Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa
File: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (raw, json)
Hash identifier: VMNDp3Q2brC3XAq98nR7SUn0JBQnPNYJkRtff0QZOr8=
Subject key identifier: 3A:D0:5C:D5:66:7C:2B:D5:D9:49:B5:57:68:D9:8F:E7:E2:72:3D:2D
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 1C279F218B394837F2FECBBE88A20D7D707034A1
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa
Signing time: Tue 31 Dec 2024 08:00:05 +0000
ROA not before: Tue 31 Dec 2024 07:55:05 +0000
ROA not after: Tue 30 Dec 2025 08:00:05 +0000
asID: 58487
IP address blocks: 103.253.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:27:9f:21:8b:39:48:37:f2:fe:cb:be:88:a2:0d:7d:70:70:34:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Dec 31 07:55:05 2024 GMT
Not After : Dec 30 08:00:05 2025 GMT
Subject: CN=3AD05CD5667C2BD5D949B55768D98FE7E2723D2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:c6:85:00:72:6c:7a:de:5b:25:45:00:0a:
59:6c:6f:89:6e:b6:3f:bb:99:a7:82:bf:9e:ca:1d:
fc:98:ab:50:15:15:76:34:7a:ae:a6:68:b4:c3:77:
e8:59:c3:cb:57:1a:22:1b:dc:6c:ce:db:29:e9:53:
df:72:0a:5a:2e:bb:48:ae:27:c1:c8:0e:2b:92:e9:
8a:b0:5d:a9:88:ed:8c:47:9e:bc:5d:22:3b:e5:64:
cd:49:13:fd:d0:ee:49:47:1f:b6:55:5d:f6:e6:8d:
0e:1a:73:a8:79:4d:57:6d:3b:2e:fd:4e:87:7c:a6:
49:1f:2e:c2:22:ce:a3:87:58:88:38:d3:c4:58:03:
e7:7f:b0:2c:99:81:9a:63:8c:8a:d9:a4:35:4a:6a:
94:08:55:23:0b:e2:7c:e8:ed:b1:5e:07:ec:8a:d3:
90:8c:70:61:91:64:b9:d8:f8:61:17:06:56:c0:e5:
92:f9:71:f6:74:a9:5c:cf:27:52:13:4c:f7:3b:41:
a5:14:f1:5c:43:9f:da:3a:d9:d0:c2:83:1c:ae:13:
7d:73:98:3b:d2:fb:41:aa:66:ff:97:aa:0b:82:f5:
8c:c1:9c:4a:cb:7c:bf:d8:8c:c6:aa:2f:a8:36:28:
7f:f0:de:cd:74:4a:ae:11:33:c1:90:e5:c1:58:b8:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:5C:D5:66:7C:2B:D5:D9:49:B5:57:68:D9:8F:E7:E2:72:3D:2D
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.212.0/22
Signature Algorithm: sha256WithRSAEncryption
42:97:8c:1b:1e:81:8b:b7:38:51:61:f8:72:01:f8:a3:26:ad:
35:a5:be:d9:30:e1:d7:ad:72:68:3c:c7:40:e2:25:43:3f:09:
7d:e2:c6:dd:0d:8e:26:99:7b:33:bd:7f:a2:50:40:4d:93:db:
e6:dc:10:ef:fa:37:77:88:e8:4b:92:aa:47:06:0f:7f:13:ba:
0c:61:ff:26:bb:9a:3f:3b:f0:27:14:46:c1:48:9c:10:b0:7d:
10:95:3b:b4:09:a8:5b:c8:e9:e0:16:de:90:98:cb:a4:5d:f8:
0f:47:b8:37:5f:27:f4:66:01:ef:d3:fc:e0:d3:1c:d9:f2:58:
c4:ed:38:84:fe:08:3d:b5:64:6b:7f:62:e5:52:8a:a4:ce:4a:
a9:db:31:ed:47:5d:2a:8b:0e:35:12:8a:0f:a2:c2:36:62:b4:
1c:f8:d0:f0:bc:68:41:17:dc:7a:d9:8f:65:3f:14:5f:88:cb:
c8:5d:c1:65:b1:36:99:81:7f:13:8a:53:08:e0:ca:29:13:55:
56:ca:93:1b:1a:e5:e7:45:e5:dc:b3:74:43:db:58:dc:c9:85:
23:b0:9b:27:84:fd:ba:7b:fe:b5:c8:88:05:5b:d5:ab:d1:05:
42:de:83:b0:ac:c4:b1:4a:e2:61:46:82:2a:5a:f1:07:38:36:
ae:6d:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:03 2025 by rpki-client