Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa
File: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (raw, json)
Hash identifier: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=
Subject key identifier: 81:48:09:42:B5:EB:F4:6B:E6:99:85:5E:BC:56:31:E5:7D:8B:C6:0A
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 04C14E553EDE268A366A3B002BC5EBE5DC5AFE97
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa
Signing time: Fri 27 Dec 2024 14:03:13 +0000
ROA not before: Fri 27 Dec 2024 13:58:13 +0000
ROA not after: Fri 26 Dec 2025 14:03:13 +0000
asID: 138821
IP address blocks: 103.136.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c1:4e:55:3e:de:26:8a:36:6a:3b:00:2b:c5:eb:e5:dc:5a:fe:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Dec 27 13:58:13 2024 GMT
Not After : Dec 26 14:03:13 2025 GMT
Subject: CN=81480942B5EBF46BE699855EBC5631E57D8BC60A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:95:e9:f0:29:a8:1b:7d:5d:0b:a5:67:7a:
2a:cf:ae:53:d1:04:4c:f8:22:bd:8a:57:68:85:28:
0c:b0:5a:e0:6b:f1:59:9b:05:ba:b1:f9:fa:7e:ae:
70:d5:e4:7d:3e:99:be:09:bd:b6:88:f0:70:c3:c5:
9c:10:5a:17:74:85:16:bf:6a:db:2f:4b:ad:4f:b6:
27:f7:3f:d9:17:89:d0:db:80:1d:c9:bd:4e:22:87:
1d:90:b1:75:2f:64:f9:f7:e5:8a:5e:38:fb:9d:7f:
77:39:f7:51:88:a4:2f:58:ca:73:a1:2b:f3:dc:3e:
2f:55:39:90:3d:b0:1e:b9:a0:69:9c:15:44:95:a6:
34:84:78:68:ee:07:a0:d1:17:c8:ae:96:b1:45:ed:
54:79:6f:5f:f2:c5:42:28:8c:dc:b1:3e:d1:80:f1:
c1:51:b6:37:76:ca:60:f4:90:8e:63:49:f5:39:b9:
be:62:7e:3d:f8:a4:1a:8c:71:44:ed:f8:58:43:6f:
c2:d9:68:38:7b:e3:5b:ac:f7:35:96:7f:b0:58:32:
ea:dc:87:7a:e3:06:97:53:15:61:15:7a:00:02:5a:
84:73:d0:5e:35:a8:3a:73:54:b2:60:5a:b4:a9:da:
b0:24:e4:11:13:80:fc:fb:e1:90:70:aa:f2:ed:19:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:09:42:B5:EB:F4:6B:E6:99:85:5E:BC:56:31:E5:7D:8B:C6:0A
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bb:bc:02:72:4a:c9:b6:3e:1f:21:f1:0a:91:97:21:08:fb:
27:bb:99:90:80:3e:7b:e0:ea:98:cf:a8:eb:3a:ad:66:7d:61:
df:dc:a1:bc:02:1f:10:a7:4f:30:45:96:d2:f5:2f:46:9c:2a:
66:09:62:90:58:e4:49:2c:6a:b3:ed:88:3c:1e:76:1f:43:3f:
65:51:7d:44:48:5d:fd:db:88:75:5f:46:ce:19:0a:c7:bf:12:
04:e3:a4:bd:63:59:92:8f:8c:65:ef:ae:b3:00:2d:ea:7a:3c:
96:3f:71:53:de:16:01:61:72:7b:a6:ca:f7:76:8b:dc:8b:76:
d3:89:33:27:94:f2:6e:3f:fb:50:42:1f:f5:45:4d:e6:c3:23:
68:8f:d6:a1:ce:22:b0:76:3d:26:9f:30:20:fe:ee:d5:74:b8:
db:02:0a:75:0b:d0:79:89:c1:15:ef:2b:42:4f:ea:ef:0a:69:
ac:f3:5b:d5:41:e9:b2:5e:2a:18:a8:0b:e1:2f:34:72:8f:3e:
62:4c:13:33:de:8f:67:00:b2:46:bf:43:14:b9:05:9e:6e:ec:
09:bd:0f:cd:63:99:ab:f5:48:36:0e:9b:cd:ed:1d:08:1f:d2:
c3:a8:5d:39:e8:e2:09:86:2e:bd:0a:e6:11:85:d8:8b:31:99:
f8:d3:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:37 2025 by rpki-client