Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
File: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=
Subject key identifier: 42:83:CE:C8:3C:61:D4:BE:24:0A:58:27:FB:7C:B9:CE:B4:71:CE:A6
Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial: 06D412CA925BDD80FFA24D0FBF79B94C69D51A9D
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
Signing time: Tue 11 Feb 2025 10:00:01 +0000
ROA not before: Tue 11 Feb 2025 09:55:01 +0000
ROA not after: Tue 10 Feb 2026 10:00:01 +0000
asID: 45289
IP address blocks: 103.241.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d4:12:ca:92:5b:dd:80:ff:a2:4d:0f:bf:79:b9:4c:69:d5:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Validity
Not Before: Feb 11 09:55:01 2025 GMT
Not After : Feb 10 10:00:01 2026 GMT
Subject: CN=4283CEC83C61D4BE240A5827FB7CB9CEB471CEA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:6e:1d:81:ed:0d:b2:7a:06:e6:17:ad:91:
06:05:87:4a:b6:f7:ba:4b:82:4e:4d:27:2d:19:85:
bc:bb:53:16:da:0b:d2:bb:a0:73:a8:f8:98:9d:66:
58:3f:84:fd:56:35:87:f4:95:d8:a4:5f:27:c2:5b:
69:aa:1f:19:ff:f2:b4:15:a6:eb:da:11:83:5f:25:
cb:71:ea:16:c2:6e:0c:d6:fb:9f:f9:30:d1:d7:02:
3b:d4:0d:4e:92:87:77:0c:9e:46:e5:e9:fd:6c:0b:
0e:fd:5e:2e:8a:2c:9c:e7:09:f7:05:51:42:7a:ff:
d2:5c:35:4c:e6:37:65:ab:1b:40:a3:73:90:f7:f2:
a1:f2:62:52:64:5d:61:0a:17:73:ab:a7:a9:b8:c2:
34:68:f6:ef:63:4e:83:46:80:3f:55:dd:62:74:ca:
72:eb:01:76:f7:a8:4b:27:f7:17:ca:3d:45:16:a3:
c2:b2:75:a1:4b:f4:23:81:03:54:28:10:3c:3f:d7:
cb:ae:a1:5c:e9:73:d9:d8:27:31:da:a7:1c:84:4e:
88:2e:1d:ff:7a:ff:f1:1b:9e:36:b9:55:fc:35:7a:
71:3e:a6:ee:2b:3b:d4:13:49:00:a5:9d:9b:e2:de:
38:95:d3:ea:0f:ba:9b:e5:2d:c1:16:11:42:98:0f:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:CE:C8:3C:61:D4:BE:24:0A:58:27:FB:7C:B9:CE:B4:71:CE:A6
X509v3 Authority Key Identifier:
keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.179.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b4:0f:12:1a:3f:af:3d:0d:a6:90:f5:43:5b:15:15:8f:82:
de:f7:e8:b0:d6:2a:d5:8a:4d:f0:a2:03:7e:89:25:3a:0a:53:
9f:67:57:a1:3c:30:b3:3a:5c:93:08:26:11:fa:85:51:dd:f3:
74:ea:e9:05:37:81:84:03:a1:32:1e:75:21:f7:b5:e5:1e:d1:
2b:b0:96:49:2a:d0:9b:ac:ce:56:75:48:b5:59:b2:65:6f:fa:
7e:c4:c6:f4:53:5e:8c:7c:2c:dd:8a:1c:57:85:df:6c:5b:7e:
04:e2:ff:7b:c8:bf:e6:cb:91:6c:0f:dc:10:65:3f:21:95:15:
7f:ca:0d:fa:c4:de:16:a7:df:53:71:d3:ce:0c:3e:bb:a5:5d:
fe:40:82:81:62:11:46:55:52:00:2e:42:ec:b5:b3:94:3e:90:
2a:9c:5a:e5:bf:4a:a8:be:00:a6:f9:bc:0d:8e:de:85:13:ac:
df:54:54:3b:95:0e:89:bd:d8:cc:1b:41:9f:eb:76:53:be:5c:
5b:20:fa:4e:30:3e:55:4f:e2:0d:42:51:83:66:7a:40:5a:25:
bc:28:73:70:00:84:75:6b:77:eb:70:a3:1b:52:03:ce:bd:8c:
5f:f8:98:a3:3f:de:97:57:12:64:65:fb:05:dc:b4:03:ea:51:
a6:4f:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:44 2025 by rpki-client