Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
File: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0=
Subject key identifier: 20:A0:80:54:8B:F8:8D:94:9F:49:B7:55:BD:0D:85:14:9C:B8:AC:06
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 2489855B1CC0325F5A157A7073D5884A7565FF54
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
Signing time: Thu 20 Mar 2025 07:02:18 +0000
ROA not before: Thu 20 Mar 2025 06:57:18 +0000
ROA not after: Thu 19 Mar 2026 07:02:18 +0000
asID: 149880
IP address blocks: 103.189.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:89:85:5b:1c:c0:32:5f:5a:15:7a:70:73:d5:88:4a:75:65:ff:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Mar 20 06:57:18 2025 GMT
Not After : Mar 19 07:02:18 2026 GMT
Subject: CN=20A080548BF88D949F49B755BD0D85149CB8AC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:be:6b:38:7f:d6:30:a0:a2:f3:b2:67:30:
a4:45:b8:1a:e7:f7:df:c1:9b:c2:3f:3d:c4:fa:ec:
1d:e6:e7:64:ac:42:6b:c8:0a:a7:36:e3:d9:e7:50:
aa:db:7f:bf:8b:51:97:d9:d9:77:0f:44:13:86:ad:
0b:29:dc:eb:20:62:68:3e:2d:95:ad:8a:8d:0e:b1:
85:5f:b2:f1:11:ab:aa:f1:8b:3a:3d:bb:6c:7d:fd:
6d:5e:12:f0:17:64:0f:52:90:57:94:7e:82:86:97:
67:93:6e:3a:2a:de:d5:14:81:10:fe:af:e1:63:df:
1c:94:30:7c:8e:62:73:44:3b:bd:63:1e:84:1d:9d:
58:3c:a7:e8:84:7d:4a:23:b5:e1:53:7c:8e:0b:80:
f4:51:2b:65:d7:24:d2:d4:6e:cc:53:8c:3b:98:35:
dd:47:c0:b7:f1:28:08:fe:88:f3:d8:a0:9b:9f:fe:
79:ec:c7:ce:6d:1a:01:0b:5b:97:7b:2e:85:35:e2:
e8:34:23:80:e1:c7:35:97:59:0f:ce:85:ba:e9:fc:
82:c0:8e:07:d6:75:cc:4b:83:9c:8e:eb:fb:ed:5e:
ea:e9:f0:49:c5:89:87:da:cd:d7:0d:36:db:9d:b3:
5f:5c:30:54:5f:dc:03:c0:1d:ee:9e:f6:8c:99:e2:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:80:54:8B:F8:8D:94:9F:49:B7:55:BD:0D:85:14:9C:B8:AC:06
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.1.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ce:ba:e2:75:ea:ba:60:27:95:c4:4c:39:0e:a5:21:b9:42:
0c:64:b6:d7:46:6d:af:55:1c:6d:91:78:9b:eb:b1:9b:92:a4:
7c:03:22:9e:8c:94:23:95:d5:c5:6e:6a:e7:be:b2:a3:02:72:
63:7e:16:ab:66:ed:8f:30:90:3c:b5:54:8a:9f:16:46:cf:6d:
82:cf:e7:6d:74:cc:fc:c2:4b:de:10:42:0d:cd:28:e5:bb:6f:
48:72:12:98:6b:68:50:d8:09:7b:43:69:ac:88:82:bd:ec:8f:
1e:45:fc:b4:b5:4c:01:7c:d1:b7:82:bf:2b:3e:5e:60:9f:fc:
75:e6:c5:87:8b:d2:4e:74:e1:1f:2d:9a:02:90:83:e1:1e:89:
57:2f:25:d9:3d:f6:42:77:72:23:b4:06:04:e8:6d:52:71:bd:
2b:6d:38:a4:88:18:cb:89:dd:7f:80:2b:a1:22:7c:0f:82:79:
b3:5e:57:48:90:66:ef:c9:89:19:8f:c5:d2:fd:cb:bb:55:04:
66:28:89:d6:bb:ff:b7:af:0b:61:47:12:b1:8b:fd:66:e8:66:
4b:d3:35:13:2b:1d:e1:d3:d0:7d:a1:d5:30:80:e1:74:42:1c:
dc:e8:b2:72:1d:cb:0c:f3:69:2c:87:bf:92:ee:f8:e4:8e:0e:
34:a2:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:32 2025 by rpki-client