Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
File: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (raw, json)
Hash identifier: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=
Subject key identifier: 6E:7A:76:C4:89:74:E1:DF:21:CA:AB:8A:9C:55:5C:55:2C:24:72:5E
Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246
Certificate serial: 26A79250F12912956B35A3E6BCC346EE92DEABBA
Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
Signing time: Sat 29 Mar 2025 03:00:02 +0000
ROA not before: Sat 29 Mar 2025 02:55:02 +0000
ROA not after: Sat 28 Mar 2026 03:00:02 +0000
asID: 141127
IP address blocks: 103.158.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a7:92:50:f1:29:12:95:6b:35:a3:e6:bc:c3:46:ee:92:de:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246
Validity
Not Before: Mar 29 02:55:02 2025 GMT
Not After : Mar 28 03:00:02 2026 GMT
Subject: CN=6E7A76C48974E1DF21CAAB8A9C555C552C24725E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:b2:98:fd:c2:00:e6:32:22:da:a0:13:16:
67:dd:ff:7d:16:0d:5c:fb:83:b9:89:2d:ab:ed:97:
8f:9c:b4:72:4d:6e:c7:14:fe:24:b5:5b:ea:bf:ef:
c0:0e:ea:c7:cf:bc:e8:1f:dc:7d:7d:87:f4:c6:b4:
01:68:b6:f1:d1:fc:ab:c6:1d:d0:27:d3:e4:22:a2:
9b:f5:b1:03:d8:97:2d:7d:b5:2f:c9:64:b4:98:35:
d7:76:35:0b:92:5b:b3:e5:de:56:30:d8:75:01:46:
ec:0d:35:96:b4:58:ff:c0:25:22:b9:8f:1f:9e:06:
ae:d2:1d:2f:84:c7:b3:d1:e0:88:07:c2:cf:89:a5:
87:a0:dd:f5:d7:44:55:ab:dd:cc:ec:fb:40:37:9a:
14:b2:e5:97:ac:c6:31:b6:71:72:9c:91:69:5b:94:
5d:33:60:61:6f:cf:e0:f1:aa:17:9b:1e:4d:96:e6:
a4:e4:db:7e:6b:c6:35:91:46:8f:26:97:88:6a:06:
96:b1:3e:f7:c2:9f:de:96:bc:b9:17:7a:f1:09:40:
be:19:6e:7f:88:9a:73:1a:8d:03:6a:c4:50:8b:53:
d1:92:6c:64:c3:d8:2c:42:a6:4f:d4:4a:0a:f1:73:
bb:ed:7a:25:44:aa:36:cb:08:f4:f4:91:65:52:7c:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:76:C4:89:74:E1:DF:21:CA:AB:8A:9C:55:5C:55:2C:24:72:5E
X509v3 Authority Key Identifier:
keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.121.0/24
Signature Algorithm: sha256WithRSAEncryption
85:78:7b:34:02:43:e4:5b:22:f3:fe:a5:ce:1e:47:51:1c:d4:
4b:48:3d:40:9a:aa:4e:ef:6b:87:d8:62:01:77:db:ed:40:f7:
c0:6b:ab:cf:b9:d8:d6:a6:91:9c:79:bc:a9:08:d9:f8:d0:e0:
a8:06:87:99:85:30:b7:a8:7a:06:54:3b:3c:55:1c:02:7d:a2:
1b:62:3f:e0:02:09:bf:a8:25:2d:e4:09:88:96:92:89:36:34:
57:8d:43:6c:86:29:61:79:4d:63:08:f5:0d:67:2c:6c:0f:01:
92:25:6b:65:31:06:b6:d0:cb:8c:f0:03:ea:1a:ff:f2:79:ba:
5f:fc:a5:3d:18:77:c6:9c:d9:6b:09:53:65:9f:15:a0:56:67:
ed:46:36:8c:fd:26:a6:3d:66:b3:c9:4e:e6:92:25:e9:b7:62:
e3:c8:eb:db:b0:cb:99:39:06:5d:66:32:67:f6:33:6a:00:d4:
7a:0c:f4:5b:93:4a:2d:ea:7c:c8:b8:2a:ff:b7:10:6b:48:b0:
f3:80:8c:b3:f0:14:d3:78:0d:88:e6:d7:aa:70:73:79:b9:f4:
8d:ff:34:0f:27:64:8e:1a:5f:95:43:fc:f0:57:64:f9:d7:6f:
4a:b8:7e:fc:07:37:ed:8a:95:a4:0e:46:ef:83:f0:57:d5:04:
19:08:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:15:06 2025 by rpki-client