Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa
File: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=
Subject key identifier: 19:76:07:26:D8:12:63:3C:91:CB:34:FC:2E:4A:6D:08:05:A7:6D:AD
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 3FF725DD26F1B39F6FE0A701FAEA518F0A44738C
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa
Signing time: Fri 20 Dec 2024 09:00:01 +0000
ROA not before: Fri 20 Dec 2024 08:55:01 +0000
ROA not after: Fri 19 Dec 2025 09:00:01 +0000
asID: 141968
IP address blocks: 103.42.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f7:25:dd:26:f1:b3:9f:6f:e0:a7:01:fa:ea:51:8f:0a:44:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Dec 20 08:55:01 2024 GMT
Not After : Dec 19 09:00:01 2025 GMT
Subject: CN=19760726D812633C91CB34FC2E4A6D0805A76DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:00:cf:38:6e:9f:19:72:e4:83:97:fc:17:
6f:e0:55:06:3c:34:2d:52:58:72:d8:eb:53:37:56:
bd:a0:12:d5:f8:63:c3:23:19:1d:0e:cd:49:78:b8:
d5:81:77:a5:cb:db:f7:7f:23:77:40:f9:b5:32:09:
66:d1:b6:eb:7b:b3:53:a9:bf:7b:fc:da:7d:e0:62:
1a:13:07:a6:57:3f:5a:23:b2:77:7b:77:2a:7e:fe:
0e:5d:dd:f1:ca:56:6c:05:b2:1c:1a:d2:45:9a:99:
8b:62:8d:4b:24:54:d4:c4:14:c9:f9:6c:df:1e:b4:
40:ae:18:c0:53:05:c2:c1:5e:3c:c6:ba:17:7b:46:
44:df:ee:03:98:ee:f7:16:0b:66:4a:9d:53:df:44:
e6:79:a3:11:64:4f:05:6c:9d:eb:05:91:e4:10:90:
63:19:35:ab:05:05:e6:11:5f:c8:39:a1:17:47:29:
12:bb:77:75:53:71:8f:5e:73:b3:12:eb:94:ed:54:
38:29:b2:0a:c8:47:07:6b:f1:b8:77:19:70:93:6c:
99:e9:a8:c9:be:d9:82:94:ff:85:ab:d3:2c:07:72:
d4:70:11:11:a4:e1:9c:9d:79:14:e6:86:4d:fa:6d:
ff:49:3b:6f:a7:e0:f3:26:af:ae:5f:ad:2c:62:e0:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:76:07:26:D8:12:63:3C:91:CB:34:FC:2E:4A:6D:08:05:A7:6D:AD
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.117.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0f:60:45:38:2a:61:2d:78:ca:b3:82:1a:06:b5:41:80:06:
f3:2a:42:7a:e6:92:16:b5:a1:cd:19:16:3b:e5:f9:43:ab:34:
ba:30:b1:a4:c8:f3:35:ec:ad:cd:f8:12:15:3f:d5:c8:d3:cb:
fb:55:5f:d0:80:f0:13:d4:e3:21:bd:f6:7a:e8:d4:8c:bd:07:
e0:99:be:3d:96:10:dc:7e:e7:64:72:a6:e1:23:18:c9:42:27:
a4:b4:8b:21:0f:67:42:17:23:99:e4:44:d5:3b:0a:e3:8b:29:
3d:70:70:56:d7:c0:20:50:22:18:6d:53:0d:dc:7c:e8:49:87:
17:86:5c:cc:d8:0d:46:88:36:a4:f9:f5:80:f8:a1:c2:83:12:
b5:2d:47:b2:ff:ef:c3:85:43:91:1d:18:73:72:99:e3:09:57:
0e:8b:c2:1e:93:8d:fd:a3:09:8c:72:50:eb:db:b5:e3:84:df:
d5:48:3b:f9:08:ab:68:59:f4:b5:2e:43:d9:a9:d9:28:a5:c5:
52:5d:7d:e0:e1:60:38:b1:50:2a:a1:5f:aa:e3:66:d8:12:9e:
da:51:28:59:68:1a:68:a8:a9:ca:8d:80:06:0e:61:ba:cf:2b:
d6:b4:5b:7a:b4:1f:88:c1:da:95:34:75:76:c9:5e:cb:1d:bb:
30:d1:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:19:59 2025 by rpki-client