Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa
File: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (raw, json)
Hash identifier: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=
Subject key identifier: 04:75:D4:11:C1:A6:62:41:74:8A:E5:89:5C:46:06:42:0D:B5:C9:EF
Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial: 33F69E578027F887B46273DEC1B10832DAD71A48
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa
Signing time: Thu 16 Jan 2025 17:01:38 +0000
ROA not before: Thu 16 Jan 2025 16:56:38 +0000
ROA not after: Thu 15 Jan 2026 17:01:38 +0000
asID: 63506
IP address blocks: 103.40.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f6:9e:57:80:27:f8:87:b4:62:73:de:c1:b1:08:32:da:d7:1a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Validity
Not Before: Jan 16 16:56:38 2025 GMT
Not After : Jan 15 17:01:38 2026 GMT
Subject: CN=0475D411C1A66241748AE5895C4606420DB5C9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:7d:a5:26:59:af:36:cb:8a:5e:a2:b8:61:
17:56:88:11:f5:e4:ef:49:33:f0:17:92:67:13:d0:
f6:32:a7:d6:91:ff:f9:32:a2:40:7f:7c:e6:60:e3:
43:30:fb:fa:ec:86:6f:25:42:fb:99:f0:a5:0e:19:
44:31:5e:c9:e5:70:6b:24:12:7d:35:a9:4e:8a:4d:
f0:16:a4:db:b3:94:21:bd:00:f7:d4:d0:a8:c9:92:
02:a2:27:2b:59:82:d0:f0:ad:02:fa:5d:8e:95:a7:
20:8a:41:24:77:e7:3e:3f:3f:e4:e1:c1:c6:b9:f8:
79:60:ef:36:32:78:07:9b:2e:cc:a1:19:3e:24:ca:
c4:cd:4e:a6:58:43:f4:28:c1:73:6a:d3:2d:7c:c5:
ba:e5:55:62:0f:8c:70:97:4c:9c:99:00:7f:9d:44:
62:f3:20:e8:cf:89:7b:63:16:8a:af:8b:8a:b9:16:
39:ce:65:e9:1f:5c:50:ce:27:b4:0f:b1:0b:9f:ba:
7a:f1:a9:8e:bb:f9:70:0a:3c:07:ea:e6:8b:a9:52:
f0:47:21:56:e8:1a:d5:0b:c8:eb:33:50:1b:10:86:
ac:5b:52:d5:95:a4:be:96:4f:c1:9a:65:39:44:3d:
fe:e7:eb:82:df:19:af:92:b7:8f:51:ca:42:a3:03:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:D4:11:C1:A6:62:41:74:8A:E5:89:5C:46:06:42:0D:B5:C9:EF
X509v3 Authority Key Identifier:
keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.94.0/24
Signature Algorithm: sha256WithRSAEncryption
60:05:76:22:1a:fa:38:10:9d:3c:ad:9a:ff:63:14:d7:81:d7:
2c:93:21:6f:e5:34:4b:a9:40:4e:1e:5a:e5:d4:99:bb:85:3f:
d5:f9:d5:d1:91:d1:d2:17:98:2d:46:d0:2c:78:a1:f2:05:28:
f2:e7:fb:8a:cf:fb:2c:a2:62:33:ec:bc:67:d6:c6:dc:90:a7:
31:4f:11:b0:b2:fc:a0:09:67:33:0c:fb:b2:b1:09:34:7d:4a:
cc:fe:cc:5a:dd:96:47:c1:06:c4:f8:fd:07:66:36:84:72:c5:
d3:2b:10:c1:88:e3:8b:ad:9b:f3:50:32:7b:b0:78:cf:dc:c3:
23:25:60:77:01:15:30:ea:73:2a:e5:3d:c7:9b:ad:33:13:01:
5d:8f:1e:6a:4c:0f:69:1b:50:c6:7c:8c:40:2d:dc:fd:29:f1:
7e:24:52:5b:0c:e0:6c:0e:2c:77:f1:c8:64:51:5d:f3:49:28:
7a:1a:a4:be:36:61:79:1a:c7:0f:da:11:75:d7:64:78:26:7c:
b3:8a:e2:cc:b8:9c:81:71:c7:18:56:04:ca:df:09:19:4d:94:
36:23:de:b7:42:cb:60:ae:b3:1a:5d:8f:f7:d4:87:ae:44:85:
6c:35:71:ee:f1:d1:ba:a5:5b:03:c0:53:2d:41:93:5b:9e:f9:
3a:58:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:05 2025 by rpki-client