Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa
File: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (raw, json)
Hash identifier: PxvGuIjYZUVKhhdFWZhKvrr92NyQXYHwT8YFHUECeBg=
Subject key identifier: BA:0B:CF:69:EF:01:8E:5A:5C:F2:1A:79:0A:BC:0F:E7:40:37:BD:62
Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Certificate serial: 022C20FBB2B0595EEDFB51B1D27A164345380F17
Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa
Signing time: Thu 07 Mar 2024 22:00:00 +0000
ROA not before: Thu 07 Mar 2024 21:55:00 +0000
ROA not after: Thu 06 Mar 2025 22:00:00 +0000
asID: 150541
IP address blocks: 103.68.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2c:20:fb:b2:b0:59:5e:ed:fb:51:b1:d2:7a:16:43:45:38:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Validity
Not Before: Mar 7 21:55:00 2024 GMT
Not After : Mar 6 22:00:00 2025 GMT
Subject: CN=BA0BCF69EF018E5A5CF21A790ABC0FE74037BD62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:dd:77:63:11:86:4e:e7:59:72:82:0b:0b:
01:2a:ac:66:05:ab:8b:07:21:ad:19:59:97:16:9e:
92:a8:98:54:16:02:0b:5d:a6:eb:f1:80:e7:fb:50:
4d:24:5e:94:28:bc:27:ce:d4:ab:8c:7a:7f:26:68:
88:aa:7e:71:c1:64:8a:b9:8c:3c:f5:fb:6d:c3:02:
8f:52:8f:88:20:3e:7e:d2:27:c3:f0:fb:51:79:a5:
d8:12:9d:1e:60:c5:64:ed:a4:9f:0d:60:2f:d5:49:
1c:48:f3:88:55:44:cc:66:b6:ea:19:a2:db:73:df:
89:a5:fc:f9:f8:40:f7:63:13:78:85:e2:ed:71:c9:
b8:11:95:70:98:7c:f5:4c:93:c4:c3:bb:bb:4e:ec:
91:e3:75:86:10:d9:59:82:ab:b8:2f:df:f8:51:14:
de:98:41:2c:e4:aa:6d:4c:96:f9:b7:d0:e5:54:3c:
4d:aa:bf:ff:fc:7c:83:13:55:c1:71:ad:64:42:7c:
32:d9:3b:cc:22:22:f5:e2:f6:10:9a:f7:6c:64:be:
eb:16:d0:9a:7f:96:c0:ed:24:84:25:c5:dd:31:18:
70:32:ad:b3:6a:0e:c9:fe:a4:b5:c9:55:27:22:70:
43:7d:74:b7:f3:20:d9:75:54:95:65:1f:35:a2:e1:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:CF:69:EF:01:8E:5A:5C:F2:1A:79:0A:BC:0F:E7:40:37:BD:62
X509v3 Authority Key Identifier:
keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.232.0/23
Signature Algorithm: sha256WithRSAEncryption
49:5d:26:60:7a:55:e0:6a:0e:72:e1:1a:4a:cf:d9:42:63:5c:
2c:a8:52:6a:53:4a:67:78:cc:32:b4:e8:8f:8c:55:55:b9:25:
88:c9:95:9d:ec:c3:28:60:9b:8b:34:e8:0b:90:4e:70:d8:8a:
39:7c:5a:8c:21:7c:9c:28:b0:75:ae:e3:76:df:2e:81:60:e8:
78:f6:1c:5c:74:9a:f9:4b:ce:f6:7e:7c:a0:ca:0a:34:e4:87:
98:e7:f5:ee:f4:d5:6f:b3:be:70:ed:3b:84:cf:3b:46:e4:bd:
fc:4c:61:ac:77:06:80:b0:a1:e5:4b:c2:2a:bd:63:8b:7a:54:
9d:0b:61:62:4f:98:1b:02:88:53:d0:a6:21:82:06:1b:92:82:
00:ec:60:3c:2b:7c:82:2a:b0:38:b7:d2:df:0f:f2:b3:f7:c9:
e2:35:b9:fe:d0:8b:49:59:1c:fe:01:23:e8:d6:86:5b:e2:85:
a5:53:4c:23:a8:e7:33:79:40:8c:b5:75:63:64:11:4b:c6:2d:
f8:b5:b4:fc:b1:7b:7d:90:0c:fb:85:f1:c1:31:73:fa:0e:e7:
ed:f1:2a:7d:5e:ca:27:3a:23:70:5d:da:c8:47:48:52:ac:cc:
e9:05:1a:bb:25:c7:52:77:65:c5:1a:33:92:e6:fd:c8:5b:63:
8d:48:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:44 2025 by rpki-client