Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
File: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (raw, json)
Hash identifier: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=
Subject key identifier: 6A:BA:58:3D:24:6E:D2:CB:28:D4:C4:22:67:45:D8:67:09:66:6A:EB
Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial: 221B93C745B4C8DE6EB55E88DD367C8A70EB2C41
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
Signing time: Sat 25 Jan 2025 04:00:02 +0000
ROA not before: Sat 25 Jan 2025 03:55:02 +0000
ROA not after: Sat 24 Jan 2026 04:00:02 +0000
asID: 150282
IP address blocks: 103.43.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1b:93:c7:45:b4:c8:de:6e:b5:5e:88:dd:36:7c:8a:70:eb:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Validity
Not Before: Jan 25 03:55:02 2025 GMT
Not After : Jan 24 04:00:02 2026 GMT
Subject: CN=6ABA583D246ED2CB28D4C4226745D86709666AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:ba:60:3c:e3:3b:a0:ff:be:03:95:1f:b2:
04:f8:82:91:c7:fc:4f:54:82:38:7b:2c:3d:7a:26:
91:ee:61:b7:8e:c8:c9:40:71:04:47:62:84:29:d2:
3c:c6:49:59:02:b4:54:ac:6b:a1:33:d9:a0:44:ce:
95:ff:da:49:c1:89:e8:8b:ea:68:1e:4a:3b:eb:35:
5c:54:83:2f:94:aa:29:31:4e:4c:a1:31:cf:09:4d:
fd:ca:cf:57:e7:98:83:87:00:ff:ff:ad:29:f9:11:
48:80:cd:5d:d5:15:af:79:b4:97:df:0a:88:2f:5f:
18:5a:ab:a9:41:87:90:a8:b8:e5:22:02:57:74:d8:
e9:28:e3:df:81:96:d8:53:3a:f8:18:c0:3b:53:11:
d4:b6:e9:f2:82:57:0c:39:83:c3:d8:bf:cf:c5:72:
bb:dc:26:80:02:ad:38:da:99:7c:db:13:ae:16:22:
d3:c9:78:66:c0:61:d6:36:15:75:71:cf:45:6d:e1:
ab:9c:38:6b:b1:a9:30:01:8f:1c:44:2f:ed:b3:44:
68:bf:e1:4f:b9:39:27:80:73:68:46:6a:83:f1:12:
d9:e4:50:8e:7b:f8:20:32:47:62:47:ec:9d:1d:16:
f0:91:af:39:cc:7e:71:a2:2a:0d:c2:68:48:06:dd:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:58:3D:24:6E:D2:CB:28:D4:C4:22:67:45:D8:67:09:66:6A:EB
X509v3 Authority Key Identifier:
keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:77:f7:b6:5f:84:d4:f5:00:e6:4d:6f:57:26:65:a7:df:d8:
0d:f5:97:a0:9e:e3:23:a3:a2:56:9b:7d:ad:3d:25:3e:b9:8d:
4c:53:ee:a1:db:fb:a7:9a:ed:3d:be:6f:39:0c:93:7e:ef:be:
66:ca:e9:8a:b6:b2:cb:a6:a8:d6:70:21:d4:40:e0:22:d8:b1:
db:ff:4d:5e:9f:40:a6:00:71:30:03:d2:bb:d0:94:25:22:ab:
5b:ab:0a:43:4a:5b:45:74:7a:1a:9f:92:5c:34:91:be:ec:67:
36:2b:2e:07:0e:f5:09:d6:8a:a6:6d:8c:fa:2f:79:1f:27:7e:
70:59:00:e7:b4:c8:f8:a1:77:19:2f:65:e2:75:7d:ca:4b:91:
c1:4d:bf:f3:fc:13:82:ff:cd:4e:f2:9f:a3:98:13:34:8a:ed:
d6:67:0a:ca:3b:d6:db:74:86:c9:b8:b3:c4:45:53:44:e4:cd:
10:e4:fa:b8:21:22:e3:86:e7:32:12:c4:d3:9e:b2:de:d2:58:
fe:bc:98:e3:dd:46:6a:4b:28:64:20:58:48:de:41:b5:59:b5:
91:e6:4c:44:a8:47:67:6a:72:e6:88:0c:bb:91:48:e6:17:09:
72:97:b1:23:8d:d4:b3:53:8b:14:a9:bc:a3:10:f5:fd:c5:9c:
f4:90:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:47 2025 by rpki-client