Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa
File: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=
Subject key identifier: 58:49:7F:B1:9E:BB:F8:7F:B8:4D:AB:CB:5A:96:4D:F8:E2:D7:73:09
Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
Certificate serial: 2755FC71590449A0616B782465C4E2C04394C457
Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa
Signing time: Tue 26 Nov 2024 12:00:47 +0000
ROA not before: Tue 26 Nov 2024 11:55:47 +0000
ROA not after: Tue 25 Nov 2025 12:00:47 +0000
asID: 131743
IP address blocks: 103.162.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:55:fc:71:59:04:49:a0:61:6b:78:24:65:c4:e2:c0:43:94:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
Validity
Not Before: Nov 26 11:55:47 2024 GMT
Not After : Nov 25 12:00:47 2025 GMT
Subject: CN=58497FB19EBBF87FB84DABCB5A964DF8E2D77309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:9b:2b:70:fe:9c:b9:8a:cd:9a:91:5c:67:
a7:67:1c:fe:ab:ad:b2:81:1a:42:39:2e:db:3d:1c:
2f:2d:1b:9f:d4:f5:94:59:38:ad:2a:5d:47:24:df:
ae:7f:ce:3d:0f:8e:6d:51:61:a7:82:d2:ad:b2:59:
08:6c:be:32:97:c1:b5:d2:27:53:30:27:6c:48:ed:
13:a0:dd:48:ea:29:77:1a:53:cb:f6:ca:20:98:a9:
17:c5:ef:04:5d:1c:c5:47:ea:de:88:d6:e3:a5:fc:
d3:6a:af:5c:4c:c7:94:f8:8a:69:c6:37:0b:bf:1f:
98:73:c7:d9:07:10:6d:ff:de:2d:e4:85:f0:fd:48:
46:30:56:7c:d3:57:48:80:ce:88:4d:22:16:2f:2a:
65:05:b8:1d:08:95:c9:54:5d:83:08:7f:8b:43:73:
dc:43:f9:91:3f:b8:f0:ff:b4:da:37:54:e8:c9:ae:
a3:5e:72:84:e3:32:49:4a:3f:73:64:81:dc:2e:05:
5c:a1:49:11:eb:3e:7a:88:a1:3d:d0:2a:5b:ee:72:
1f:03:06:fe:4a:c7:11:6e:23:73:58:e0:42:52:b1:
9c:da:83:dc:d2:ad:8e:23:ef:87:a6:94:5e:86:87:
b9:7a:25:eb:6b:2e:0d:0e:5b:a5:03:ca:16:c1:4d:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:7F:B1:9E:BB:F8:7F:B8:4D:AB:CB:5A:96:4D:F8:E2:D7:73:09
X509v3 Authority Key Identifier:
keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.218.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b0:e6:eb:8d:b2:c7:a8:f0:5f:b9:b2:dc:7f:2d:64:aa:15:
22:41:6c:5b:ed:23:8d:6d:71:8d:99:eb:fe:5f:72:2d:04:a6:
67:98:c3:d0:cf:e2:20:54:89:95:d6:db:6d:f6:b8:d7:36:1d:
d3:89:4f:10:f8:5a:d2:89:60:08:7d:59:9f:30:ac:79:3b:3e:
de:ec:87:0d:72:72:ba:0d:4a:75:44:e6:02:a8:04:43:da:63:
a3:a1:0b:0a:41:7f:a1:21:c4:ab:54:72:6d:d6:8d:85:cf:d1:
69:06:43:01:08:a0:58:61:f7:ed:cc:3e:0e:c5:76:7b:61:da:
f5:31:c5:1a:01:e4:80:4c:b8:6d:db:92:c9:62:8c:f3:5d:f4:
3d:87:43:5d:5c:32:f7:71:8a:5e:ab:b5:b9:fd:14:72:65:91:
19:1a:c6:56:86:41:f2:ac:d8:eb:65:71:ce:c0:64:ef:01:15:
1e:4a:4c:c4:24:6a:f5:5c:a3:3b:a5:15:1f:60:7f:7a:98:de:
c2:98:6e:d3:2f:77:53:67:97:d5:f4:d7:f1:cd:c0:94:58:d0:
ee:2b:bd:da:cb:2d:4f:ff:a0:51:f5:a4:6a:a0:38:ea:44:19:
6c:fe:86:79:58:de:c8:85:37:09:df:16:25:c5:15:71:88:1d:
5c:40:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:18 2025 by rpki-client