Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
File: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=
Subject key identifier: 34:55:22:28:3D:FC:14:BF:53:84:BF:AE:48:01:56:52:17:B1:88:F2
Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial: 0A4C2EDFACE9AB13BA6B714F3552346D4A2D34D9
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
Signing time: Fri 04 Oct 2024 08:01:37 +0000
ROA not before: Fri 04 Oct 2024 07:56:37 +0000
ROA not after: Fri 03 Oct 2025 08:01:37 +0000
asID: 9341
IP address blocks: 103.31.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4c:2e:df:ac:e9:ab:13:ba:6b:71:4f:35:52:34:6d:4a:2d:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Validity
Not Before: Oct 4 07:56:37 2024 GMT
Not After : Oct 3 08:01:37 2025 GMT
Subject: CN=345522283DFC14BF5384BFAE4801565217B188F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:b9:cb:07:3c:b7:3e:f7:98:93:2c:90:13:
dd:99:07:dd:ad:e0:51:c4:0b:a1:9c:f4:cc:71:51:
22:b7:21:6f:92:6d:7c:28:24:a5:21:c2:ae:69:b8:
09:26:f8:bc:42:13:35:bf:d7:be:18:c9:9a:dd:91:
c7:68:90:df:c3:7e:db:aa:5d:4b:3e:ae:fe:2a:b8:
fe:84:73:93:b8:89:0a:b2:a3:2c:79:7d:ae:2d:bd:
fe:e2:93:dd:a4:4c:ff:ce:f6:36:f0:4c:75:b2:e3:
09:28:88:f2:73:58:8d:12:6c:02:5e:b9:09:44:c5:
71:50:6c:f2:92:fb:5f:a5:09:98:2b:24:e3:81:91:
7a:b9:d3:c3:b1:f1:df:96:7f:32:82:f8:b7:7a:70:
60:12:27:a3:b9:ab:5c:c0:f1:7b:1a:16:f9:92:9e:
b2:f7:88:5e:84:1c:e2:a7:cc:1b:b8:f3:e5:70:5c:
fd:ad:b1:fc:aa:05:b7:25:32:f4:cd:19:19:e3:f9:
da:2a:af:c1:8d:ae:79:24:9a:e3:da:72:05:8d:6b:
ca:d9:a8:08:58:b7:47:e6:32:87:f4:c9:9e:f1:c6:
27:3a:fe:aa:1f:de:72:65:c6:be:cd:ff:f2:78:83:
b9:86:78:73:56:c3:c9:0f:93:89:b4:da:97:a5:63:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:22:28:3D:FC:14:BF:53:84:BF:AE:48:01:56:52:17:B1:88:F2
X509v3 Authority Key Identifier:
keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.42.0/23
Signature Algorithm: sha256WithRSAEncryption
09:0f:71:bc:38:a1:32:da:10:bd:56:6e:89:ae:05:3e:4b:f6:
e2:15:0e:e0:e6:d4:a0:b5:f6:9e:92:ad:c9:15:8f:fa:00:c0:
24:83:81:b3:1e:29:fd:40:b1:5b:18:a0:b4:f5:8c:8b:c4:14:
16:ed:37:c4:b8:da:43:66:47:d5:b7:0c:fc:c1:07:89:ea:eb:
4a:eb:86:32:c5:34:33:c8:c8:a0:70:24:ec:15:73:14:80:bf:
43:cd:a1:79:c6:2d:75:16:56:c3:c3:5c:7c:f2:2e:a9:32:45:
f6:11:a5:d1:b9:23:dd:2d:8d:4a:0b:07:e7:6b:09:8c:2d:a8:
ac:77:a4:39:cf:44:5d:a0:a7:77:00:d4:7a:a0:ab:e7:fd:56:
25:8e:62:de:59:cc:d8:41:8d:a3:ee:f4:da:3a:85:1a:65:b0:
39:22:c5:86:e2:e7:f0:b5:e3:64:a5:55:e7:07:8f:63:1c:e5:
20:36:bb:38:3e:f0:b0:b4:86:f2:a4:ce:8b:ce:2a:e8:eb:0a:
bf:3a:4a:58:7c:fc:c2:f4:72:3e:7f:cd:11:0a:40:46:d1:b9:
7b:db:89:58:15:09:bf:30:aa:e2:55:2d:f9:2f:66:a9:3a:45:
53:12:47:f7:2f:75:f0:77:28:f8:3e:4d:67:9d:48:86:07:79:
c7:cc:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:27 2025 by rpki-client