Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa
File: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=
Subject key identifier: 69:18:02:B8:1C:1A:08:9B:85:01:6C:84:33:B4:5A:C1:BA:CE:BD:9E
Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial: 0A1F7AD299C024F0A8B62288A5824A9F1EEC7DC3
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa
Signing time: Fri 03 Jan 2025 09:01:56 +0000
ROA not before: Fri 03 Jan 2025 08:56:56 +0000
ROA not after: Fri 02 Jan 2026 09:01:56 +0000
asID: 58816
IP address blocks: 103.69.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1f:7a:d2:99:c0:24:f0:a8:b6:22:88:a5:82:4a:9f:1e:ec:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Validity
Not Before: Jan 3 08:56:56 2025 GMT
Not After : Jan 2 09:01:56 2026 GMT
Subject: CN=691802B81C1A089B85016C8433B45AC1BACEBD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:26:7f:9d:95:dc:dd:8d:84:a0:b7:87:99:
d6:78:9f:c9:b4:0d:96:11:df:cf:e0:95:7d:a4:bd:
9c:1a:ce:f7:ef:70:36:e5:90:f6:08:cf:15:d3:51:
52:24:72:d2:84:d8:fc:22:11:28:02:91:22:69:d2:
a3:6e:3f:bc:2a:49:91:07:3a:e7:70:69:7a:ba:0f:
b0:96:05:b8:82:7c:96:b7:f3:79:56:42:1d:00:6e:
ea:a7:15:41:00:f8:15:4c:f5:b8:e5:46:5c:a3:5c:
90:f2:78:85:d0:aa:f6:54:c2:f4:5b:3b:f7:bd:aa:
c9:32:4d:90:3c:07:f0:32:16:1f:c8:f1:24:03:7e:
f1:af:ce:f4:12:8f:25:3d:dd:0c:f0:5d:f5:ec:5d:
53:84:66:4b:ab:85:6d:7e:08:5b:2d:75:c0:8d:17:
19:82:64:47:7f:d6:92:68:70:9d:c0:33:63:d4:3e:
c3:fb:75:3c:58:1a:ba:a4:f3:f0:9f:cd:48:22:ab:
50:05:13:e6:d0:ae:37:be:2a:13:de:a9:03:63:10:
23:8e:6b:20:58:0d:71:ea:45:88:95:19:fe:2a:fe:
ba:e5:e3:df:db:76:22:08:dc:db:50:22:2b:0b:d4:
c7:11:6a:0d:bd:f9:3a:b0:12:15:72:e9:ae:e3:e2:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:02:B8:1C:1A:08:9B:85:01:6C:84:33:B4:5A:C1:BA:CE:BD:9E
X509v3 Authority Key Identifier:
keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137392e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.179.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ef:4e:cb:f9:71:22:09:8a:63:25:a9:3b:73:7e:56:00:00:
e4:f9:8b:32:94:c7:e7:5e:fe:90:14:f6:12:f3:2c:14:a9:6c:
1e:92:30:12:9e:63:d5:39:76:73:4c:28:75:15:0e:fa:96:79:
be:27:35:5e:2a:3d:d0:05:e6:1f:bb:f3:b3:0e:29:e7:86:5d:
60:1a:92:ff:18:ed:dc:db:58:04:a1:06:97:e9:75:01:f5:54:
cb:5f:90:d0:27:cd:b4:07:03:26:f4:a4:67:3a:be:0b:7a:3c:
07:c8:24:cf:59:9b:d4:5a:98:02:7b:e7:9d:18:99:e3:3a:96:
45:72:f5:97:03:27:11:e4:b5:fa:a6:01:b8:ba:18:b6:9f:11:
31:ff:70:5f:be:47:28:1a:c9:4f:86:69:07:e6:53:d3:37:8a:
32:6c:a2:3e:bf:f1:07:21:da:65:ed:11:06:e7:83:98:ea:a6:
7d:57:db:04:dc:5d:3d:86:eb:52:74:ed:5f:1b:2f:4d:03:cc:
d8:67:4b:5e:a1:c2:a4:95:8d:20:5b:09:87:8d:87:f3:a8:2d:
2f:1c:9b:e0:68:65:47:a4:47:b2:60:6e:6a:5d:ef:36:a9:9e:
87:c3:d0:c5:84:a1:6a:57:dc:05:b0:9e:ad:2c:11:e7:34:50:
26:ce:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:46 2025 by rpki-client