Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
File: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (raw, json)
Hash identifier: y11xdr66zpXanICDTD0h0l+8FhlMcSW84VAZEHqoz7c=
Subject key identifier: AA:DD:FD:87:95:11:02:0D:86:11:E4:D0:9A:CE:84:57:27:7A:3A:22
Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Certificate serial: 371C62E4563AE44DA93B397585D95B5848548824
Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
Signing time: Thu 28 Nov 2024 08:00:00 +0000
ROA not before: Thu 28 Nov 2024 07:55:00 +0000
ROA not after: Thu 27 Nov 2025 08:00:00 +0000
asID: 141934
IP address blocks: 103.166.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1c:62:e4:56:3a:e4:4d:a9:3b:39:75:85:d9:5b:58:48:54:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Validity
Not Before: Nov 28 07:55:00 2024 GMT
Not After : Nov 27 08:00:00 2025 GMT
Subject: CN=AADDFD879511020D8611E4D09ACE8457277A3A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:c4:bd:83:25:1e:91:aa:38:a5:65:fe:19:
5e:fe:79:46:df:c6:ba:e1:c6:df:72:26:6b:4b:a4:
21:6b:72:22:47:e5:ab:0a:9a:81:b0:fd:29:86:d2:
4e:c9:56:fa:47:b2:35:48:55:82:9a:85:d2:6b:18:
d7:3a:55:71:cd:5c:df:89:d0:a4:85:3b:a3:b4:5e:
87:eb:a6:4d:62:5d:2d:05:ee:72:ba:dc:e9:49:63:
6a:4c:86:c0:4a:5d:ff:4a:df:ef:ca:1f:f8:36:e9:
a4:d4:0c:59:06:f7:c4:e1:94:68:d0:79:14:24:39:
f2:8f:28:82:05:ab:b9:79:01:14:55:0e:cf:73:e7:
6d:e4:06:e8:7c:50:7b:12:0f:7c:43:52:25:65:55:
af:c1:92:3b:fd:fc:cb:e3:67:41:26:25:0b:31:9b:
21:eb:e0:0b:30:4d:1a:7b:c0:bb:6e:b6:f1:f9:94:
6e:e7:1d:fd:eb:30:12:c0:72:0b:82:9f:8a:c3:4c:
75:5a:1d:42:83:ed:48:69:d1:46:aa:bf:75:a0:99:
b0:61:39:e6:8b:70:ee:50:f9:ad:c3:53:a6:f8:20:
ca:4b:7f:52:1b:75:5d:e8:15:ba:cc:15:cc:c4:2e:
3d:5e:c4:16:bb:8a:b2:76:c1:fd:cd:aa:c6:c0:3e:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:FD:87:95:11:02:0D:86:11:E4:D0:9A:CE:84:57:27:7A:3A:22
X509v3 Authority Key Identifier:
keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b3:79:41:60:ea:a8:65:f2:68:87:b4:3c:7f:f2:59:99:87:
dc:24:1c:42:22:77:03:c9:cc:ac:5d:0d:06:9a:48:0d:5d:fa:
b5:23:7f:8b:cb:70:11:47:0b:a9:7d:e7:cc:22:3a:5d:d9:fa:
2c:0a:ed:f8:a1:26:aa:23:9a:9e:53:77:69:0a:f9:de:cd:bb:
2b:09:9a:92:4b:99:27:8f:fe:09:6d:36:85:46:85:f7:23:68:
1d:48:05:08:da:35:a7:9e:08:7a:10:d1:1a:4a:e8:62:bf:85:
6c:47:ad:e6:4e:01:1e:a4:f3:e1:7a:c3:77:d7:47:16:ee:51:
de:f1:32:7f:2c:2a:00:43:f2:b9:06:60:78:f4:64:62:0e:c9:
e0:83:86:c9:48:de:a8:4e:ff:ab:34:01:cc:65:e0:8d:6e:82:
96:2f:e8:4c:e0:db:21:07:89:6e:4f:26:49:e8:43:91:6e:fe:
67:be:c5:c0:8b:18:c5:d7:f5:10:76:a9:2b:ed:10:68:4c:44:
54:f4:62:c7:c2:42:38:02:b2:2c:b0:66:ec:63:2e:28:19:a1:
81:49:75:e7:48:f0:80:a4:9c:19:75:25:09:49:7d:ce:10:7d:
65:80:ac:8d:d2:39:be:33:eb:fe:f6:b5:d4:54:1b:3c:e1:60:
4b:da:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:08 2025 by rpki-client