Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
File: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=
Subject key identifier: F2:61:A0:7C:E3:73:17:52:19:84:20:0E:4E:00:BB:6A:3E:2E:E3:FE
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 32B7C921F1343D99F1ABB5D8C515611892FCFB9F
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 05:00:00 +0000
ROA not before: Mon 27 Jan 2025 04:55:00 +0000
ROA not after: Mon 26 Jan 2026 05:00:00 +0000
asID: 38320
IP address blocks: 103.29.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b7:c9:21:f1:34:3d:99:f1:ab:b5:d8:c5:15:61:18:92:fc:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 04:55:00 2025 GMT
Not After : Jan 26 05:00:00 2026 GMT
Subject: CN=F261A07CE37317521984200E4E00BB6A3E2EE3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:48:1f:cf:7c:ce:87:27:8c:d3:e2:ba:23:
18:0f:cd:09:e4:0f:87:d7:e7:52:89:91:61:6e:bd:
3a:46:89:25:df:6d:57:7c:4a:9d:ee:01:c0:76:df:
9f:c9:95:1b:7d:3f:1b:a7:bc:0b:10:24:f3:f4:f2:
37:b5:aa:91:11:3d:b5:56:8a:33:83:8f:75:84:8b:
67:04:0d:9d:6a:a0:32:ac:8f:fb:8e:7f:45:be:0c:
85:40:6c:14:ba:50:8b:ba:76:61:6c:70:3e:87:5b:
99:ce:9a:7f:65:a4:63:a7:ce:f6:ae:0f:d4:39:76:
c4:48:4a:68:f1:bb:48:3e:18:32:81:f9:e0:26:31:
d9:5f:2d:62:ad:ba:13:ef:a9:1c:9e:28:59:2c:d4:
fa:a3:2d:02:c7:af:a3:ac:68:0e:5d:1f:96:72:77:
ba:77:7c:79:a7:13:9c:af:6d:58:5b:2b:91:56:8a:
11:37:07:15:29:1a:5d:45:e9:69:49:c8:d5:11:40:
4e:a9:e8:64:13:83:16:04:c4:b3:a9:ff:a9:f2:14:
3d:bf:de:5f:35:2c:15:b0:9c:ec:04:e6:a5:57:55:
7a:82:b4:04:24:d2:f2:ed:b8:f2:92:31:c4:c9:4f:
ca:af:3c:63:98:1b:82:42:61:db:df:7e:92:6d:d8:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:A0:7C:E3:73:17:52:19:84:20:0E:4E:00:BB:6A:3E:2E:E3:FE
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.164.0/22
Signature Algorithm: sha256WithRSAEncryption
19:49:7d:03:b2:a4:fa:fb:0e:b5:ad:70:68:01:6b:fa:0d:d5:
a1:17:6e:9b:89:3f:7c:7e:f4:89:23:fb:06:07:79:6d:50:50:
d7:3f:8f:af:4f:ac:02:da:36:2e:81:16:d1:eb:a0:d5:e5:a8:
92:a6:c5:5b:6a:e2:88:4f:6e:5b:21:1d:bb:86:62:ab:bc:fa:
15:c1:c5:e0:03:7b:07:b1:f1:ad:29:f1:0c:21:08:ee:3c:0b:
4c:5d:0b:3d:06:cb:8a:73:c4:9e:06:92:39:11:3d:a5:81:28:
c6:33:97:cb:68:19:ed:9f:9c:94:42:dd:9b:3b:11:48:48:ae:
2a:4b:61:50:59:0d:48:87:4c:59:fc:8d:e6:5c:a3:d0:b9:dd:
ca:cc:62:40:7f:95:d8:75:ac:1c:71:17:b7:07:e3:ff:88:a3:
33:c8:c2:64:e3:be:c8:e9:a5:dd:94:59:9b:b1:8b:2d:c4:37:
42:7e:eb:fc:d1:cf:be:06:9b:1c:31:0e:9f:87:3d:74:fc:ec:
96:28:d9:c9:f6:33:d5:69:98:84:58:71:a7:34:59:51:11:24:
7f:44:3d:c4:54:e9:e2:52:9e:b7:b0:53:47:a6:79:11:96:65:
3b:d8:60:9e:d1:53:1e:82:d8:ac:88:3e:06:84:f2:50:ea:95:
af:c8:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:29 2025 by rpki-client