Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
File: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=
Subject key identifier: 06:D6:77:67:37:E3:59:0E:AD:13:68:80:BE:5D:EB:CD:52:E5:0C:EE
Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial: 6A1524D64F736ECC042118AF47FEAC2450FD1E18
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
Signing time: Sun 12 Jan 2025 09:00:02 +0000
ROA not before: Sun 12 Jan 2025 08:55:02 +0000
ROA not after: Sun 11 Jan 2026 09:00:02 +0000
asID: 9341
IP address blocks: 103.179.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:15:24:d6:4f:73:6e:cc:04:21:18:af:47:fe:ac:24:50:fd:1e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
Validity
Not Before: Jan 12 08:55:02 2025 GMT
Not After : Jan 11 09:00:02 2026 GMT
Subject: CN=06D6776737E3590EAD136880BE5DEBCD52E50CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:c5:e7:39:6e:54:e2:95:4e:52:60:ab:8a:
4b:1a:aa:99:0e:a7:5e:dd:00:2e:a9:aa:76:2e:c8:
4e:90:cb:ee:e6:f7:1e:4b:79:16:0c:4f:fe:09:44:
83:9d:ce:5a:74:ed:35:95:e9:d8:ef:d3:f7:49:e4:
0a:59:1b:a8:45:97:de:af:9a:28:d0:df:9d:6a:2c:
5b:be:15:ea:5b:04:0b:98:c9:4d:5a:4a:76:fd:fe:
32:d7:93:e0:8c:89:ea:65:f4:f6:4a:68:13:e4:83:
4d:75:d5:57:15:0e:6b:ce:8b:6e:cc:1e:0f:30:39:
ea:65:41:a1:14:19:95:2d:43:7e:3c:43:26:c1:0b:
e1:41:79:46:36:33:b2:23:b6:bb:d9:15:08:43:bb:
79:6f:43:fc:a1:83:59:6c:d4:29:91:da:18:88:f5:
1b:72:b0:a3:7b:bf:c6:8d:aa:38:41:9c:73:a3:70:
6d:92:99:8f:0e:07:5e:bb:29:57:fc:8c:16:78:90:
1e:4c:77:2f:98:14:38:0f:90:b3:60:96:d4:cf:6f:
a6:54:78:a8:77:ef:08:af:cc:29:ca:de:49:73:39:
9f:32:ea:36:c6:0d:87:19:98:46:96:a9:cb:a4:07:
28:1b:09:cb:12:e8:a7:14:9b:88:b6:b5:7d:76:5a:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:77:67:37:E3:59:0E:AD:13:68:80:BE:5D:EB:CD:52:E5:0C:EE
X509v3 Authority Key Identifier:
keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.249.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f0:d2:c4:2f:b5:28:bc:66:13:7d:77:2d:d8:a7:c6:ad:ca:
15:63:93:0d:a7:97:08:e9:c4:a2:a5:cc:fc:a3:2b:e0:df:67:
cb:80:36:b9:91:37:d8:7f:ba:06:36:2f:e7:13:f4:51:76:be:
de:fb:0d:4d:da:58:39:bb:c5:98:f9:dc:d4:39:ca:e2:0e:e5:
8d:34:db:8a:f1:72:7f:f9:48:ae:e4:d4:92:15:01:93:11:08:
50:9f:a8:97:05:b4:06:d1:ec:c4:d7:49:98:cf:04:e4:cf:de:
a8:11:4d:53:a6:94:ea:61:b6:5b:aa:32:6e:75:1f:33:ad:28:
65:87:12:9a:7f:b8:45:9e:3d:6f:05:72:2d:5b:05:a2:56:1b:
c2:b2:74:17:39:12:3e:11:d6:ff:1e:d8:cd:f6:1f:67:67:2a:
4a:0c:47:a6:1a:0e:aa:1f:bf:bf:41:c4:04:9c:53:f2:7b:09:
96:b6:4f:9d:4a:5a:bb:01:cd:f2:cf:84:67:13:c3:e1:b5:a7:
56:db:02:a5:45:f7:ae:08:ca:04:d0:24:62:5d:a1:66:c9:4b:
b2:7e:ac:97:71:de:1d:ae:af:4c:e6:ec:ae:8c:57:fd:96:dc:
15:39:4b:10:4e:1d:98:3e:b5:83:4c:b2:2a:48:0a:26:68:eb:
a2:48:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:30 2025 by rpki-client