ff:77:ad:f0:77:
38:ce:79:a5:86:f5:f7:05:f7:53:4d:f0:97:a9:88:
7a:94:4b:51:e4:99:c2:a0:31:fb:30:2e:18:f2:14:
ca:67:a3:30:22:db:cc:c2:dc:15:ba:bc:4b:d3:1a:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:08:A2:47:C0:1F:18:BB:EF:1C:F5:16:27:3E:0C:6D:A9:C1:A2
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3f:60:0b:9e:52:b9:bb:92:c2:d5:15:63:06:89:c6:f5:df:
b4:74:fc:01:8d:98:8c:03:8a:20:25:b2:ca:a7:93:66:0b:35:
f4:5c:bb:50:68:9f:21:04:45:11:ea:32:39:57:aa:5d:43:c3:
40:1e:db:c8:ff:47:4d:bc:77:fc:5c:02:8f:2b:88:90:3e:f6:
bc:5c:7a:46:bc:b7:e8:7f:2a:22:74:eb:f9:30:ef:64:50:3f:
a3:3b:dd:81:97:dd:d8:f5:09:08:4c:c4:b9:2a:a9:c4:19:df:
b0:48:1b:36:80:20:68:df:5e:9e:0c:64:8f:f9:2b:78:4d:a8:
5f:cf:78:41:6c:af:c7:07:ce:b5:f4:5c:94:2a:c8:6d:7e:6e:
b0:5a:2f:04:7f:77:17:62:17:b3:c7:ba:9a:e9:69:a8:6b:1c:
80:c6:bb:c1:2f:2a:29:6d:41:e1:43:5c:38:4a:82:4b:55:28:
11:d4:4e:8b:df:b2:7c:3b:95:04:d3:90:cf:bc:2e:35:94:a0:
c0:96:3c:a3:99:77:e4:e3:a8:e5:8f:9b:29:34:64:14:36:3f:
c0:37:26:5f:2e:92:0f:de:3d:f8:36:89:12:2b:70:26:c8:39:
18:91:ec:e1:69:2b:30:d3:49:a6:49:fc:f6:ac:30:19:5f:e9:
c7:c0:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:12 2025 by rpki-client