Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa
File: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (raw, json)
Hash identifier: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=
Subject key identifier: 2D:65:DB:FB:19:F1:D4:45:08:38:81:6A:11:34:91:C3:CB:CE:15:64
Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Certificate serial: 07883EF8B2E3BB115ABAEF845582761E943EA67E
Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa
Signing time: Tue 28 Jan 2025 04:02:10 +0000
ROA not before: Tue 28 Jan 2025 03:57:10 +0000
ROA not after: Tue 27 Jan 2026 04:02:10 +0000
asID: 141905
IP address blocks: 103.164.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:88:3e:f8:b2:e3:bb:11:5a:ba:ef:84:55:82:76:1e:94:3e:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Validity
Not Before: Jan 28 03:57:10 2025 GMT
Not After : Jan 27 04:02:10 2026 GMT
Subject: CN=2D65DBFB19F1D4450838816A113491C3CBCE1564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:0f:0d:b6:af:de:c6:56:7f:63:10:ab:97:
e1:b8:51:a0:a9:45:64:69:18:50:ca:ea:98:79:55:
ba:c2:91:83:10:15:e1:ea:38:7c:f4:86:45:e0:3e:
66:41:82:21:61:75:fd:0a:5e:c2:15:2d:d0:d9:e9:
cc:5a:dd:07:ca:c1:a0:0b:97:19:2e:e5:cf:fa:53:
40:62:4f:2a:6b:47:c5:14:d1:28:e8:a9:38:5a:4e:
11:20:1f:30:35:f5:94:5e:34:84:d4:56:2a:b2:d1:
58:96:62:27:a8:7b:7f:bc:25:1e:69:e0:84:ae:10:
a5:c0:f3:d1:e0:a8:fd:6d:fd:0c:f5:cf:51:28:b9:
7e:53:aa:37:a6:70:e1:5b:29:9f:86:af:73:52:9e:
67:c9:58:bf:74:4e:0d:49:e5:4e:16:b3:b0:3f:94:
1a:2e:76:e3:04:b4:1f:60:84:69:46:cd:1e:62:08:
e1:e9:65:5b:22:e1:be:67:21:d2:cf:ef:10:1f:af:
78:a6:58:4f:be:ee:91:85:1f:1a:04:17:a8:31:09:
07:a3:0f:6a:65:22:0e:4f:59:28:d7:69:24:18:e0:
5f:00:c9:5f:65:ea:ae:f1:b1:fd:8b:05:c0:fb:6f:
e2:7f:f5:fa:9b:a3:f3:98:7f:eb:da:5b:36:7f:d0:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:DB:FB:19:F1:D4:45:08:38:81:6A:11:34:91:C3:CB:CE:15:64
X509v3 Authority Key Identifier:
keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.84.0/24
Signature Algorithm: sha256WithRSAEncryption
31:62:de:4c:0a:d8:36:e0:e3:2f:81:3b:be:6e:84:f6:06:6e:
b9:9c:5c:ed:66:2d:0f:bc:4e:08:2a:c1:e4:2d:61:c2:89:cf:
41:3a:85:da:bd:25:ce:f0:9c:ad:18:b6:d5:52:d6:71:ea:29:
14:52:41:73:ac:8a:10:ef:ce:87:5f:2b:e4:4b:46:f5:c9:b6:
24:70:de:5d:ca:e9:17:6a:72:e7:cb:f2:87:70:0e:3d:28:83:
01:7b:30:fc:1e:39:0c:40:52:10:0f:b6:9e:43:21:7b:73:16:
05:3e:0e:fe:26:0c:57:4e:1d:83:cb:ec:04:33:8f:b0:95:3f:
f1:4c:f0:d6:f2:ec:0d:a0:9d:00:a9:d9:8f:18:cc:dc:a3:c9:
d2:a7:4a:ba:e5:b0:9b:ec:dd:d5:fb:38:fd:a4:b9:3a:31:92:
66:39:ee:a6:d8:6e:2b:9a:c0:c1:25:24:6b:91:cc:bb:27:ca:
1b:6a:92:c1:55:72:70:ec:8e:09:a4:44:59:da:d3:f1:95:73:
22:25:a3:02:89:0a:42:bd:f3:d9:8f:fb:21:5f:8d:4f:fc:a9:
f6:87:17:d5:21:f4:2b:23:10:3e:cd:ca:8c:a2:4c:a3:61:a3:
2f:9f:16:f9:d7:9f:05:b6:6b:b7:61:40:78:83:d5:a3:d0:67:
6a:cb:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:43 2025 by rpki-client