Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa
File: 3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier: ZI7CliHVNmFJPklwcDE1IR6Ewnq2zVVrv/DN2OAjdAk=
Subject key identifier: 2D:44:88:42:7B:0C:27:20:0B:12:60:98:44:74:81:5C:D7:58:48:66
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 259CA07AD770A334564A93AEF796835F1EA8EEE4
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa
Signing time: Tue 21 Jan 2025 08:00:02 +0000
ROA not before: Tue 21 Jan 2025 07:55:02 +0000
ROA not after: Tue 20 Jan 2026 08:00:02 +0000
asID: 38526
IP address blocks: 103.112.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9c:a0:7a:d7:70:a3:34:56:4a:93:ae:f7:96:83:5f:1e:a8:ee:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Jan 21 07:55:02 2025 GMT
Not After : Jan 20 08:00:02 2026 GMT
Subject: CN=2D4488427B0C27200B1260984474815CD7584866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:77:b5:8a:4b:02:c7:5d:c0:68:17:b6:34:
84:8e:43:08:d8:af:f8:e6:58:ab:d6:aa:6f:07:74:
b7:f4:0e:f0:c3:95:40:8b:33:b0:8d:4d:6a:c5:c4:
1f:b8:19:58:f6:a1:d9:3c:e4:d2:3f:79:a0:06:3c:
7a:7d:bc:d3:e5:33:f7:02:2d:09:35:66:65:a3:eb:
2c:7e:a5:dd:e8:f0:bf:97:99:cf:6d:65:9f:c1:c8:
e3:c0:40:4c:21:c3:bf:b3:90:4e:b8:ca:e7:2d:e9:
ec:43:81:cb:d0:f4:d1:37:34:c0:bb:78:b2:52:d0:
f8:ea:89:af:60:52:3b:f6:97:6e:4a:c8:08:94:75:
9e:af:75:a3:7d:87:7f:f3:41:c7:de:2a:b0:ab:e3:
3c:16:78:39:9f:bb:52:cc:36:6f:33:dc:dd:61:40:
d7:59:7b:c1:b4:ee:02:9f:27:9c:ec:fb:86:74:af:
a0:5a:6c:d6:a8:a4:cd:c0:f1:58:2d:cf:3b:bd:b2:
77:70:9f:16:c0:48:c2:1c:53:de:bc:84:7e:1f:09:
91:c2:ea:95:24:42:52:0d:bf:f5:46:a9:26:09:48:
5b:6e:a9:a2:2e:e2:cd:3a:44:d5:12:7e:9f:e4:4d:
c5:1c:a6:14:13:d6:f0:54:8e:30:a5:9c:0d:59:3c:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:88:42:7B:0C:27:20:0B:12:60:98:44:74:81:5C:D7:58:48:66
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:02:a4:29:f2:f6:45:61:ea:f8:7a:ed:91:9c:73:d8:ae:b5:
db:4a:b5:c6:37:3a:e4:11:0a:f7:3a:5e:f2:7b:89:27:1f:3e:
bd:e0:93:a7:cc:ed:d3:6b:27:89:2f:91:f6:e8:f2:7c:c8:76:
65:dc:f7:c4:14:22:dd:f4:b2:1a:90:8d:12:ae:29:a1:ea:a8:
07:06:da:82:ac:79:4a:5d:16:b0:ab:b2:8e:3e:33:d0:17:51:
4c:2b:ba:d1:9a:12:d0:ce:8e:ca:07:14:dc:6f:68:de:d9:76:
a7:a9:92:c9:1d:1e:6d:d1:1f:03:c5:82:f8:a7:e6:e1:9a:8a:
d2:34:7c:b3:71:8c:81:0d:5d:24:fd:52:72:7d:39:bb:0f:f7:
70:9c:e2:eb:97:2c:6a:47:d3:cb:da:ac:f3:a0:6a:07:81:33:
fc:eb:e1:2c:0f:34:a7:e6:e4:5a:8a:40:c2:b8:4f:dd:8c:a8:
12:67:5c:19:d9:25:cb:74:94:e0:17:92:9f:61:28:dd:0c:88:
15:6d:02:57:a9:d1:a6:f6:03:81:b8:48:bc:06:88:83:74:93:
c0:29:4c:0c:d6:77:38:29:be:79:c2:bc:df:5c:de:83:c9:a1:
2a:7d:e8:52:75:cb:8a:63:bf:3c:a7:a7:e6:ca:c2:e7:01:f7:
3e:7c:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:54 2025 by rpki-client