Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa
File: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (raw, json)
Hash identifier: JeyEC5GT44T1l/mY8nDqe/JsiSipfq9Qfm+r93xH6/g=
Subject key identifier: CA:D1:6D:F5:28:D4:4B:E9:30:BB:3C:9A:AC:A2:E1:F5:69:3C:1E:60
Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Certificate serial: 202C7AE666BE217F3FB8EDD96D3B17E8BEBB20A8
Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa
Signing time: Mon 13 May 2024 09:00:00 +0000
ROA not before: Mon 13 May 2024 08:55:00 +0000
ROA not after: Mon 12 May 2025 09:00:00 +0000
asID: 147144
IP address blocks: 103.175.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2c:7a:e6:66:be:21:7f:3f:b8:ed:d9:6d:3b:17:e8:be:bb:20:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Validity
Not Before: May 13 08:55:00 2024 GMT
Not After : May 12 09:00:00 2025 GMT
Subject: CN=CAD16DF528D44BE930BB3C9AACA2E1F5693C1E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:c1:cc:8b:6d:39:99:ca:12:7a:ae:33:ba:
eb:4e:2f:ad:f6:a5:d3:07:03:b7:62:be:89:b8:57:
d1:8b:d2:c3:85:90:ea:d3:54:ab:7b:f9:8b:41:64:
b1:ac:0a:d4:6f:f1:e0:c4:e1:11:4c:5d:5e:6b:f3:
b6:13:12:26:a6:2d:3a:a5:22:a7:c4:d5:82:83:00:
9a:8f:0b:89:92:f8:30:43:bc:34:8a:48:55:7d:5c:
f9:19:fc:9c:ec:8f:7f:3f:5d:b8:87:7b:83:c0:fd:
14:98:44:d0:4d:9b:bf:36:49:3a:00:46:a4:df:71:
f6:02:88:82:2e:9f:ff:ce:35:9a:a4:dd:25:22:b8:
e3:84:71:e3:6c:3a:dd:1c:aa:6f:53:0c:7f:ae:6b:
54:a0:7a:73:01:cf:53:1a:90:82:e2:c4:69:52:f5:
80:b0:04:23:41:cc:45:75:cd:39:b2:ae:a3:9b:2c:
95:26:1a:fe:a7:18:2c:e9:6e:42:2b:93:57:8c:bc:
4e:4a:88:d1:bf:cc:71:96:d4:33:66:2b:ae:8d:43:
83:f1:34:02:71:38:07:f6:01:70:a6:30:3f:74:fd:
db:29:a4:f3:a6:f3:dd:4c:e4:f7:dd:43:13:3f:7d:
26:36:6a:cc:9b:7d:de:36:2e:4b:9f:1a:14:d0:e6:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:6D:F5:28:D4:4B:E9:30:BB:3C:9A:AC:A2:E1:F5:69:3C:1E:60
X509v3 Authority Key Identifier:
keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.87.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0d:60:ba:53:f7:c6:14:7c:77:38:48:6d:45:42:36:3b:2c:
1e:ad:68:7d:4e:de:1f:59:5b:3a:13:da:31:41:2d:da:cb:cb:
fd:84:bf:d9:7c:e2:9b:19:52:7f:91:f6:2b:eb:17:2f:cb:4c:
23:64:ca:55:5e:ae:60:6c:5e:bd:5a:5d:b7:0b:7c:81:4e:76:
ee:11:9b:86:2f:3f:83:5b:87:1a:16:c5:14:7d:f4:4c:65:ba:
18:02:be:d5:da:78:58:f6:84:1a:5c:cc:82:f3:64:58:02:b7:
a9:ae:0f:ae:87:38:ee:01:ca:3a:49:22:e2:f1:3e:ec:16:26:
6f:64:ff:5a:d3:a6:99:b9:d9:8d:cb:c2:c6:ab:bc:80:cb:a5:
33:6a:d4:16:b4:65:7d:5b:50:0e:af:04:8d:e0:43:de:50:ff:
b5:c6:42:bb:07:53:6a:a9:a8:9f:fb:36:ad:0a:de:e0:53:89:
76:4f:8e:9d:a9:35:c1:5d:68:bd:22:7b:0d:45:65:6b:02:05:
9e:ae:75:39:4a:e6:b5:55:21:e8:ec:d3:d6:14:fe:23:40:5e:
86:8a:6d:eb:50:df:de:b0:e7:24:e1:c6:ca:9a:13:0d:1d:cf:
fa:75:c5:0d:63:60:9d:b1:51:a8:a0:33:45:b1:d5:d9:d1:b5:
97:c6:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:19 2025 by rpki-client