Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
File: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (raw, json)
Hash identifier: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=
Subject key identifier: 78:33:7A:D8:79:86:D5:B4:27:44:AA:28:2C:EB:72:2C:D4:B1:4B:87
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 3407833EC2ECF670FC80B2017BA8D5D641793072
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
Signing time: Mon 23 Dec 2024 16:37:52 +0000
ROA not before: Mon 23 Dec 2024 16:32:52 +0000
ROA not after: Mon 22 Dec 2025 16:37:52 +0000
asID: 138821
IP address blocks: 103.136.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:07:83:3e:c2:ec:f6:70:fc:80:b2:01:7b:a8:d5:d6:41:79:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Dec 23 16:32:52 2024 GMT
Not After : Dec 22 16:37:52 2025 GMT
Subject: CN=78337AD87986D5B42744AA282CEB722CD4B14B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:6e:4d:71:d0:e5:fd:96:7f:19:b5:60:64:
a1:2c:1f:31:27:e5:c5:ab:01:2f:70:52:87:5f:93:
9b:5d:21:b7:a9:dd:a7:65:16:f2:5f:c8:2b:7f:98:
b1:f3:0b:a3:e8:a1:31:9a:2c:00:b5:0f:76:21:5b:
26:2a:85:50:b9:46:46:81:cb:79:2f:0b:40:7d:73:
26:19:ee:9b:85:05:6e:95:e6:e1:42:4b:10:28:c0:
27:58:8f:31:0e:1b:8a:ec:68:65:51:a3:4a:2e:20:
7e:98:4b:46:e9:04:08:c5:9c:89:76:8e:7f:97:2e:
a9:3c:07:32:23:16:8b:ae:22:18:7f:cb:43:f4:a9:
63:e7:8c:14:4c:25:86:c3:fe:42:bb:73:ab:10:1f:
4c:b3:27:e1:b3:ac:0f:38:c9:10:b9:7e:1e:74:eb:
5d:63:f0:6a:37:0c:f8:f0:9a:7e:c3:06:30:4c:f4:
73:83:ce:1d:15:83:94:95:1f:41:3a:69:e9:1a:fa:
28:fd:43:97:4c:02:4b:1d:72:6e:0f:28:e0:ad:b3:
94:6c:cd:27:c1:51:07:37:e6:7a:19:77:98:5c:31:
bf:e0:4f:2e:02:6b:26:d4:20:48:90:e2:59:9e:5d:
f8:30:c0:48:13:e9:60:28:dc:36:2d:6e:f8:c4:d7:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:7A:D8:79:86:D5:B4:27:44:AA:28:2C:EB:72:2C:D4:B1:4B:87
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:d1:29:24:91:c1:15:e0:fd:7b:78:11:e9:6d:3d:9c:22:7a:
cb:9d:d6:a4:02:8e:6f:aa:4a:3a:bd:b3:db:5d:cb:5c:27:62:
1a:03:75:03:95:e5:6b:a3:7b:85:d8:ea:43:44:a9:d0:e7:32:
3d:84:96:62:cb:38:54:c0:96:74:db:c0:6c:4d:ac:b6:9d:82:
b0:d2:53:3e:a6:a4:16:7b:26:4a:e1:4a:b1:26:4d:f3:fa:34:
33:5c:6f:45:c6:57:22:56:4a:fb:03:99:be:54:44:ad:26:75:
f1:61:12:a0:55:44:c0:71:76:d3:de:6e:5c:9a:57:ed:a1:25:
1e:be:5c:1a:6c:55:b2:a7:bd:48:cd:bf:9b:44:cf:1b:f1:1e:
7f:5d:74:82:95:8a:c8:6f:91:0c:9b:f4:de:26:c0:39:d4:97:
df:de:b6:86:40:c4:b9:39:be:c9:02:e5:e4:d0:7a:36:de:96:
83:e4:7b:b8:e3:09:d9:66:4f:15:7b:01:45:c6:ee:7f:a5:5f:
f4:73:ed:c3:21:c0:92:a8:30:6b:22:8c:fe:e4:8b:81:77:32:
a5:4e:7f:70:81:75:36:e5:16:e9:af:55:31:98:d3:01:6c:e5:
d2:c2:54:97:c4:f1:5a:47:ec:d9:53:7d:fb:e5:88:73:dc:42:
c7:1c:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:30 2025 by rpki-client