Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa
File: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (raw, json)
Hash identifier: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=
Subject key identifier: DE:3C:FF:44:D1:1A:4B:16:38:79:40:30:97:61:A2:77:4C:50:D4:5B
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 6691DD409EDAC3CBBD84AB156BC731694347C3DA
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa
Signing time: Fri 24 Jan 2025 03:02:19 +0000
ROA not before: Fri 24 Jan 2025 02:57:19 +0000
ROA not after: Fri 23 Jan 2026 03:02:19 +0000
asID: 135445
IP address blocks: 103.223.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:91:dd:40:9e:da:c3:cb:bd:84:ab:15:6b:c7:31:69:43:47:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Jan 24 02:57:19 2025 GMT
Not After : Jan 23 03:02:19 2026 GMT
Subject: CN=DE3CFF44D11A4B16387940309761A2774C50D45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:39:7c:04:27:6e:50:d3:75:82:c3:83:8d:
cd:d2:b5:27:e5:bc:99:72:87:25:20:82:76:04:cc:
7d:48:d7:40:58:2b:bd:43:3b:db:7f:86:b4:9a:01:
40:f8:9d:6a:da:be:aa:d9:de:f8:34:87:88:cb:88:
6d:c9:39:76:fa:03:f2:bc:0e:16:a3:80:1f:f6:a5:
92:14:97:ef:46:1d:a4:d9:d9:cd:48:7e:d7:ec:ca:
51:da:a3:2f:ef:fa:06:00:a9:b9:4c:68:d7:de:45:
85:7a:fe:be:5b:6b:a1:0e:71:3b:7d:86:72:db:0e:
5c:c4:41:fd:1a:18:cd:2e:5e:a0:de:40:e4:0a:54:
91:85:fd:e4:70:92:ef:6f:85:65:c7:4d:a5:95:f4:
e8:c6:08:6d:98:d2:bc:b9:50:c7:f2:42:3e:83:fa:
d9:be:4c:51:bc:da:7a:e4:45:1d:32:1f:10:ed:06:
dd:ba:91:a8:87:6b:66:44:af:8b:56:18:f5:cc:ba:
00:5d:5f:e0:ea:2b:2c:30:20:f8:12:72:8c:d6:e7:
e9:86:36:11:c7:f1:3a:ec:ea:b4:fa:a0:04:0c:4d:
28:e8:c9:45:eb:92:37:8e:fb:57:87:37:d8:c0:93:
b8:73:00:4d:a4:e7:69:e4:ad:bf:78:59:6a:ef:fc:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:FF:44:D1:1A:4B:16:38:79:40:30:97:61:A2:77:4C:50:D4:5B
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32332d3233203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.2.0/23
Signature Algorithm: sha256WithRSAEncryption
81:57:31:a9:33:4a:fc:e8:92:4d:59:4f:91:69:30:71:b9:9f:
a6:98:48:99:60:f7:43:e2:fb:54:4b:92:47:bc:35:be:24:0b:
e6:c0:a7:f7:85:7b:4f:99:16:13:68:08:08:c5:36:cb:40:8a:
59:8e:48:0e:c1:fa:05:64:35:b7:88:0a:e1:8e:00:cc:ce:c5:
e1:7c:e7:0a:7a:a8:7e:e7:97:c1:67:41:59:37:5f:d3:44:c2:
02:f8:df:3f:71:52:f2:eb:af:d3:b2:d8:eb:a1:0b:5a:4a:a5:
28:6d:ef:e4:b3:33:bc:49:ac:0e:6a:d6:a1:2f:48:24:73:cb:
d2:6b:8c:3f:d1:7d:db:b0:98:a8:8b:23:dc:af:01:4e:da:c7:
cf:6d:45:26:fe:67:56:f2:a8:89:3c:cd:c4:6a:c3:58:d5:5f:
40:e2:4f:37:99:85:c9:84:8f:15:7f:19:76:d8:c5:7e:61:b7:
47:a6:11:74:1e:01:33:9f:f2:7b:1c:8b:a3:4e:79:7f:b9:ce:
4b:61:3e:ec:79:8b:de:dd:2f:22:cc:d8:21:48:39:c6:6b:b1:
de:a2:08:06:3a:46:16:10:22:00:d3:2e:3a:e2:27:72:e2:d6:
97:ab:f0:d1:4d:aa:a1:cc:ad:8f:d4:77:44:32:b6:87:45:07:
c8:36:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:37 2025 by rpki-client