Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
File: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (raw, json)
Hash identifier: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ=
Subject key identifier: 68:BB:F9:41:EA:30:83:81:26:D6:05:FA:AF:BB:89:59:D8:4A:07:51
Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
Certificate serial: 036275FFA5C66C610078C619ECBB8186960DDF59
Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
Signing time: Fri 22 Nov 2024 18:00:01 +0000
ROA not before: Fri 22 Nov 2024 17:55:01 +0000
ROA not after: Fri 21 Nov 2025 18:00:01 +0000
asID: 149335
IP address blocks: 103.179.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:62:75:ff:a5:c6:6c:61:00:78:c6:19:ec:bb:81:86:96:0d:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
Validity
Not Before: Nov 22 17:55:01 2024 GMT
Not After : Nov 21 18:00:01 2025 GMT
Subject: CN=68BBF941EA30838126D605FAAFBB8959D84A0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:30:d9:c6:e8:16:90:4b:be:42:f2:6e:5e:91:
82:db:66:bf:10:5f:74:b6:7f:ab:d6:8d:04:6d:0c:
fd:16:46:a0:42:92:66:c2:33:2b:d3:42:e5:57:e9:
4e:7f:2f:6a:c0:e0:3d:75:6a:3d:fe:55:e5:3a:d9:
79:da:92:0f:44:76:05:4a:f2:fa:f9:f1:e4:5f:38:
30:ef:02:7a:64:18:a9:3e:dd:7c:ca:33:29:22:70:
6e:e0:7f:1f:f3:57:c6:ed:60:e2:5f:20:95:6f:02:
a0:a7:94:7a:ba:45:13:72:0e:79:a7:af:bc:2a:27:
68:75:b9:c5:bc:ba:f5:6a:2f:e4:bb:02:67:f3:f4:
4c:bc:2f:34:50:f0:08:cf:4b:05:f6:c0:84:d6:fa:
4b:97:ec:40:67:43:0a:73:a9:6b:bc:1d:d9:b4:4c:
01:89:58:6b:2c:41:83:69:c9:df:5e:77:2b:da:a6:
0f:b1:10:8b:93:89:6b:c7:44:cc:b3:c6:cd:55:a8:
38:7a:25:cd:24:5c:16:16:56:c7:03:09:e1:4e:10:
98:a2:3d:21:57:55:0b:10:84:5b:fd:8d:26:dd:28:
a8:95:73:a5:84:96:3d:60:bf:f4:50:9b:74:21:89:
2a:1d:67:83:7a:7a:f9:2c:13:ac:f7:b9:1f:1d:fb:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:F9:41:EA:30:83:81:26:D6:05:FA:AF:BB:89:59:D8:4A:07:51
X509v3 Authority Key Identifier:
keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5c:37:af:6b:7f:a6:ef:6f:68:2b:14:c1:cc:7b:6c:19:4e:
0e:27:79:d2:29:35:e0:a5:15:32:e8:15:c1:0d:8b:c0:2e:47:
15:3f:94:b2:4f:c3:32:17:34:d0:23:d0:e7:f8:9b:ca:d7:5d:
fe:fb:c9:f5:17:5c:40:10:7c:bd:5f:f6:be:ee:d0:3f:69:4b:
7d:d6:4a:31:bb:d9:12:5c:50:ff:57:5b:4b:6d:cf:58:e4:19:
ef:74:77:46:6b:b7:82:37:c7:33:4c:06:9a:24:4c:f2:d9:c0:
69:83:51:25:1e:bd:01:35:2d:8b:fb:18:98:1d:14:62:94:a0:
21:34:7c:55:5b:bb:0e:5d:40:4c:44:bc:6f:be:8c:e1:26:35:
da:01:6b:ef:1d:8f:5d:88:07:ec:53:da:d3:77:75:02:81:b9:
58:9e:ad:03:53:0e:ed:ee:fc:a6:79:2a:17:50:5b:42:97:39:
69:0c:bc:03:52:90:b6:b7:37:1e:b9:c1:a4:76:fe:b7:c3:a3:
c1:6a:98:b6:04:ed:84:f1:43:da:f0:4c:7d:57:d4:5c:6e:81:
f2:cf:4d:f8:29:ab:14:01:0e:99:1e:d0:e0:19:76:d1:b3:ba:
b8:d4:31:4d:4c:34:d8:aa:41:03:9f:fa:a6:13:2b:ca:ad:85:
ac:69:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:36 2025 by rpki-client