Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e20313333383030.roa
File: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 28vgeLNt3g9napF7ybKdFbQimDX85rDBRhlE0yU7IqI=
Subject key identifier: D4:74:72:45:B7:A2:83:B2:1E:CD:FD:1B:3C:8F:3D:27:FD:2F:B2:BF
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 2CA9D935182A4E35931A841F617258B07F2F88DE
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e20313333383030.roa
Signing time: Mon 17 Feb 2025 03:26:15 +0000
ROA not before: Mon 17 Feb 2025 03:21:15 +0000
ROA not after: Mon 16 Feb 2026 03:26:15 +0000
asID: 133800
IP address blocks: 103.87.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a9:d9:35:18:2a:4e:35:93:1a:84:1f:61:72:58:b0:7f:2f:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 17 03:21:15 2025 GMT
Not After : Feb 16 03:26:15 2026 GMT
Subject: CN=D4747245B7A283B21ECDFD1B3C8F3D27FD2FB2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:b6:3a:e6:fa:57:5c:72:49:6b:d4:c4:71:
0a:ea:6f:94:23:2e:fd:2d:0f:8d:cc:6b:47:e5:62:
6b:f5:1b:27:b4:4a:26:58:03:e8:d6:db:1f:06:8f:
ba:fe:4c:36:61:7c:b7:d2:f7:ce:28:d8:cf:b2:9e:
a9:c6:b4:8e:4c:34:63:75:31:ad:0b:f6:3e:ea:5d:
a0:6b:36:77:df:28:48:14:fa:14:80:7c:0d:c4:3a:
51:5a:ec:71:80:40:d5:5e:8d:90:3d:39:63:42:af:
d7:31:cf:b7:80:85:24:22:1a:9f:2b:40:db:a1:12:
0b:6d:63:57:12:72:87:94:e8:3c:25:e8:bf:7f:fd:
c9:a4:7f:49:06:98:43:a1:70:ca:fb:9a:d2:6d:3e:
e1:c6:3d:86:bf:3d:a2:5d:e5:2e:6d:37:94:9d:e1:
42:cd:7a:ba:86:8e:32:4f:85:83:d5:36:15:59:1b:
a7:bb:55:93:33:30:be:68:ca:57:ce:8a:3e:94:04:
fc:20:76:a5:2d:60:ce:6f:8e:9c:bd:b8:5a:66:ce:
1e:90:c6:d3:8a:62:f8:e8:67:37:d0:01:23:e8:29:
58:7f:7e:80:f8:3b:30:46:34:f8:dc:a2:59:db:96:
57:7f:17:7b:36:85:c8:f0:12:7c:c9:23:fc:b9:4e:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:72:45:B7:A2:83:B2:1E:CD:FD:1B:3C:8F:3D:27:FD:2F:B2:BF
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:05:51:3f:ca:b2:23:9c:d4:bb:ab:dc:3a:81:1e:7e:16:c3:
44:d1:69:f0:dc:4f:dc:0b:ab:18:b8:33:6a:ca:d6:29:87:b9:
35:24:4d:27:39:f3:77:29:8f:61:5c:ca:4d:b1:ee:ec:79:69:
c1:be:58:67:f6:44:ad:86:fc:37:46:d4:24:03:ac:57:4f:10:
03:15:4b:58:cd:fa:9a:9c:5c:20:34:9c:83:b4:70:58:89:76:
63:7c:b3:82:82:9e:2b:03:35:29:a3:e4:a6:14:26:11:09:e0:
64:f6:93:60:d8:7a:dc:bc:bc:c6:40:a8:e0:27:d2:b3:e5:41:
3c:92:9c:21:f8:25:c4:81:68:28:d9:b5:f6:02:a6:b0:93:47:
8f:c7:90:5c:65:ba:b3:29:a8:60:90:d8:fe:80:97:51:17:53:
5d:6f:9a:c6:6e:b7:f0:ed:2d:69:b4:a0:23:20:0e:e2:e2:d0:
bf:17:61:33:87:5d:c3:1f:2d:ca:55:99:bd:e7:27:a6:68:dd:
33:ee:9b:0d:a2:a9:1d:40:3b:37:ce:aa:b4:42:5c:f6:64:79:
d5:7a:b9:a5:08:66:c8:d4:02:f0:cc:31:94:87:0f:7d:ab:1a:
b2:0c:ae:e9:dd:12:64:99:75:6c:2e:84:09:68:46:4e:ea:52:
e3:1c:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:24 2025 by rpki-client