Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
File: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier: 06QZdyklcUmWupIhsOVNL9NiOUjK+/J3FEFr90f9R1c=
Subject key identifier: 60:DC:96:D2:C5:C9:1E:D6:C1:BC:F4:7E:F0:82:C9:4A:64:8B:A9:8C
Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial: 73FB58D31C982A594AEC09AC67228DD6040DD4F4
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
Signing time: Fri 26 Jul 2024 10:00:02 +0000
ROA not before: Fri 26 Jul 2024 09:55:02 +0000
ROA not after: Fri 25 Jul 2025 10:00:02 +0000
asID: 149943
IP address blocks: 103.191.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fb:58:d3:1c:98:2a:59:4a:ec:09:ac:67:22:8d:d6:04:0d:d4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Validity
Not Before: Jul 26 09:55:02 2024 GMT
Not After : Jul 25 10:00:02 2025 GMT
Subject: CN=60DC96D2C5C91ED6C1BCF47EF082C94A648BA98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:85:eb:e1:e8:1d:31:f1:9e:ff:43:25:cc:
bb:3c:61:6f:82:44:45:1c:3a:00:05:40:f8:a1:b4:
46:c3:d2:b9:4f:fc:6c:d8:e9:ee:d3:6d:a1:a4:37:
ec:98:36:86:06:11:d1:08:35:25:74:15:fd:aa:d6:
c7:1d:c6:93:24:28:3d:aa:2f:8d:32:61:f8:b9:bf:
7c:3e:cd:a8:4e:dc:ce:e4:24:db:fe:f5:74:ee:16:
09:06:ca:88:6b:ed:67:b9:e2:ad:5b:c3:12:49:36:
e0:68:c7:ae:60:7c:df:01:9c:4a:3e:82:c9:eb:86:
02:dd:e0:d1:49:be:94:0f:b1:51:17:64:22:d6:0e:
62:75:9f:61:09:d7:87:16:0d:74:6c:9c:2b:3d:de:
20:22:01:80:5d:68:55:13:ed:13:5f:95:68:96:18:
1b:b5:14:f4:8d:7e:21:7d:cc:07:4f:2d:76:bb:e0:
83:da:80:e5:26:ee:49:6a:ca:ce:fc:b9:87:b4:ea:
19:d7:44:ee:6b:25:47:b4:c3:7f:fb:5f:11:51:c0:
88:4e:d3:1f:1f:b9:bd:23:3f:3b:67:04:11:eb:5f:
47:af:90:79:fb:a2:8a:34:b8:94:a2:f6:f8:2f:c8:
a5:f8:d1:5f:04:cc:dc:f7:ec:36:f6:62:47:c4:aa:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:96:D2:C5:C9:1E:D6:C1:BC:F4:7E:F0:82:C9:4A:64:8B:A9:8C
X509v3 Authority Key Identifier:
keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3b:1d:f7:4f:c5:89:d0:e3:ad:0a:f8:3e:a7:ab:7c:da:6e:
b6:e1:08:cd:1c:44:05:d8:cd:f2:85:99:54:6c:a5:0e:c7:6c:
32:fb:e2:6b:25:95:48:db:d4:e2:9c:11:d8:59:59:6b:ac:49:
0c:3e:4b:e4:71:e3:62:06:91:92:73:02:6f:aa:0d:dc:be:e4:
9a:23:69:d8:50:26:08:5c:3a:a7:59:95:e3:7c:33:06:0a:44:
6c:e1:eb:d3:58:35:20:7e:5d:8b:87:6f:94:84:7b:6c:00:20:
c7:9d:99:cc:9e:a1:02:55:4b:28:09:bf:56:88:5a:4d:15:76:
5b:fd:7a:e9:15:6a:33:e2:d7:62:14:c1:6d:5b:80:27:0e:ec:
ae:f2:0b:5f:cd:dd:d0:9c:8a:3a:63:1d:f6:0b:1f:97:96:ee:
54:8f:12:56:1c:44:cc:03:d0:cd:81:0c:05:87:ef:00:00:31:
fa:3c:41:6b:5e:67:15:45:6f:0b:7b:6e:89:b1:18:ab:50:4d:
f5:c8:3f:08:95:10:32:bd:4c:11:15:31:c9:99:e7:0a:8c:04:
e2:28:04:94:e6:77:a7:4f:88:c0:58:9e:6e:d7:7c:eb:11:c6:
2b:ee:47:00:87:23:29:f9:97:4f:7e:0d:65:c2:b9:ee:43:89:
ab:10:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:31 2025 by rpki-client