Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa
File: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=
Subject key identifier: 79:89:09:21:3B:4A:5B:F8:F5:C6:39:04:87:C3:CB:D6:67:3F:EF:D7
Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Certificate serial: 398F608E6D442DE3B42E8F673EF4735B28D019B6
Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa
Signing time: Fri 13 Dec 2024 03:03:24 +0000
ROA not before: Fri 13 Dec 2024 02:58:24 +0000
ROA not after: Fri 12 Dec 2025 03:03:24 +0000
asID: 151503
IP address blocks: 103.215.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8f:60:8e:6d:44:2d:e3:b4:2e:8f:67:3e:f4:73:5b:28:d0:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Validity
Not Before: Dec 13 02:58:24 2024 GMT
Not After : Dec 12 03:03:24 2025 GMT
Subject: CN=798909213B4A5BF8F5C6390487C3CBD6673FEFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:e4:a1:5e:d1:69:88:83:a8:55:01:e9:54:
54:b1:e4:21:f6:7a:9c:ec:1a:d1:2e:bd:c1:20:f9:
36:3b:b1:53:17:2f:5f:af:f0:f4:fa:76:5c:8e:76:
cd:59:87:03:d8:dd:d0:39:d3:e1:04:e1:8f:95:07:
8f:f5:1c:ff:84:9a:e4:74:da:b0:7c:f9:02:00:4b:
a7:01:e4:22:07:8f:40:bf:03:76:62:49:69:11:95:
8a:e6:de:39:4a:2a:60:cd:27:c1:4b:79:81:41:f7:
53:7b:3f:e8:29:57:49:d4:44:5f:b1:09:9d:df:3b:
8d:85:50:68:bc:55:0b:18:43:76:b7:66:f4:59:87:
88:68:b8:a3:06:6e:e8:bd:0d:c8:c7:24:4b:33:f6:
d8:db:62:f3:95:6b:21:bc:51:47:6b:a1:d3:cb:88:
66:0b:12:6f:41:84:de:db:fd:52:16:d4:ff:8e:6f:
0c:9c:26:70:6b:e5:c2:3f:eb:79:da:44:f4:f6:cc:
09:c7:c9:90:f4:0c:cd:fc:99:7a:23:59:ed:7d:c6:
2e:b6:20:83:08:7e:82:96:10:65:42:10:6e:d6:a1:
62:1d:92:36:ba:c9:83:93:64:71:56:2c:88:a9:48:
f1:5c:d0:20:b1:f5:4a:0d:67:4b:a7:06:78:99:ca:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:09:21:3B:4A:5B:F8:F5:C6:39:04:87:C3:CB:D6:67:3F:EF:D7
X509v3 Authority Key Identifier:
keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.60.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fd:1e:65:73:8d:c8:15:0b:60:3a:6f:a5:c1:52:96:fb:80:
f0:66:73:d1:cf:d0:51:63:c3:af:58:67:bd:60:c1:e3:aa:7a:
6d:fa:63:4d:b4:1a:b7:48:cf:08:4b:ea:9b:07:e4:3a:24:b9:
85:77:39:9f:2b:5b:5b:6c:ca:8a:57:da:5e:cc:61:e8:89:59:
b6:ab:f1:ff:24:06:5b:0b:1f:a6:bf:8f:74:9e:d5:dc:bf:57:
55:f3:0b:39:ab:d6:ca:7c:80:e9:ee:f8:c0:91:05:d4:e3:af:
18:5f:3a:5f:6d:93:fb:a2:5d:33:d3:92:71:84:aa:6c:f1:32:
5e:e6:ae:64:68:ea:01:fb:1f:8f:79:4c:2a:38:3f:9e:a4:80:
58:74:c3:a3:1d:03:d5:72:04:11:e4:eb:7c:27:72:95:4e:44:
03:7c:19:2d:51:ab:e5:81:19:3c:b9:78:b5:eb:ec:df:35:2b:
16:fa:0b:03:76:cd:1d:bd:46:f8:62:ec:e6:f7:1b:d1:92:51:
c5:6b:a8:e3:05:19:ca:94:b7:85:23:45:d7:f4:ff:43:11:96:
ac:53:df:94:ba:e8:10:7f:ff:6b:56:11:ca:e8:2b:b6:14:4d:
aa:26:c9:37:c0:e8:1c:40:fd:97:67:54:83:a2:5d:98:77:e8:
e7:53:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:54 2025 by rpki-client