Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa
File: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (raw, json)
Hash identifier: EIBsIb0Y5G2vcACmxDaKACprW6inYDKlhaSCRoDfdpA=
Subject key identifier: 43:97:13:8B:6A:EC:34:5D:1A:FA:DF:45:AA:87:40:B1:C4:86:3A:F4
Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Certificate serial: 2DB986DE757AD9752CB1D3B91B87DDC5531A4881
Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa
Signing time: Sat 27 Apr 2024 12:00:01 +0000
ROA not before: Sat 27 Apr 2024 11:55:01 +0000
ROA not after: Sat 26 Apr 2025 12:00:01 +0000
asID: 149671
IP address blocks: 103.185.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b9:86:de:75:7a:d9:75:2c:b1:d3:b9:1b:87:dd:c5:53:1a:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Validity
Not Before: Apr 27 11:55:01 2024 GMT
Not After : Apr 26 12:00:01 2025 GMT
Subject: CN=4397138B6AEC345D1AFADF45AA8740B1C4863AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:8c:b4:c9:06:e3:f9:ec:70:9b:7c:83:e3:
99:81:16:65:e9:e2:26:ce:37:59:57:18:47:2a:5e:
84:e2:05:f8:5a:07:db:3b:b8:e2:b6:01:46:8a:ab:
4d:fd:ce:50:77:c8:0c:66:68:2c:4c:41:79:c6:93:
55:c0:0c:6e:5d:2a:19:fd:a7:a7:fd:bb:82:c6:8b:
a4:9e:0f:85:38:20:60:5c:f3:44:27:18:29:42:8d:
a7:99:2e:d4:59:73:8d:fb:f1:97:cb:0d:e1:9b:54:
d1:76:ca:ba:db:a8:53:98:fa:b0:21:5c:d2:17:11:
97:2d:ab:7b:95:50:89:be:7e:9a:17:c0:79:d8:26:
04:5d:f0:18:13:35:57:5b:c6:bb:36:2b:24:92:0a:
6e:31:27:44:ef:f9:aa:8b:91:d0:dc:c1:eb:08:7b:
32:c0:02:d4:43:cc:08:4b:63:ea:0c:bb:22:d3:a6:
7f:64:9f:3b:3e:7e:c6:66:91:8d:4b:9b:aa:78:ca:
f1:ed:77:04:5f:21:61:9d:8b:ca:1e:ef:9b:78:75:
a2:b1:53:4f:64:fd:bd:41:97:5f:c1:31:07:a9:91:
7a:16:7a:10:80:57:95:d8:25:c3:77:67:a1:29:23:
b2:83:bc:1d:77:43:38:b4:8f:b8:c4:fe:ee:0d:cc:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:13:8B:6A:EC:34:5D:1A:FA:DF:45:AA:87:40:B1:C4:86:3A:F4
X509v3 Authority Key Identifier:
keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.46.0/24
Signature Algorithm: sha256WithRSAEncryption
64:96:47:68:33:c8:80:00:b8:7a:ec:21:b3:bf:71:7c:73:3d:
27:7b:fd:ee:02:52:a9:e5:b3:d1:b6:44:e6:fb:0d:47:09:36:
2f:24:ad:95:a3:61:75:12:96:82:4d:30:2e:59:30:27:a5:7b:
0b:82:10:37:b2:78:6d:3a:51:6a:11:ce:49:93:73:a9:62:91:
65:62:68:b9:e3:68:a5:34:9e:58:2a:3b:9a:0f:9e:ab:1e:74:
af:33:fe:89:35:64:18:88:da:de:d9:cd:a6:c8:8d:66:2f:fc:
e2:18:f2:22:4d:70:c4:5e:6b:e7:b4:ad:a9:72:c9:ac:0f:c4:
10:a1:53:ac:81:13:19:51:39:71:e3:26:fc:5b:8a:16:f3:41:
3c:7a:4b:e6:d8:39:59:a3:12:32:17:ac:0b:58:87:b1:f2:a4:
f0:1b:33:31:fb:5d:8d:f4:0e:5b:23:6c:29:be:31:b1:b8:2f:
6f:21:89:34:4a:27:d3:13:34:f6:93:65:02:ee:db:63:c7:10:
3c:10:68:e4:9b:0c:7b:d6:90:98:35:84:0c:6e:a7:5c:30:49:
e9:e0:bd:3e:98:8f:cd:a7:f3:df:88:25:bc:ad:28:de:69:eb:
c9:cb:cb:8c:62:bc:32:23:7e:9d:d7:ac:29:3a:90:74:9e:fc:
f5:26:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:56 2025 by rpki-client