Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa
File: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (raw, json)
Hash identifier: f+ikvw3lFJQBhoG9P7rO8nWG3RR5gcK3OF+btbUSD1M=
Subject key identifier: 7F:D7:BB:20:1A:A7:71:21:5C:11:52:A7:10:6B:CC:AC:8E:E3:9C:87
Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial: 6E2F35D74E2522BF5EC1C97D629180B5B738DCA1
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa
Signing time: Tue 25 Mar 2025 02:30:04 +0000
ROA not before: Tue 25 Mar 2025 02:25:04 +0000
ROA not after: Tue 24 Mar 2026 02:30:04 +0000
asID: 136865
IP address blocks: 103.239.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2f:35:d7:4e:25:22:bf:5e:c1:c9:7d:62:91:80:b5:b7:38:dc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Validity
Not Before: Mar 25 02:25:04 2025 GMT
Not After : Mar 24 02:30:04 2026 GMT
Subject: CN=7FD7BB201AA771215C1152A7106BCCAC8EE39C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:80:ae:f5:0c:e2:a1:6b:27:61:66:3c:1a:
0f:da:54:8d:c3:d6:e0:92:11:0a:8f:05:a1:5e:95:
2c:9a:36:64:db:9c:ca:37:38:da:6c:57:25:72:94:
38:48:76:a2:04:18:a5:10:1d:64:c4:a5:0d:50:99:
e7:9d:62:98:8d:68:ba:53:e0:6c:b9:51:7f:88:66:
e1:eb:ef:31:54:86:23:53:74:a4:39:b9:07:9c:49:
5b:09:ea:6d:ea:c8:3c:86:c3:5d:a8:99:6e:7a:52:
38:f5:12:f5:c1:60:cd:9e:0f:5d:f7:df:69:fc:cf:
63:3a:5d:ac:40:c3:1b:db:ef:09:a3:c2:e3:23:e6:
2b:96:d9:01:8f:d2:8d:62:d1:ea:5a:39:9a:f1:c2:
8c:24:fd:96:ea:d7:dc:14:92:79:4c:ba:a9:8b:00:
95:76:4a:c8:60:63:8e:1c:db:2c:82:5f:b9:f2:66:
34:60:79:da:aa:fb:e8:62:d5:f5:a2:b0:73:56:01:
8d:6f:11:f4:18:2c:4e:c8:01:31:d6:0c:99:8e:99:
cc:5c:d8:af:44:e6:ca:7d:99:86:71:e9:cf:f7:c1:
1c:b0:d5:34:d4:45:03:a4:0a:53:e8:c1:13:4a:e0:
14:32:28:50:11:4a:d5:ad:ad:25:bb:b9:be:3b:38:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:BB:20:1A:A7:71:21:5C:11:52:A7:10:6B:CC:AC:8E:E3:9C:87
X509v3 Authority Key Identifier:
keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.22.0/24
Signature Algorithm: sha256WithRSAEncryption
20:de:8f:d8:0e:a1:6b:e6:2a:82:37:c1:d4:c8:d2:e0:73:e8:
13:c2:5e:bf:4a:d3:cb:40:53:fa:cf:4e:fc:d1:b2:2d:48:9a:
75:05:9f:3e:f4:eb:86:c1:31:54:76:61:93:c1:7a:24:8b:16:
bf:2d:47:7c:b7:d5:1b:14:84:f0:83:96:c6:81:12:85:3a:0a:
f1:fb:72:05:98:45:44:e0:f6:de:98:6e:8a:ed:d7:5d:a9:10:
33:74:e4:b5:a7:1e:02:92:7c:d5:1c:27:19:a1:6b:96:22:c5:
6b:10:24:f3:f8:57:3d:38:6c:0d:7c:55:c4:7a:39:1c:ce:6d:
bc:dd:cc:68:97:d0:03:df:5a:56:45:26:10:7e:2c:e6:8b:a0:
53:10:95:d7:16:72:88:4f:f6:e1:ac:28:77:cd:27:5a:5e:bc:
dc:7a:45:0f:4d:b2:a4:20:72:c7:6b:ad:f7:4b:d6:f9:be:a7:
40:0c:d7:75:6c:aa:8b:21:c3:16:98:ec:b4:99:91:a5:69:a2:
13:b3:d9:88:8f:9c:bf:7a:2e:45:d1:ee:a9:5e:a2:cf:b5:a8:
66:e4:1d:74:ad:01:dc:3d:01:3e:da:6f:9c:cd:18:a8:df:41:
ad:ce:76:6d:c1:40:35:3d:1d:2b:72:b8:35:3b:d9:d4:90:4a:
24:1d:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:37 2025 by rpki-client