Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
File: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=
Subject key identifier: 29:94:1F:E8:5A:0A:03:E4:4A:14:AC:18:13:C0:2B:16:EE:6F:B1:2A
Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial: 6CA05D15517E57CA96B893B36543DBDD51278B05
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
Signing time: Fri 03 Jan 2025 09:01:57 +0000
ROA not before: Fri 03 Jan 2025 08:56:57 +0000
ROA not after: Fri 02 Jan 2026 09:01:57 +0000
asID: 135445
IP address blocks: 103.69.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:5d:15:51:7e:57:ca:96:b8:93:b3:65:43:db:dd:51:27:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Validity
Not Before: Jan 3 08:56:57 2025 GMT
Not After : Jan 2 09:01:57 2026 GMT
Subject: CN=29941FE85A0A03E44A14AC1813C02B16EE6FB12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:e3:c4:4c:9d:0b:9a:a5:00:de:47:a0:7e:
2d:05:cb:ba:a4:b0:c4:67:7b:5c:af:a2:b1:7d:b4:
fc:ae:3b:40:5b:f2:e2:06:9c:8a:db:00:83:a6:fe:
b4:94:e6:7b:b0:91:b9:50:d8:ef:9a:1e:c0:8e:98:
12:41:4b:52:80:71:4a:89:14:df:f8:5e:7d:7e:c4:
bf:03:17:16:4f:fb:a0:b4:02:66:d2:84:fd:22:1c:
3e:62:45:fc:87:6e:4a:a1:75:d5:f9:4d:97:b7:de:
48:f4:09:0f:62:86:8d:77:0d:29:5a:86:b6:66:03:
44:c5:3b:ff:c6:88:a4:a8:1b:e3:17:26:dc:20:74:
37:72:1c:3a:c9:44:c5:b3:37:b0:31:92:0f:ad:27:
62:5b:fb:7b:b2:28:ba:61:3a:84:dc:2e:ab:5d:1c:
5b:45:cf:a1:1c:59:ad:ce:26:16:bd:d5:b1:f7:91:
01:cb:47:f7:fc:ca:76:e9:6c:03:78:9b:7d:b0:0b:
4c:c8:0b:d6:b6:b9:2f:51:13:16:34:a9:f8:14:e9:
cf:8b:c2:d2:55:0c:10:1f:d2:a3:1d:a9:d2:a1:b5:
e8:a4:94:df:f9:e2:0c:3c:5c:ce:9c:d3:b6:aa:a0:
2d:ca:18:91:51:e5:8a:07:cc:13:15:b2:26:6a:dc:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:1F:E8:5A:0A:03:E4:4A:14:AC:18:13:C0:2B:16:EE:6F:B1:2A
X509v3 Authority Key Identifier:
keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.178.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3a:b2:23:bb:60:b8:9e:f6:25:33:f8:79:63:cd:21:1a:1c:
48:8a:6b:8d:21:1e:a2:a2:15:1a:1e:5d:a9:90:16:59:1e:a1:
7c:c3:7c:b7:5d:2e:58:b9:aa:66:bf:9f:aa:33:73:50:08:f3:
53:fe:69:6f:ea:43:d8:3b:8a:98:55:5e:d9:94:b5:7e:5f:9c:
8e:49:0e:4a:e1:b5:3d:1a:4c:8b:a8:0e:b6:3e:04:8f:f4:64:
a0:8b:a2:0f:22:a7:1a:1b:c5:16:82:91:1a:c9:ea:d8:b2:f7:
90:a4:7a:1c:63:39:4c:d1:84:cd:03:cb:85:0b:65:88:26:d3:
7e:aa:83:73:7f:fc:fa:38:67:10:2b:32:5f:c5:bd:c4:ee:08:
1e:bc:25:4b:f6:b9:f8:8c:56:17:4f:4f:f3:24:ab:ab:58:42:
d7:41:39:92:a0:68:c7:39:42:f3:2f:e1:97:be:1f:09:4b:67:
a9:b8:de:77:22:30:88:ab:ba:10:34:1d:92:9c:ba:0f:a3:62:
48:19:3b:11:d9:79:53:00:b1:f7:51:5b:f3:9f:7a:56:47:7e:
3a:cb:8d:82:64:b1:a0:52:53:da:a1:35:88:64:3c:a5:5d:84:
c2:af:54:6f:76:80:71:fd:fc:06:d7:a9:74:ef:4f:96:29:04:
ea:94:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:06 2025 by rpki-client