Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
File: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (raw, json)
Hash identifier: pGfLfqeQeD8uU2thnQryvAF3YiN767pDKu8zHBjIsCs=
Subject key identifier: 59:2E:C0:25:13:C1:F3:30:7A:3F:1D:2C:62:BE:A8:3C:1B:70:A3:2D
Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial: 4CE3013521827B228A5286176A950521DFC30714
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
Signing time: Mon 23 Dec 2024 16:00:01 +0000
ROA not before: Mon 23 Dec 2024 15:55:01 +0000
ROA not after: Mon 22 Dec 2025 16:00:01 +0000
asID: 142354
IP address blocks: 103.169.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e3:01:35:21:82:7b:22:8a:52:86:17:6a:95:05:21:df:c3:07:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Validity
Not Before: Dec 23 15:55:01 2024 GMT
Not After : Dec 22 16:00:01 2025 GMT
Subject: CN=592EC02513C1F3307A3F1D2C62BEA83C1B70A32D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:b6:e7:9a:d0:da:bd:09:00:e5:8b:66:8a:
e3:9f:66:32:17:5e:6f:81:bf:8d:36:41:60:9a:0b:
9b:36:20:7b:84:f5:bd:a4:4e:b5:9f:d7:09:af:84:
71:5a:ef:fb:1d:49:54:0e:b6:de:13:79:de:7f:19:
7f:8d:e2:65:82:35:80:18:d9:27:aa:e2:2b:02:95:
ad:94:4c:8d:95:a4:c2:34:67:bd:ff:43:af:b3:f3:
a3:b3:bf:7a:6f:f2:68:f9:3b:82:44:b9:de:cd:08:
19:80:57:fc:a8:29:f8:fc:89:b6:37:1c:a2:75:9d:
2d:e8:50:54:1c:d9:1d:a0:77:df:6d:f3:2a:00:4b:
dd:a6:0f:32:90:25:25:15:ad:ea:d3:76:67:91:c6:
3e:91:43:5a:ba:54:9f:be:21:52:f9:92:df:3f:fd:
31:c7:d0:20:42:ee:29:62:35:7b:db:f2:e6:4f:92:
77:94:9b:82:ee:8e:61:83:c1:92:54:69:57:32:0a:
a3:a5:06:bc:4e:ee:8e:c7:11:04:45:39:22:32:ce:
74:ef:c4:88:ea:bc:4d:f6:4e:d9:66:08:2b:86:a4:
6b:d0:d4:08:ef:47:0b:15:8a:69:79:1e:c8:d7:0a:
b3:6b:b9:89:ff:86:d6:e4:5b:26:3c:1c:87:c9:5c:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:C0:25:13:C1:F3:30:7A:3F:1D:2C:62:BE:A8:3C:1B:70:A3:2D
X509v3 Authority Key Identifier:
keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.224.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:7b:0a:72:4d:34:fe:ab:b4:d0:0f:55:1d:db:73:a3:76:b5:
bc:47:38:3e:af:b9:26:4a:74:8a:bb:33:eb:fc:7e:e7:26:71:
19:b7:ef:f4:f9:b7:6e:a7:da:23:04:fe:af:39:d3:75:aa:5d:
87:92:77:10:38:84:1d:e5:f9:ef:5e:4f:8f:3e:b5:56:e3:36:
2d:32:10:d6:b6:bd:f3:bb:c0:70:b8:f0:60:0e:73:8d:40:ff:
2d:a1:e8:f9:ca:02:79:bd:d1:5f:e3:70:0d:79:54:90:11:e2:
0d:75:94:17:b7:de:7f:ae:b9:fc:ad:76:40:67:20:c6:bb:b5:
0b:94:87:cc:18:db:d1:a2:83:e0:32:3e:e1:cd:05:b2:61:c6:
bc:59:1d:c4:68:57:74:17:41:e8:4a:7a:da:a0:9a:e0:57:b2:
37:d8:9a:1e:f6:46:8a:bb:e2:24:90:03:bf:e0:bc:bc:1e:0e:
9b:ef:6f:77:83:d4:48:21:35:82:ff:0b:39:26:54:e0:85:ee:
61:1e:4a:c1:b3:62:98:75:df:d1:72:7f:9e:be:a5:ef:3b:17:
8b:4a:9d:f6:ff:8d:20:a4:44:0b:24:43:6d:13:50:f6:78:5c:
31:32:e5:5e:1a:44:94:c0:b0:20:47:fd:07:30:0b:6c:24:2b:
6c:96:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:40 2025 by rpki-client