Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
File: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=
Subject key identifier: D5:4C:A9:BA:92:F7:8F:EF:38:C0:D4:E5:1B:F4:8D:85:B1:48:CC:74
Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial: 7FC4595868EB2110F87247053A08395775DDB93E
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
Signing time: Wed 13 Nov 2024 09:54:19 +0000
ROA not before: Wed 13 Nov 2024 09:49:19 +0000
ROA not after: Wed 12 Nov 2025 09:54:19 +0000
asID: 46023
IP address blocks: 103.245.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c4:59:58:68:eb:21:10:f8:72:47:05:3a:08:39:57:75:dd:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Validity
Not Before: Nov 13 09:49:19 2024 GMT
Not After : Nov 12 09:54:19 2025 GMT
Subject: CN=D54CA9BA92F78FEF38C0D4E51BF48D85B148CC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:4a:d1:cc:74:50:31:42:9d:44:ca:2c:ac:
52:48:38:88:e7:55:d4:7b:67:4f:fb:b7:61:7f:0f:
f3:8c:d7:07:7b:0b:9b:d5:73:d7:b4:fb:df:bd:e1:
9e:19:ab:6e:18:b8:d9:eb:9e:e9:95:4a:11:fb:b3:
a2:6e:1e:bb:56:40:89:81:d4:f9:31:c0:1b:23:82:
dd:7d:42:27:ce:61:55:8c:10:99:4c:ec:d6:ec:ff:
e5:ab:77:29:cd:58:1e:b9:10:f1:fc:f8:c4:de:f2:
07:99:ab:5c:d7:a7:67:9b:c7:3e:0a:e9:89:59:c1:
32:f6:82:de:9b:1e:e6:2c:6f:85:46:c5:c7:6b:d9:
75:e1:5f:8f:27:ee:e7:2f:68:45:a3:18:58:02:60:
b9:8c:27:01:f8:be:77:1f:c2:0d:15:bf:d6:6b:0c:
a9:b7:2f:32:c4:b0:e2:fe:2f:02:1f:f1:92:58:36:
8a:09:d5:af:dc:3f:6b:e7:95:b8:11:1c:15:b3:22:
56:fc:89:37:e5:6e:65:c7:96:9a:65:e7:6a:87:2c:
4f:5b:c8:2e:f9:0b:b3:43:68:22:1a:4f:6c:52:e5:
b2:a9:c0:1e:f8:03:d3:e7:98:85:f0:b6:32:11:db:
43:5d:20:d6:fb:07:be:8f:6e:f0:a1:8c:1c:0d:66:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:A9:BA:92:F7:8F:EF:38:C0:D4:E5:1B:F4:8D:85:B1:48:CC:74
X509v3 Authority Key Identifier:
keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:c9:a7:5f:88:52:dc:10:c6:f4:d2:d7:ea:5e:44:69:3f:e6:
bf:07:5a:91:06:bf:0a:71:e2:d7:c4:81:a1:68:51:bd:81:4c:
7d:6f:84:d1:2c:cf:fa:d4:e2:12:d9:cf:6b:15:f5:1d:51:1f:
53:c1:59:6c:1b:a6:6e:03:00:39:f1:74:69:1d:35:b4:9f:f8:
06:07:51:c9:39:55:e8:1c:ca:99:49:df:a0:b5:79:3a:b5:1b:
15:45:ab:be:ea:e5:95:4c:aa:6c:e8:7d:53:cf:bd:dd:e7:15:
44:f9:48:0b:ab:29:89:fb:28:4d:69:56:92:7c:e4:e5:b4:be:
2d:d9:94:c0:a3:93:23:d4:0d:60:d7:31:0f:37:44:82:49:2c:
ec:63:92:b7:67:b2:c3:d8:72:9b:41:87:33:13:57:b4:10:d9:
1d:e3:f0:02:71:8d:dd:61:45:9e:13:41:be:e5:75:89:b9:6a:
32:9d:fd:13:3f:c9:a1:b8:ea:91:d1:f7:1a:3c:56:bb:30:11:
7c:9f:ca:39:f7:3d:38:33:86:bf:8a:b2:5c:14:54:04:88:14:
10:68:fe:8a:b2:f0:73:1a:9d:88:f8:5a:14:27:25:d2:07:69:
04:5f:42:3c:ba:f6:a8:b0:fc:b0:53:fe:4c:be:69:8f:1e:e9:
8b:2e:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:14 2025 by rpki-client