Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
File: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier: clujjP0gMVXTK896cZFjDD0rWMqaqVNL/f+1BiuQ3UY=
Subject key identifier: 00:16:36:FB:19:20:58:13:CA:FA:B6:1A:99:8F:18:24:FC:8D:F0:26
Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial: 021C7113F88F56376800C5A7E3A4EEF265116689
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
Signing time: Mon 30 Dec 2024 08:00:02 +0000
ROA not before: Mon 30 Dec 2024 07:55:02 +0000
ROA not after: Mon 29 Dec 2025 08:00:02 +0000
asID: 59151
IP address blocks: 103.255.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1c:71:13:f8:8f:56:37:68:00:c5:a7:e3:a4:ee:f2:65:11:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Validity
Not Before: Dec 30 07:55:02 2024 GMT
Not After : Dec 29 08:00:02 2025 GMT
Subject: CN=001636FB19205813CAFAB61A998F1824FC8DF026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:04:22:42:2c:e2:90:88:e7:b0:e6:09:50:
a4:a7:35:f4:68:9a:71:6f:67:e3:16:97:e7:0c:af:
81:d6:70:e0:ba:02:a9:23:9c:fb:01:1a:3e:7a:05:
33:96:d9:d8:0e:79:2d:40:86:5d:13:f5:ed:76:69:
d2:67:74:c2:1d:8e:28:89:2e:07:bd:01:38:fe:e5:
66:11:8a:64:9e:02:1d:d7:db:65:2a:9e:0f:53:24:
a2:f1:dc:74:f8:46:a5:8c:87:ea:cb:ad:7c:3a:03:
4b:51:e7:b2:b9:1b:62:b2:1b:6a:eb:b7:20:90:e2:
5a:8b:c0:68:1c:0c:54:b8:37:0c:25:07:bf:09:bf:
33:41:2c:55:9e:aa:81:f9:02:bb:ad:16:be:08:79:
06:13:8a:66:57:50:ad:76:c7:b7:96:c8:3e:7f:3e:
44:fb:eb:09:08:1a:c1:d8:3a:22:8c:34:f2:39:92:
0d:9f:13:a6:8d:d3:96:75:69:b0:c7:f5:7d:3e:6c:
b6:f9:fd:36:64:de:97:6a:a6:d2:0a:7f:b8:03:8b:
5f:43:22:05:50:90:3f:4a:2e:ea:47:cc:b3:14:29:
cf:54:ab:02:df:39:e9:34:11:1b:cf:45:f4:90:28:
39:f7:1a:b7:d2:f2:aa:b6:be:a9:f9:45:f3:22:6b:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:36:FB:19:20:58:13:CA:FA:B6:1A:99:8F:18:24:FC:8D:F0:26
X509v3 Authority Key Identifier:
keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.15.0/24
Signature Algorithm: sha256WithRSAEncryption
82:05:50:dd:73:b9:0a:7b:9d:80:88:ac:4f:43:d8:d8:07:96:
98:38:3e:04:a4:16:2f:ae:43:33:86:6f:b1:71:65:ee:aa:5e:
67:1d:dc:72:c3:81:de:70:b3:d5:fa:4d:9a:7e:bb:02:f9:c8:
16:90:9c:4d:c6:a0:63:5a:04:1f:19:47:b3:25:bc:db:ec:ab:
df:14:c4:16:cc:9a:88:4e:e4:2f:7b:3f:6a:40:20:20:2e:f3:
25:f0:74:5a:fa:c4:df:3f:e6:cf:1e:cc:72:cc:c0:e8:24:cf:
59:a8:e0:51:44:3b:02:e2:b2:6a:60:6f:10:56:40:bd:f5:a6:
0b:98:cd:33:6b:51:31:8f:23:b5:82:cb:b8:bb:10:8d:0b:26:
35:03:f3:9c:8f:43:58:76:cd:61:bf:55:f8:77:39:16:a6:68:
7f:91:b2:b8:e0:35:41:f5:2e:00:a5:8b:30:f7:56:5f:ce:40:
23:07:b5:2c:eb:40:bb:b0:fa:a4:68:08:77:69:20:64:b8:fc:
4c:8b:46:d4:33:d0:9e:66:08:a7:73:ef:a2:46:24:10:0e:14:
2b:ed:55:72:12:38:16:40:00:a9:42:85:ec:ae:42:b2:1d:a5:
a5:12:8d:97:a0:71:06:80:3f:5e:e3:95:d8:c3:2f:b5:3d:2e:
1b:de:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:32 2025 by rpki-client