Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa
File: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (raw, json)
Hash identifier: xydWJV4FL+B55nYYX4HSLXqdjHeafDBY82XL44amtyo=
Subject key identifier: 5B:87:D5:F7:51:53:AF:83:DA:27:50:C1:54:19:E9:F4:B6:CB:3E:7B
Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial: 26DD9EB2F517DAC414EFEB9C9141867A74FB24BA
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa
Signing time: Fri 08 Nov 2024 04:02:24 +0000
ROA not before: Fri 08 Nov 2024 03:57:24 +0000
ROA not after: Fri 07 Nov 2025 04:02:24 +0000
asID: 150261
IP address blocks: 103.22.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:9e:b2:f5:17:da:c4:14:ef:eb:9c:91:41:86:7a:74:fb:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Validity
Not Before: Nov 8 03:57:24 2024 GMT
Not After : Nov 7 04:02:24 2025 GMT
Subject: CN=5B87D5F75153AF83DA2750C15419E9F4B6CB3E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:43:69:7b:60:d6:a3:0f:8c:f5:ee:48:d8:
00:b1:07:55:ef:b0:97:28:b7:a2:96:e2:20:2d:a5:
94:64:57:3e:df:c4:83:c1:00:37:75:78:15:9f:5b:
2d:93:3e:b6:46:f3:77:7d:17:a1:48:73:0d:c2:e9:
bd:a9:7f:c1:15:fa:71:68:85:f9:cc:2a:5f:88:d0:
48:53:ae:50:17:93:a3:43:a6:46:84:ad:bd:58:e2:
21:a6:0a:ad:ae:6b:34:d9:61:8c:d7:fb:3d:31:45:
ed:7a:3d:ef:42:5a:b8:6f:1c:8e:02:09:c3:2c:48:
14:f4:10:0c:a6:e3:0e:21:fb:91:5e:05:74:aa:3c:
04:be:c8:33:d3:d8:be:86:98:4c:20:f5:2e:52:b3:
84:5d:38:e7:2d:a3:93:3e:41:ec:42:58:13:87:9b:
2b:91:b9:fb:d7:39:7f:ee:9b:7c:48:28:4a:e6:7e:
14:4d:94:ac:9b:dd:43:3d:11:56:2c:33:24:6b:58:
d6:7a:26:f4:3f:33:c7:39:2c:71:01:61:5c:92:30:
41:be:ae:3f:61:56:7a:98:e2:ba:05:bc:23:f3:3d:
6f:8b:01:1a:c2:07:bd:1a:dd:b9:a2:98:9b:15:4b:
8a:2c:a5:ba:e0:16:e8:18:e6:25:fe:1a:6f:d8:5e:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:D5:F7:51:53:AF:83:DA:27:50:C1:54:19:E9:F4:B6:CB:3E:7B
X509v3 Authority Key Identifier:
keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.217.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e0:6f:0d:ec:93:0c:b5:ce:e6:e7:bb:b4:30:ff:47:6b:ac:
b0:db:61:f6:b6:44:2f:1b:d8:44:ee:bd:5d:f5:f9:ba:42:d3:
99:8c:49:44:92:be:f3:d0:ac:9e:9e:e1:3d:df:97:6b:a6:3e:
c3:0c:e1:b7:0f:c7:84:3f:db:7f:ea:34:b2:0d:75:d0:d2:68:
b6:28:9e:54:e6:dd:e9:32:f0:78:24:15:0c:e6:99:6a:c6:d7:
61:3b:91:e1:3a:d9:46:af:0b:3c:46:b2:3f:1a:09:32:0b:73:
89:97:38:45:f5:fa:76:97:10:24:74:86:c9:0b:b4:63:9d:db:
54:7b:28:ae:d4:6e:76:0b:88:17:96:b3:7a:d6:4e:0d:8d:4d:
9f:53:db:a8:17:fe:d7:23:7e:69:b0:39:3a:7e:75:76:51:87:
27:32:61:da:77:40:a3:0f:9c:54:95:1d:64:eb:46:6a:1f:59:
89:73:a1:80:88:74:dc:47:41:6d:6e:b1:92:c8:37:a3:fb:de:
f3:35:1c:53:ff:ad:75:4b:ed:67:9b:b7:2b:88:38:70:7b:4f:
22:35:31:f1:47:83:cd:16:75:39:15:93:70:05:09:32:07:c1:
17:39:45:12:f9:15:13:2a:d3:1c:66:ae:b4:18:b5:69:f7:48:
d5:76:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:06 2025 by rpki-client