Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
File: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (raw, json)
Hash identifier: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=
Subject key identifier: 81:14:8C:4D:24:22:B1:DC:F9:5E:F8:1C:59:11:AF:FE:19:DD:49:69
Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Certificate serial: 6928EDB6AF88240A46E5A15B052FC75C6B3C2E4A
Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
Signing time: Tue 04 Mar 2025 20:06:30 +0000
ROA not before: Tue 04 Mar 2025 20:01:30 +0000
ROA not after: Tue 03 Mar 2026 20:06:30 +0000
asID: 136116
IP address blocks: 103.112.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:28:ed:b6:af:88:24:0a:46:e5:a1:5b:05:2f:c7:5c:6b:3c:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Validity
Not Before: Mar 4 20:01:30 2025 GMT
Not After : Mar 3 20:06:30 2026 GMT
Subject: CN=81148C4D2422B1DCF95EF81C5911AFFE19DD4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:b0:bc:b5:d6:ad:79:48:5c:89:16:7f:69:
7d:32:e7:46:ff:46:23:ff:6b:28:a3:2b:e4:f8:04:
a6:59:c4:af:dc:5e:bf:2e:ab:03:f3:b2:51:f7:09:
01:59:10:8c:ca:20:4e:78:02:0c:9b:41:49:f3:1e:
8b:c6:ef:79:e3:41:06:15:bf:17:27:80:a0:11:2e:
0e:18:83:a7:14:80:2a:1f:66:97:28:b1:64:6b:2d:
e9:9e:1f:1f:54:7e:3d:a3:2e:31:f0:f1:84:84:ed:
c3:88:18:f3:5b:f0:68:09:26:ba:9e:ac:71:7c:66:
04:52:ac:ce:3b:30:2f:94:cb:b5:82:6c:f9:c5:fa:
45:a7:87:48:2a:8a:1c:1f:ee:21:b0:ff:9b:60:4d:
de:25:1b:cb:58:08:0f:13:0f:11:ca:7d:c7:40:ec:
68:12:f6:b3:63:c2:f4:33:f1:80:89:cf:bc:82:9a:
9a:da:0f:e1:6a:80:be:c6:c7:2a:14:0c:65:0a:32:
3b:e1:82:7e:17:ac:69:88:78:96:f9:5c:68:6f:b7:
f7:fb:25:8c:35:d7:a2:fa:40:6d:64:f7:2f:e6:f0:
6c:35:c5:09:4f:f9:1d:1e:09:7d:18:db:97:7e:91:
fc:89:b2:fa:ff:f0:14:dc:14:bf:92:07:c6:a8:e5:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:14:8C:4D:24:22:B1:DC:F9:5E:F8:1C:59:11:AF:FE:19:DD:49:69
X509v3 Authority Key Identifier:
keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ba:ea:a7:f3:fe:6b:c8:6e:94:2b:58:4d:1d:b8:db:51:26:
3e:f1:f0:41:a3:ab:45:34:a0:24:b7:7c:75:eb:69:88:32:f8:
c3:12:48:84:5c:a5:72:83:4d:ef:cb:d6:bc:7e:39:2e:da:b2:
fe:89:43:86:f3:29:99:df:ac:b0:49:21:7d:75:df:a3:9c:7f:
ad:7e:0e:93:b0:19:37:47:94:98:9a:ad:d5:4c:1b:02:2e:d8:
f2:40:dc:8d:e8:17:d9:04:28:78:d5:6b:76:36:a6:9c:10:fb:
5a:e3:7c:50:b0:2b:e9:24:a1:d9:e0:10:ff:ad:c1:a3:e6:33:
1a:6f:a6:e2:8e:f9:76:ae:dd:32:45:cd:f5:91:b1:aa:28:6d:
3b:88:6f:c5:79:8c:79:6c:df:27:ba:61:38:3e:75:cb:68:d5:
70:c1:89:c6:c0:f2:2f:ab:45:6e:06:58:f7:7e:66:25:05:67:
17:89:f3:f0:26:9c:c9:d2:48:0b:3a:fe:da:55:30:92:ff:b5:
02:51:e5:7f:d4:a4:ac:71:e6:6f:06:3c:a2:46:f0:6c:e4:b1:
5e:26:8b:fc:b1:1d:b5:53:1b:48:70:39:92:49:e1:e7:64:47:
4b:88:93:bb:08:e2:b3:ba:00:e6:f1:8e:b4:32:e7:96:01:f3:
37:49:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:02 2025 by rpki-client