Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa
File: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (raw, json)
Hash identifier: heHR6tDdyfcDcl0ayUlIY67JEF5cb4FokE1+/fGTE2c=
Subject key identifier: D6:6F:EF:70:EB:AB:28:B3:89:2A:0F:5E:34:0D:A9:AD:59:78:31:94
Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
Certificate serial: 4DDAD41892AE4EF61757EE6B2844CAD37BB45332
Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa
Signing time: Wed 14 Aug 2024 10:00:00 +0000
ROA not before: Wed 14 Aug 2024 09:55:00 +0000
ROA not after: Wed 13 Aug 2025 10:00:00 +0000
asID: 59279
IP address blocks: 103.227.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:da:d4:18:92:ae:4e:f6:17:57:ee:6b:28:44:ca:d3:7b:b4:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
Validity
Not Before: Aug 14 09:55:00 2024 GMT
Not After : Aug 13 10:00:00 2025 GMT
Subject: CN=D66FEF70EBAB28B3892A0F5E340DA9AD59783194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:f8:79:31:94:73:6a:55:4a:91:f7:8a:8e:
9e:c2:ad:23:25:1d:ce:d1:39:ea:3b:87:e7:c3:00:
08:20:46:b8:b7:88:c5:bd:fd:16:a0:ca:e4:93:5d:
de:ec:4e:92:9b:11:25:4e:6c:85:05:5e:f3:f4:bd:
0e:51:00:8c:66:49:80:7b:05:ec:e9:27:6e:98:69:
60:1e:cc:dd:dc:66:7d:41:96:b5:4d:36:5d:51:0f:
a0:b3:ab:8f:59:ea:a3:bd:d4:76:88:67:49:d4:2a:
58:54:bf:51:04:5d:76:7e:bc:9b:ca:c0:a3:94:b2:
4b:39:95:1f:97:c6:ef:12:19:8b:87:8a:96:55:d2:
ff:7a:a5:a1:93:e5:76:c5:53:21:ad:0d:cf:72:7e:
d2:e9:d2:f2:84:ff:d0:af:78:d3:9d:99:6b:51:9c:
92:91:0d:66:8e:d3:4d:84:34:ac:09:fa:db:12:7e:
30:a9:ab:46:d9:a4:f4:02:80:d3:86:11:95:f9:09:
f6:e6:30:97:b2:bb:6c:6b:1b:e1:67:6b:80:6f:64:
c9:1e:02:a0:1c:e7:d6:eb:f2:8f:dd:6a:05:fe:82:
61:86:30:b5:e5:3d:f9:33:8d:81:24:81:6f:cf:fe:
c2:9f:51:3c:4b:ce:16:a7:53:e6:26:be:77:99:6f:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:EF:70:EB:AB:28:B3:89:2A:0F:5E:34:0D:A9:AD:59:78:31:94
X509v3 Authority Key Identifier:
keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.252.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d0:2b:38:49:5b:09:4c:73:0c:f7:83:5d:a1:4b:c0:c9:86:
bb:55:82:15:5d:37:9a:66:6f:a0:0e:35:11:10:90:f8:cf:4f:
ec:25:6c:a9:5b:5f:4c:00:67:7a:dc:19:39:c1:2c:eb:4b:9d:
46:ef:d9:1e:b6:97:ff:86:e9:e0:46:32:0f:eb:ed:ac:73:37:
51:2c:cb:d9:bd:b7:54:6f:64:c9:1e:f3:5b:14:95:66:97:55:
68:4b:94:fe:16:f0:22:4d:e4:b4:73:ca:f6:83:f6:94:19:30:
f7:62:08:91:26:1c:4c:9b:c5:89:40:a5:12:a5:ba:2a:42:00:
2d:78:c3:59:48:46:3f:4e:0b:8a:1c:9f:55:86:4c:42:89:6f:
bf:8f:d1:d4:cd:7c:8e:3f:f7:1d:dc:8a:82:bd:cc:70:b2:bf:
c1:dd:06:2a:e8:66:cf:a2:f8:2e:21:a0:e1:ae:35:92:18:12:
18:15:3c:cb:8d:a0:e1:c2:02:ef:ff:b9:0a:a8:1e:17:fb:e2:
1c:f8:92:c7:5b:0c:a5:e3:7f:90:2f:32:e4:5c:6b:52:ec:75:
fd:25:a9:fb:cc:7b:70:17:03:45:8f:48:70:70:1b:30:64:c1:
e9:bc:11:51:56:aa:d5:d5:15:bc:b7:11:98:7d:88:72:ed:50:
02:2e:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:57 2025 by rpki-client