Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa
File: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (raw, json)
Hash identifier: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=
Subject key identifier: 3A:0A:17:E7:12:85:65:28:AB:37:26:95:FD:71:12:0A:38:90:2A:1B
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 3DBB7DE954330B1528151272793A1DAF5991704F
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa
Signing time: Fri 27 Dec 2024 14:03:36 +0000
ROA not before: Fri 27 Dec 2024 13:58:36 +0000
ROA not after: Fri 26 Dec 2025 14:03:36 +0000
asID: 138821
IP address blocks: 103.136.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bb:7d:e9:54:33:0b:15:28:15:12:72:79:3a:1d:af:59:91:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Dec 27 13:58:36 2024 GMT
Not After : Dec 26 14:03:36 2025 GMT
Subject: CN=3A0A17E712856528AB372695FD71120A38902A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:5a:b1:6e:a3:a0:80:24:d6:95:84:3d:83:
9f:32:84:3b:8b:de:24:38:a6:fa:11:e7:f5:35:99:
04:36:c5:df:17:1f:9f:4a:ab:f3:cb:c0:04:31:14:
c4:c8:0c:9c:19:ca:2f:9a:1c:22:bb:1a:4e:2a:da:
02:28:22:de:10:18:de:85:2b:d7:92:fc:76:69:6c:
31:2a:c3:85:cf:c5:f3:03:92:d7:95:8d:9a:c9:d5:
76:bc:e8:f6:bb:11:5f:23:f2:0f:c4:91:9f:60:10:
de:54:02:84:5d:b6:c2:43:bc:01:c7:ed:83:cd:cd:
60:54:50:60:91:a4:bb:f3:69:cd:81:01:80:a4:9f:
ea:f4:2b:d3:50:37:be:4c:e3:5b:87:90:a6:ee:39:
5d:a5:37:e1:69:8b:f3:2a:5b:94:2e:01:37:2f:54:
0c:f6:ba:16:f0:cd:99:36:dd:75:36:cb:10:9b:81:
0f:3e:4d:17:b9:b4:b2:3c:20:3e:3d:1f:7b:ff:ea:
3f:cc:06:d6:4e:1e:56:3a:11:d8:db:ee:68:f6:0a:
bf:30:9b:aa:80:48:09:88:96:0a:61:30:ea:74:42:
e7:7e:aa:76:85:1a:eb:d5:ea:a8:7e:ad:fe:6e:fe:
17:a1:ea:9e:40:bb:57:8d:8c:37:01:e9:20:8e:63:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:17:E7:12:85:65:28:AB:37:26:95:FD:71:12:0A:38:90:2A:1B
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.15.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f7:72:28:bb:12:6b:70:64:7c:87:ff:eb:ca:e1:f2:0e:c7:
3b:07:af:84:bb:45:5f:67:a3:0f:2a:35:d5:e4:ed:78:69:70:
f3:71:0b:4b:6e:d2:8d:c0:80:11:d4:71:08:83:df:22:58:b2:
4d:22:a1:2b:ef:44:3e:7a:ef:b5:d5:64:7f:8b:42:50:b4:0b:
d7:32:d9:cd:df:6f:1e:80:bc:21:e5:8e:3c:22:f0:a2:24:43:
7b:a8:23:8b:19:71:3c:7a:eb:65:ee:ac:76:77:36:e5:a2:57:
61:55:76:35:21:44:6e:ee:90:38:87:06:ec:64:c3:f1:6c:50:
09:1e:da:b2:ca:94:85:ff:da:7c:e4:1f:14:44:53:9d:56:39:
59:d8:e5:49:c4:2e:55:8b:7f:0a:67:28:24:89:67:9d:41:a7:
4b:51:d3:43:33:4e:30:1e:7e:b5:01:e5:7b:49:9a:51:b6:dc:
ff:15:f9:d7:2b:c6:08:df:ad:8d:c9:c4:57:7c:f4:5a:75:c9:
0f:cd:37:6e:23:17:94:34:1b:2d:f8:dc:f3:41:07:3c:f0:a3:
52:f0:f7:11:14:5f:63:d0:56:09:7a:18:ca:52:0f:22:80:af:
f7:b2:6c:1b:2d:be:83:e5:ab:1b:24:0e:9a:d9:79:2a:38:a6:
af:8e:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:27 2025 by rpki-client