Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa
File: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (raw, json)
Hash identifier: sTkENggcTap1MQOmqvUBM9C0Zbqzr6xTlnqetYVCqIQ=
Subject key identifier: C5:A6:86:0C:F8:CA:B0:37:CA:99:C5:42:BB:D5:C1:9A:29:92:67:7C
Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Certificate serial: 065ED68050B28BCD13AB829CDB0E202ADD0ECA96
Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa
Signing time: Tue 05 Mar 2024 05:00:00 +0000
ROA not before: Tue 05 Mar 2024 04:55:00 +0000
ROA not after: Tue 04 Mar 2025 05:00:00 +0000
asID: 150541
IP address blocks: 103.68.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:d6:80:50:b2:8b:cd:13:ab:82:9c:db:0e:20:2a:dd:0e:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Validity
Not Before: Mar 5 04:55:00 2024 GMT
Not After : Mar 4 05:00:00 2025 GMT
Subject: CN=C5A6860CF8CAB037CA99C542BBD5C19A2992677C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:7e:1d:f1:c1:1d:de:17:35:1f:6b:d4:a6:
32:04:ee:69:f9:e2:76:2b:41:81:1f:bb:86:0f:ca:
22:8d:a4:68:36:cf:ff:21:95:9c:a4:12:40:ce:c0:
e1:d4:dc:bb:43:74:be:7b:c3:91:a8:a9:a5:76:38:
c8:fa:2d:4f:9f:9b:62:1c:71:9a:e8:71:ac:b5:4b:
a8:ae:f2:3b:cc:de:b5:fa:fa:b8:13:0b:67:96:22:
b6:5d:a6:96:dc:0e:2e:de:86:75:1f:5f:1f:6f:21:
5f:e8:d9:4f:e1:1c:f1:a8:d9:97:be:f7:63:26:e9:
e6:35:0a:a3:d2:cd:d4:fa:04:5c:d7:c3:2b:79:8c:
af:7a:8b:71:e6:78:6d:f5:18:42:6f:cc:a6:a8:2d:
08:23:35:45:dd:3f:4f:4f:6c:2e:82:50:37:c2:84:
83:14:4e:73:a8:dd:33:ad:8b:1c:da:e7:8d:32:0a:
a4:12:77:68:4d:ab:85:0b:8d:37:13:e7:2f:52:06:
cf:1c:61:f0:c2:4b:8d:0b:d0:3d:f2:50:30:0a:85:
4d:8b:9c:44:69:85:c3:f6:e2:91:47:bd:7a:3c:21:
0c:c9:a3:43:c6:d0:14:ed:88:f3:57:08:cc:e0:e8:
46:af:63:ff:93:c5:6b:bf:63:eb:54:2b:67:da:11:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A6:86:0C:F8:CA:B0:37:CA:99:C5:42:BB:D5:C1:9A:29:92:67:7C
X509v3 Authority Key Identifier:
keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:80:b8:2d:f8:ec:1a:8d:05:65:88:a1:00:7b:07:3a:da:1c:
e1:48:1c:e9:0c:a0:8d:0e:cd:ee:54:5a:dd:98:e2:15:e7:f0:
ac:e0:fa:23:1f:f1:4a:0f:e4:6c:9c:33:40:68:fb:e8:60:28:
24:09:8f:c6:56:0c:4c:83:0e:48:ff:1a:9c:c2:ed:1a:c5:fc:
5e:90:b7:75:3c:f4:b4:bb:76:4f:1d:bc:70:af:81:b2:e3:cc:
bb:57:97:81:0d:0d:df:72:e2:22:eb:fe:ba:38:91:e4:49:5e:
7c:cf:1c:e2:18:0d:5d:de:b5:3d:ce:63:9d:eb:88:43:3a:21:
ef:38:a0:b7:20:cb:36:a2:c0:92:c4:eb:8e:02:73:a1:a5:18:
5e:c7:9a:f3:2e:f1:3c:7f:4d:e1:2b:76:bf:5a:7b:55:fa:a1:
da:b4:1f:21:8a:ca:3d:1e:2c:f0:39:3e:f2:ee:df:da:5e:ea:
14:4f:02:d3:c3:cb:e7:26:6d:83:e7:c0:4e:e3:61:c9:14:92:
45:6f:42:3b:9f:e1:4d:54:cb:44:a1:21:6c:be:df:19:f4:64:
eb:91:64:7b:4c:f6:d6:0f:91:57:56:f9:6a:05:1f:3d:d3:29:
f0:a0:e0:24:a5:0f:eb:52:cb:25:b3:77:bc:12:33:d5:9d:f4:
7f:63:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:18 2025 by rpki-client