Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa
File: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (raw, json)
Hash identifier: rlZNRe9QwPDxRgCp5O054ihVTvOafRmbaG0Hj+9kO5Q=
Subject key identifier: 83:0E:2C:AA:9C:96:17:5F:2A:7B:01:F6:7A:60:30:FB:D4:AA:A1:1D
Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial: 21390DD7CD846EC8AB02077F2EF97714B2C5E43E
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa
Signing time: Tue 26 Nov 2024 10:02:34 +0000
ROA not before: Tue 26 Nov 2024 09:57:34 +0000
ROA not after: Tue 25 Nov 2025 10:02:34 +0000
asID: 56260
IP address blocks: 103.29.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:39:0d:d7:cd:84:6e:c8:ab:02:07:7f:2e:f9:77:14:b2:c5:e4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Validity
Not Before: Nov 26 09:57:34 2024 GMT
Not After : Nov 25 10:02:34 2025 GMT
Subject: CN=830E2CAA9C96175F2A7B01F67A6030FBD4AAA11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:09:63:07:c6:02:45:f7:bf:ca:13:23:b1:
f0:a8:60:76:f4:e6:e7:e6:5f:5a:bb:3b:f5:a1:84:
9c:6e:25:2c:0c:5e:b9:ec:80:82:ac:1a:62:a3:78:
bd:5f:9a:c0:15:a9:2e:74:ce:38:1c:dc:70:27:d7:
90:8c:14:cd:5a:a8:95:0f:d0:d5:f1:f0:66:89:54:
ad:0b:8a:f3:30:56:7d:d4:80:13:7f:22:e4:bc:22:
ae:74:75:9c:3e:fb:e0:73:6e:82:c7:7d:f6:2e:74:
a4:80:5a:59:90:e1:0e:f1:84:06:73:dd:14:25:a7:
23:1c:63:70:ea:f5:93:0f:f3:2e:3e:3d:87:2f:2c:
d9:15:2b:64:e9:87:db:8e:84:cf:08:d9:54:23:4a:
75:60:c4:37:77:8a:d2:73:93:e1:5b:a7:75:49:2a:
5b:83:cd:c9:c9:b8:fc:55:b1:8e:bb:1e:4c:a9:9d:
91:38:18:7a:fb:4c:3a:23:2b:f8:8f:fd:9a:ef:05:
c2:59:d8:40:83:10:4d:c4:a3:a3:e6:ba:18:b6:bd:
50:f4:af:27:46:13:b4:f4:37:57:28:01:1f:70:80:
c4:92:72:57:5e:c2:0b:c0:f2:a1:6b:4d:05:e3:6d:
bc:d5:15:8b:95:ac:95:14:0b:63:9b:44:3e:44:df:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0E:2C:AA:9C:96:17:5F:2A:7B:01:F6:7A:60:30:FB:D4:AA:A1:1D
X509v3 Authority Key Identifier:
keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.185.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:e2:d1:c8:58:39:48:7b:9b:91:12:c3:bd:65:ce:16:a8:
9b:35:42:01:80:8f:6b:6b:75:21:59:90:06:cf:28:3f:09:36:
33:54:bc:a2:39:bc:10:c3:4a:8a:d3:28:ac:fc:d9:ed:5c:16:
c4:49:8b:69:61:7a:9d:00:53:54:c2:d1:0c:5c:ec:0f:9a:c7:
7d:1c:0f:d0:36:47:0b:f2:d5:c4:6f:ed:05:b9:4f:33:85:6a:
25:1e:82:63:ff:75:25:9d:9c:01:f6:98:95:f7:f4:06:9e:28:
2f:57:4c:56:8a:03:dd:a9:41:4a:41:13:61:7c:97:ab:9e:61:
53:d0:db:a5:81:7a:53:a5:7f:f1:e2:42:4f:ff:53:bf:b0:a5:
be:3a:43:ac:b1:c6:9d:be:08:39:1a:15:48:a4:34:30:46:30:
db:dc:24:1c:38:c8:3a:55:34:89:bf:38:2e:6b:83:48:7c:9f:
dc:27:57:1e:a8:8e:52:17:17:08:85:e7:ec:b6:52:82:f4:a5:
e6:f7:dc:5e:28:e2:39:2e:89:56:c2:a5:ec:31:db:74:9c:a8:
5f:2e:32:b5:47:b7:00:b7:d6:90:46:fb:63:c7:ee:09:06:bf:
95:f7:4b:ef:bd:5b:1d:a0:b7:bd:62:13:aa:ca:36:08:7c:21:
5a:02:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:34 2025 by rpki-client