Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
File: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (raw, json)
Hash identifier: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=
Subject key identifier: C4:9A:96:B7:16:9A:9D:48:53:68:C6:EC:C7:2D:83:27:C2:FB:03:58
Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial: 21DBF0328CEFDB2912DCF9346CC0E0D052E5712F
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
Signing time: Mon 19 Aug 2024 04:02:49 +0000
ROA not before: Mon 19 Aug 2024 03:57:49 +0000
ROA not after: Mon 18 Aug 2025 04:02:49 +0000
asID: 64300
IP address blocks: 103.80.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:db:f0:32:8c:ef:db:29:12:dc:f9:34:6c:c0:e0:d0:52:e5:71:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Validity
Not Before: Aug 19 03:57:49 2024 GMT
Not After : Aug 18 04:02:49 2025 GMT
Subject: CN=C49A96B7169A9D485368C6ECC72D8327C2FB0358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:c6:6d:6b:12:74:54:a5:83:70:f6:2f:c5:
f9:83:f3:47:19:8d:aa:e7:51:a1:72:14:93:5b:19:
1a:09:7e:08:79:74:2b:16:7f:ec:39:b6:fe:ba:cf:
9c:c8:a4:6b:a1:5a:3e:36:06:b0:bc:27:c2:2e:03:
86:a1:49:fa:4c:5c:09:4f:b1:3d:dd:e9:cf:b0:ea:
94:0f:a8:a8:02:66:58:9b:d9:25:0c:1e:ce:36:5f:
a6:ae:e0:45:6a:b9:db:95:8b:61:fe:08:d9:93:38:
6e:32:6c:e4:4c:4e:95:ad:5c:7c:19:e9:ae:c2:25:
59:47:39:03:fb:f9:20:da:b9:60:b5:bb:21:98:95:
fc:3d:e2:c6:88:5e:ed:7e:09:6a:9c:74:96:89:f5:
06:ef:9b:ec:21:63:fe:c6:25:55:c7:53:b8:0a:8a:
d7:75:5e:ef:11:1f:09:5b:eb:84:19:4f:6d:16:dc:
b5:39:37:22:64:1b:59:39:16:41:05:53:38:f5:2b:
3e:17:8d:69:8b:c7:99:08:a9:0c:53:20:f7:b4:ec:
57:57:a5:db:ba:5d:81:42:df:bf:b8:68:a4:bb:6d:
a4:ee:94:30:03:78:3a:62:30:b5:1c:2e:58:e7:a1:
47:4a:8b:e8:3f:67:3e:0a:d8:c0:db:a8:9a:c3:4f:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:96:B7:16:9A:9D:48:53:68:C6:EC:C7:2D:83:27:C2:FB:03:58
X509v3 Authority Key Identifier:
keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.80.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c2:73:4c:e2:d5:de:5d:a2:b2:3e:42:e7:ce:46:a4:fd:2b:
6c:ed:93:97:fe:cd:30:5d:47:10:59:41:83:c3:da:12:aa:e2:
da:79:ca:64:33:d3:a6:62:04:7f:da:78:fd:23:06:10:59:9e:
aa:ae:7e:6d:bc:92:3d:ef:c0:be:36:24:6d:b9:55:f1:46:9c:
09:a5:c7:1b:91:f3:3b:69:ad:0f:62:d1:26:e9:39:ac:2b:2c:
1f:38:7b:7a:d9:fd:b4:45:9f:e7:61:d2:5c:86:e5:1d:14:41:
2d:86:df:85:f1:d2:12:21:c8:f8:51:0c:ae:e3:d6:9d:8d:80:
67:42:a8:05:d0:db:05:0f:69:bb:47:a9:f3:e6:de:cc:42:80:
08:d8:c8:44:62:a4:07:f3:87:c1:92:82:f3:bd:93:a3:f3:71:
42:94:2f:fd:3a:3c:e1:ce:7a:75:21:4e:e1:98:67:c7:fb:fa:
b3:fb:f3:09:e3:a2:a3:91:b4:e5:88:d7:ea:f1:c7:04:61:2f:
e7:23:e4:b0:16:d8:e4:6b:89:e7:7a:3e:c0:49:1a:0b:4a:76:
6a:b4:39:85:c0:b1:a7:74:db:83:fb:ab:92:f4:87:4a:47:da:
16:3e:ad:14:fc:35:48:87:68:66:5a:2e:f9:e7:d0:22:3e:ae:
d7:51:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:54 2025 by rpki-client