Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa
File: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (raw, json)
Hash identifier: sd0S2lZiexQ8yrC/UX8iGicv1AC5rkxTF1i8DSUHRRk=
Subject key identifier: 98:F3:2F:40:EF:B1:DF:A8:3F:E2:57:D3:74:28:2C:37:13:B5:DC:79
Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Certificate serial: 2D796D9FD408E1678892DF10C2ADD8311FB4EE59
Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa
Signing time: Tue 05 Mar 2024 05:00:00 +0000
ROA not before: Tue 05 Mar 2024 04:55:00 +0000
ROA not after: Tue 04 Mar 2025 05:00:00 +0000
asID: 150541
IP address blocks: 103.68.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:79:6d:9f:d4:08:e1:67:88:92:df:10:c2:ad:d8:31:1f:b4:ee:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C
Validity
Not Before: Mar 5 04:55:00 2024 GMT
Not After : Mar 4 05:00:00 2025 GMT
Subject: CN=98F32F40EFB1DFA83FE257D374282C3713B5DC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:c7:88:3d:f8:ba:c8:89:f9:08:84:56:5c:
3e:72:dc:2f:9b:e4:ac:64:10:d1:4f:59:c5:0d:40:
8b:00:fd:45:9c:98:98:79:28:81:57:91:ca:ba:7d:
2d:6d:8e:ea:03:01:be:64:78:0a:b0:56:d7:30:ef:
7b:a4:f6:42:ac:5b:30:ad:fa:d0:00:2f:93:eb:71:
c9:ed:07:18:8c:b5:da:12:43:9b:62:1a:76:6b:84:
69:eb:31:d1:d6:c6:cc:2c:6b:5d:69:10:d5:2e:d9:
c5:45:a6:19:c9:fb:8f:c0:c4:d7:06:e9:96:e3:c8:
05:0b:88:60:55:1e:8e:ff:9e:7d:9a:2d:6d:42:88:
80:38:d3:f1:ed:bc:f6:ab:73:64:5f:e3:54:df:53:
b9:31:62:bf:c9:95:4a:f1:a5:19:2a:4c:e9:74:e8:
f6:89:f4:d7:34:ef:1a:fe:ca:68:9f:c7:57:50:49:
b4:f5:cc:61:40:b9:23:bf:e8:02:a4:56:f2:93:1f:
73:a0:93:7b:0d:bc:5f:a6:b9:8c:00:20:93:3a:01:
5d:66:80:8f:9e:90:38:57:1f:53:32:a7:a2:2c:40:
95:eb:7d:c3:74:ff:7f:34:27:ed:eb:c1:f2:b0:9b:
7a:a2:8c:cf:c1:4e:02:02:c4:b1:01:3f:a7:e1:51:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:2F:40:EF:B1:DF:A8:3F:E2:57:D3:74:28:2C:37:13:B5:DC:79
X509v3 Authority Key Identifier:
keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6a:8b:01:8d:7b:32:34:8a:b3:10:c6:4a:54:dc:a0:91:b9:
5d:2a:37:c0:d3:ba:76:ae:d4:a1:b6:b4:07:63:92:7b:62:1d:
3d:60:97:13:d3:85:89:12:28:d0:91:2b:61:b0:ef:2e:fd:44:
71:e3:6e:bf:d8:da:f1:46:4d:2e:d1:63:b5:fb:2e:d6:4c:79:
1a:b1:5b:47:72:ef:dc:5b:6c:a9:47:d5:ea:34:0c:ba:d4:14:
fc:4d:dc:14:62:aa:cf:e2:cc:53:a3:96:2d:d1:6c:a0:48:c9:
5a:21:5d:1b:d0:a5:a8:e6:92:18:ae:ec:87:b4:59:a4:0b:48:
14:69:44:56:f1:72:c8:59:d2:bc:5c:12:bc:de:bc:5f:3b:02:
d6:5e:4b:1a:ff:6e:78:ff:6b:53:6a:4e:3b:28:61:76:39:12:
08:d1:cc:a8:54:12:57:88:5f:6f:82:d4:c5:1e:22:f0:9c:5a:
02:8c:f7:53:8c:32:01:50:84:01:d4:26:3c:d2:a1:e9:a9:f1:
e9:5a:f9:dd:7d:5e:46:59:71:f7:2e:65:8b:97:d4:a2:b4:5e:
78:61:52:05:c9:2e:ca:64:9b:e9:f8:93:5c:da:12:0c:70:bf:
7a:ba:f6:9a:82:cd:fc:96:3a:5d:7d:c7:a6:05:fd:0c:7b:55:
16:ee:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:19 2025 by rpki-client