Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
File: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier: F145PEXcJUPJI44/ofZQgqUtr1Cn+lV3LefiZC3Cwhw=
Subject key identifier: 60:18:60:C4:11:F6:04:02:FD:7B:40:1F:03:13:4E:52:BE:87:6D:96
Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial: 3A53F333B1F07D4A6782A1B5A55DEEF9195AD460
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
Signing time: Thu 11 Jul 2024 09:01:06 +0000
ROA not before: Thu 11 Jul 2024 08:56:06 +0000
ROA not after: Thu 10 Jul 2025 09:01:06 +0000
asID: 133800
IP address blocks: 103.58.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:53:f3:33:b1:f0:7d:4a:67:82:a1:b5:a5:5d:ee:f9:19:5a:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Validity
Not Before: Jul 11 08:56:06 2024 GMT
Not After : Jul 10 09:01:06 2025 GMT
Subject: CN=601860C411F60402FD7B401F03134E52BE876D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:59:6c:28:cb:07:6a:79:73:b3:81:a0:51:
0a:6b:64:25:7e:f2:e3:ab:db:0d:c7:89:d7:0e:87:
b5:0b:9f:25:9c:89:01:09:0b:f3:1c:a6:ae:fe:86:
0e:69:d0:ce:a4:11:ea:ab:c1:78:59:f4:c9:4b:86:
80:a5:ae:e3:ec:e9:61:26:b4:0f:1f:cb:53:98:53:
b1:bf:51:fe:2b:dd:a8:d0:5b:43:27:67:14:bf:1b:
78:be:68:6f:00:42:1d:e1:58:44:ac:d9:bd:16:e1:
eb:c8:5b:fa:7c:51:c7:a5:6f:92:41:1c:f9:e9:a1:
3c:c3:54:b5:ae:ea:02:0f:4c:0a:3a:82:28:83:7d:
6a:cf:ab:1d:22:39:57:a1:81:f6:e3:9c:1c:7d:9e:
eb:dc:c2:c5:0b:44:7d:f7:43:9b:55:c9:15:79:2e:
87:40:dd:36:54:d3:32:91:bf:c3:05:02:1e:7a:3f:
8c:1f:02:98:92:89:d4:8a:19:62:be:c5:3a:f5:4c:
99:3c:47:c3:85:f7:d3:d4:7b:a6:c8:e4:ad:01:55:
df:7f:1a:dc:d9:8d:26:47:a5:84:7f:ec:3d:f5:90:
05:3b:18:23:e2:d7:aa:40:51:e3:a2:5d:bb:b9:d0:
b9:77:f7:05:e9:cf:13:cc:5f:b0:97:d4:65:a8:5e:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:60:C4:11:F6:04:02:FD:7B:40:1F:03:13:4E:52:BE:87:6D:96
X509v3 Authority Key Identifier:
keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.100.0/22
Signature Algorithm: sha256WithRSAEncryption
22:35:1e:84:b7:e3:33:13:e1:59:b1:23:c9:7b:4b:8d:bd:08:
f6:63:51:c3:1f:d2:43:ff:da:a9:64:4b:97:6e:68:03:b2:30:
ee:a6:e7:52:b5:9b:07:8d:e7:c8:48:8a:05:fc:c8:0e:71:90:
4a:35:92:e2:a7:17:c9:03:5b:fe:8f:42:b9:7c:f2:a0:6c:72:
c0:6f:78:09:0e:4f:f0:56:e7:38:8f:3f:d8:85:f3:e6:7f:d2:
b0:5b:d7:4f:1a:cb:f0:85:a8:03:b8:d3:c0:15:ef:0f:dd:cc:
90:75:a7:cf:24:65:b2:87:86:23:16:17:5b:bc:8d:55:de:dc:
fe:bc:e9:0e:b4:c0:50:97:3c:03:df:0c:af:79:e1:00:8b:de:
01:e1:72:3a:2a:3d:c7:2f:25:af:af:e2:d3:92:ed:21:74:8b:
bc:d3:fe:0d:3c:1e:59:4a:34:83:f1:3e:65:08:6f:ba:75:77:
93:34:8b:77:5f:08:c8:dd:be:58:b5:6b:a7:5e:67:de:87:4a:
55:5a:af:4e:1e:8e:52:0e:9a:27:e8:7a:cc:b7:57:55:2d:7c:
91:0e:c1:01:8b:3f:2b:72:4c:66:e0:c6:e6:a3:e7:44:60:09:
4a:63:3a:c8:e3:5a:b3:5f:30:01:16:25:b2:9f:94:52:b4:bf:
73:26:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:12 2025 by rpki-client