Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
File: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (raw, json)
Hash identifier: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=
Subject key identifier: C6:41:70:87:BE:3D:67:88:C5:00:03:67:8B:94:69:68:53:AE:EA:B5
Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial: 02598F873F228F04410289CEC38BA2672A93EE5F
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
Signing time: Mon 17 Mar 2025 04:01:22 +0000
ROA not before: Mon 17 Mar 2025 03:56:22 +0000
ROA not after: Mon 16 Mar 2026 04:01:22 +0000
asID: 63488
IP address blocks: 103.233.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:59:8f:87:3f:22:8f:04:41:02:89:ce:c3:8b:a2:67:2a:93:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Validity
Not Before: Mar 17 03:56:22 2025 GMT
Not After : Mar 16 04:01:22 2026 GMT
Subject: CN=C6417087BE3D6788C50003678B94696853AEEAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:d0:d8:2f:1b:7e:96:83:f1:41:fe:37:ee:
ff:20:25:1e:79:a1:67:f2:1b:e4:bb:78:2b:75:32:
83:05:ac:7c:5a:d1:1e:0a:5e:f5:e9:e3:5f:ec:b8:
3d:30:f1:b1:1e:5d:4f:54:9b:1b:72:02:c0:80:27:
d1:d1:a4:f9:eb:8f:1e:9a:4d:ad:ce:a7:06:ad:49:
3a:5a:76:28:e4:32:fb:b4:3a:0e:a9:1e:d1:0d:eb:
d7:de:a7:6f:e8:e9:a8:9b:cd:30:1e:da:ee:56:b3:
1f:f7:e2:4a:b1:f8:68:14:3d:d5:91:e0:71:0b:cb:
ef:9e:e1:77:eb:d1:fd:2d:88:d3:8d:3d:02:e1:24:
96:6f:d0:71:b6:3e:29:a0:84:8f:15:01:cb:af:d2:
b8:c5:34:53:27:43:55:e6:85:f7:6f:32:20:eb:bf:
c2:6d:e0:b9:62:79:42:0f:e6:4e:94:2f:03:45:94:
a2:d9:61:63:80:6f:ba:b4:bc:35:5d:f5:9f:1b:34:
d9:d3:3a:ea:07:f6:3e:0e:85:26:1e:a5:c4:24:8d:
56:82:c0:87:e7:4e:1d:76:92:d2:de:7d:fd:85:86:
09:de:82:64:f3:9b:ce:b6:87:3a:e4:de:dd:c9:8a:
10:2a:46:f4:37:bc:ef:6f:db:d9:80:80:5a:26:1a:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:70:87:BE:3D:67:88:C5:00:03:67:8B:94:69:68:53:AE:EA:B5
X509v3 Authority Key Identifier:
keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.111.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7a:18:87:d7:6d:ca:1b:28:c3:45:d5:ff:fe:77:aa:c4:77:
aa:da:7e:59:f4:69:24:cb:99:e6:b6:fc:13:23:21:05:2c:35:
6d:3a:91:9f:9d:1c:f7:bf:62:c0:4c:f8:d0:de:db:a4:9d:52:
62:7c:f2:29:be:2f:b1:98:92:9c:e6:26:63:1d:c2:eb:28:ce:
f6:2d:99:0c:da:b6:89:ec:fb:d3:57:90:bb:77:2a:d4:ff:39:
96:3a:0d:d4:83:95:97:23:bf:8b:ec:0d:90:3e:56:6e:2f:ae:
30:27:b2:4a:7f:34:b0:a6:54:b7:98:d9:35:af:fc:2a:87:4a:
8d:bd:0b:10:d2:fb:8d:c0:ec:19:a9:d0:47:7e:c4:f3:e2:a9:
a2:40:8d:73:50:f0:9f:fd:ba:f8:a0:d4:e3:46:7c:22:d1:b5:
e7:0e:ee:1b:88:e2:57:26:34:0a:ea:64:e7:54:2a:eb:87:fd:
14:70:ae:22:0e:47:16:2c:4c:50:5d:47:56:bb:33:fb:42:0c:
18:39:a5:59:ee:f9:6d:e2:91:a8:c0:ca:87:76:7d:00:58:93:
3a:74:e5:cd:8f:a2:64:54:57:db:ce:98:3d:40:97:80:28:fa:
2d:63:97:be:23:7d:72:bd:c5:4e:d7:8f:09:c9:fa:69:64:3b:
b1:18:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:44:04 2025 by rpki-client