Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa
File: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: Q/vj8e8aAkRGeQkUCDDQE56ayYlvn1SjQG2hHxKRj0A=
Subject key identifier: 77:06:4D:B8:CC:96:A7:48:4F:9A:AC:F1:D6:6D:CA:B4:FA:1D:16:0B
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 58C976F137CB9CE8510AFAD1C0212CB66E77AC9D
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa
Signing time: Wed 20 Nov 2024 10:03:11 +0000
ROA not before: Wed 20 Nov 2024 09:58:11 +0000
ROA not after: Wed 19 Nov 2025 10:03:11 +0000
asID: 58487
IP address blocks: 103.253.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c9:76:f1:37:cb:9c:e8:51:0a:fa:d1:c0:21:2c:b6:6e:77:ac:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Nov 20 09:58:11 2024 GMT
Not After : Nov 19 10:03:11 2025 GMT
Subject: CN=77064DB8CC96A7484F9AACF1D66DCAB4FA1D160B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:db:b4:26:68:2a:f9:83:57:18:5f:d6:da:
2b:ee:7a:bd:2f:6b:75:92:58:25:b1:74:63:da:63:
47:85:8a:5c:55:ee:20:64:52:20:32:2e:ba:9a:93:
5a:83:ac:18:8f:aa:79:6c:bf:6e:cc:56:f3:79:bb:
2c:1d:d9:33:53:2f:4b:72:09:50:e2:9e:43:a1:6e:
6f:b7:82:c6:41:24:41:bd:a3:59:28:f0:f7:99:00:
73:91:2e:d9:07:70:e5:ec:fb:dc:16:0c:c4:f5:31:
b2:ed:0a:30:39:f4:de:82:e3:de:b2:97:20:53:94:
d2:38:b3:26:0c:69:88:ff:b9:23:5b:67:46:e3:51:
0c:49:91:bc:7b:58:7d:8e:91:77:b9:ab:d1:9c:2b:
e2:6f:94:12:5a:35:c9:ab:94:cd:6b:60:81:3c:27:
0f:40:4e:dc:e8:ff:01:ec:5d:b8:72:9c:9e:b1:4f:
30:a4:80:1b:f8:a3:fc:34:21:5d:14:30:d1:28:3a:
35:d3:b6:f5:d8:09:f6:eb:15:11:4c:a1:54:ea:26:
26:97:cb:3a:5e:c6:ab:77:3d:2e:f4:8a:dc:32:12:
68:49:c0:f6:61:13:d3:26:75:4e:e9:62:ab:1b:6a:
eb:af:c8:50:3f:5e:bb:95:5d:d1:b0:2e:a6:05:bb:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:4D:B8:CC:96:A7:48:4F:9A:AC:F1:D6:6D:CA:B4:FA:1D:16:0B
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:10:ed:c2:f1:b2:76:79:02:a2:0a:b8:93:03:64:a1:dd:59:
ee:3f:5a:43:df:42:44:e3:f4:51:05:8e:b3:45:7c:1a:31:ca:
29:b4:5b:b5:6b:f3:c0:4c:31:0f:db:6f:d1:c3:00:59:cd:d4:
93:b1:82:60:ef:54:8b:f7:ae:80:55:33:95:b7:0a:61:90:32:
f7:29:24:6b:fd:94:e0:9c:66:4b:07:f2:7e:42:07:41:03:91:
5a:8c:69:11:0c:58:63:43:d7:7a:8e:bd:b0:0a:7b:a5:e2:a6:
c0:16:bd:34:40:77:65:b5:11:4e:a6:52:34:d3:fe:02:47:6a:
98:b0:b2:cf:36:f9:46:9a:dc:59:56:10:de:0f:50:6f:3d:d7:
bb:7f:c9:93:96:c7:c6:f5:b2:bc:7b:47:24:5a:14:4c:f2:03:
d7:b6:fb:81:de:69:f6:90:f1:fb:ae:97:ac:3d:c1:48:30:87:
16:cd:16:32:7e:87:34:64:f9:9d:7c:e1:60:2d:59:d8:da:e1:
6f:cb:f7:0b:22:1b:18:eb:9e:40:da:44:7e:f4:63:c9:09:b5:
66:1e:37:69:b7:b4:be:65:f8:be:c6:8a:1b:64:f5:29:39:bc:
2b:ae:53:69:75:25:7a:ad:c4:97:8c:d4:76:13:dc:22:b7:6e:
75:87:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:32:37 2025 by rpki-client