Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa
File: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (raw, json)
Hash identifier: /o6tmQkGvPsOq4Lw5BPVkwo19QVwkW2zkWmc/uGp+xM=
Subject key identifier: 52:9B:B2:1C:79:64:4E:9B:40:A1:39:3B:B2:46:F0:B1:CA:E2:75:37
Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Certificate serial: 554A189C8614E8210BC31FC932A839E83B9EEA4A
Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa
Signing time: Sat 29 Jun 2024 02:00:00 +0000
ROA not before: Sat 29 Jun 2024 01:55:00 +0000
ROA not after: Sat 28 Jun 2025 02:00:00 +0000
asID: 142327
IP address blocks: 103.168.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4a:18:9c:86:14:e8:21:0b:c3:1f:c9:32:a8:39:e8:3b:9e:ea:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Validity
Not Before: Jun 29 01:55:00 2024 GMT
Not After : Jun 28 02:00:00 2025 GMT
Subject: CN=529BB21C79644E9B40A1393BB246F0B1CAE27537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:47:ef:05:b7:5b:c3:9d:5f:16:9f:b9:e0:
23:1e:ef:a2:47:d8:c9:44:02:46:47:e4:63:d4:27:
ed:2f:52:cb:45:fd:e3:b0:30:e7:8f:d5:0d:d0:06:
d4:b0:8f:f7:2d:06:86:d3:a9:f9:34:22:37:d6:e5:
69:74:66:39:8e:72:e5:24:ed:8f:74:3e:01:06:42:
36:a3:56:72:be:7e:19:ef:e9:b1:51:1c:b5:1d:ec:
5f:46:dd:a6:e5:11:4f:63:63:ab:fa:be:10:1c:95:
78:de:6b:f2:b3:4d:9f:8c:d0:01:4d:c6:5f:94:44:
0d:db:05:6d:2c:ea:49:48:a0:cc:2d:dd:28:0e:95:
4f:04:57:6b:a6:1c:f3:bf:7d:5b:41:f2:48:c1:45:
55:dd:7a:38:80:97:e3:e1:f7:c3:e9:49:d8:b2:60:
2e:3f:13:47:54:01:c2:8e:ed:02:33:12:b0:eb:f2:
22:40:7e:f1:44:c4:0a:07:de:be:5c:e4:86:a7:82:
d2:4e:4a:55:8c:87:75:67:8d:6c:9a:3f:0d:b6:99:
a8:a4:a1:d0:df:c4:ef:4c:89:91:e4:36:51:94:dc:
42:4a:6c:23:e5:ee:dc:68:a2:45:ce:bd:9b:67:dd:
f4:62:d5:14:fb:00:75:fc:40:db:e0:a3:50:bd:07:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:B2:1C:79:64:4E:9B:40:A1:39:3B:B2:46:F0:B1:CA:E2:75:37
X509v3 Authority Key Identifier:
keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:f9:dd:d7:66:21:0d:9d:00:85:78:dc:91:5a:d9:a2:b4:a8:
69:14:70:3f:41:8f:5c:d8:8b:45:b1:e4:c0:ad:91:e9:d5:73:
1a:a3:85:5f:57:3b:f8:f9:35:00:bc:b0:be:17:2e:82:c4:3f:
1b:1d:f9:eb:17:df:54:54:4d:9d:4a:8e:66:49:fa:45:84:b6:
ef:db:e5:6f:3f:45:fc:65:30:0d:09:ab:14:c4:94:07:03:4f:
a0:90:f0:b2:66:72:0c:bc:6d:ad:da:44:17:f8:85:fc:75:89:
8c:7e:53:98:ea:59:dd:58:b2:77:01:7b:ff:94:12:5f:05:35:
2c:37:c1:23:b9:fb:46:4a:ed:43:08:04:c1:23:fa:8d:c4:3c:
40:ce:bc:31:ac:e7:19:8b:cc:64:71:03:d0:aa:c0:e0:67:f8:
ed:bf:ce:4b:4e:bc:18:7a:67:37:5f:bb:32:cf:d7:dd:7e:f8:
f8:92:01:47:7b:1e:8d:d9:d6:41:86:24:98:fa:89:05:7a:b8:
3b:ba:bc:bb:ed:bf:de:30:20:4a:47:56:05:60:85:1b:a1:df:
bf:78:36:b0:97:19:4e:21:d4:d2:c6:ed:fb:47:96:b3:c8:7f:
4b:b4:2f:54:5d:d2:fd:de:88:dd:65:cb:e9:39:b8:91:f1:93:
58:b0:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:41 2025 by rpki-client