Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
File: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier: 6NM2JtdhX90m+VlJDD0Xg2sEmVKmsuZw8hZh/CIJeyM=
Subject key identifier: A8:27:98:34:D3:19:60:D1:E9:67:6F:38:8D:87:2B:EC:0D:A6:B5:9D
Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial: 68F148E2320434BEB1AF65014BFC234A379B44EA
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
Signing time: Wed 31 Jul 2024 03:01:26 +0000
ROA not before: Wed 31 Jul 2024 02:56:26 +0000
ROA not after: Wed 30 Jul 2025 03:01:26 +0000
asID: 149902
IP address blocks: 103.190.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:48:e2:32:04:34:be:b1:af:65:01:4b:fc:23:4a:37:9b:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
Validity
Not Before: Jul 31 02:56:26 2024 GMT
Not After : Jul 30 03:01:26 2025 GMT
Subject: CN=A8279834D31960D1E9676F388D872BEC0DA6B59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:11:16:e6:40:b5:bb:7d:c5:9d:b0:30:04:
12:24:9c:3e:e7:e5:5d:6c:37:89:b4:0f:ca:d6:36:
13:a7:67:73:65:5d:f2:b1:62:02:de:92:17:8e:b8:
b2:15:68:07:e5:7a:cf:d3:39:1c:78:b9:dd:45:e8:
a0:7b:0b:f6:cb:0f:cc:af:50:73:84:c8:42:b5:8c:
16:20:c3:cc:05:fb:24:5c:a2:9c:40:2f:c2:c0:a9:
e2:98:23:ef:a2:db:32:92:b2:6a:60:cd:d3:5d:75:
38:1e:4d:e5:fc:13:00:98:b8:55:35:e4:46:4c:21:
59:c3:91:9e:4e:cc:61:63:9d:b9:c2:b6:7e:e2:c4:
95:68:fb:21:b9:4a:f8:4a:0a:4c:04:00:e7:b0:69:
64:f1:b4:fc:72:57:a0:11:84:13:57:91:82:d6:fd:
83:1a:15:a9:1b:d6:36:1c:52:e8:ad:fe:cb:b6:12:
f5:3f:63:81:db:3d:57:64:24:9f:e3:05:d8:b2:17:
c3:19:97:cf:98:42:94:56:6c:87:af:01:a4:51:4a:
5c:12:3c:f5:3e:0e:07:b5:42:6d:d6:38:e7:2d:2b:
9a:c0:db:83:c1:89:53:ff:32:46:b2:60:51:b9:9a:
f8:18:b7:76:01:52:ac:f2:0d:9e:b7:5b:b3:0a:bd:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:98:34:D3:19:60:D1:E9:67:6F:38:8D:87:2B:EC:0D:A6:B5:9D
X509v3 Authority Key Identifier:
keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.33.0/24
Signature Algorithm: sha256WithRSAEncryption
79:67:e6:97:24:3b:fc:47:84:8d:e6:f5:84:67:9a:26:6e:0f:
3b:a6:f3:1a:87:32:6c:25:51:59:dd:6f:27:c2:9c:97:9e:75:
c0:42:72:7b:5f:12:b1:26:4d:b1:11:a7:d3:73:05:38:16:3e:
f4:44:ba:cc:d7:12:47:b6:d3:e5:57:17:d9:8a:16:1a:e9:10:
bb:04:49:06:ca:77:d7:d7:89:66:ba:26:37:f7:79:5a:14:1d:
10:c9:0e:08:58:56:b3:e3:21:83:f6:57:8e:33:bf:cf:02:1e:
c8:36:59:94:11:7f:e5:76:26:47:e8:51:8a:83:ee:08:01:9f:
08:43:17:ba:b5:98:81:30:00:13:7b:74:7c:91:a2:ad:e7:0d:
67:fa:0d:86:d9:2a:5e:be:27:07:20:f3:a9:e9:b4:7f:cc:f9:
50:03:2a:08:c2:65:5b:aa:ca:99:87:19:35:d3:f3:6f:ba:aa:
04:ca:c6:31:f7:81:00:06:ff:6a:de:57:ef:d2:44:63:8e:75:
23:f5:3a:ef:1e:2e:bd:4b:70:e2:04:c8:a4:b1:42:8f:27:9d:
09:77:64:3e:d0:6d:57:a9:02:5f:71:2d:f1:c0:77:8e:c4:bb:
94:8a:f3:b5:3c:f3:c6:33:5e:e1:30:e3:60:29:69:1e:cf:54:
84:00:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:55 2025 by rpki-client