Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
File: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (raw, json)
Hash identifier: VG/ACRZPp2r0hedLnYSdIksDAv+Mc1H+dIKcuSQ562M=
Subject key identifier: 32:69:44:D2:D7:28:A1:66:85:16:94:4D:18:80:50:82:25:0A:F0:EC
Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019
Certificate serial: 4A6190DBC07688221EAF9AE1EA882F37FB0E520D
Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
Signing time: Mon 01 Jul 2024 01:02:39 +0000
ROA not before: Mon 01 Jul 2024 00:57:39 +0000
ROA not after: Mon 30 Jun 2025 01:02:39 +0000
asID: 133817
IP address blocks: 103.53.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:61:90:db:c0:76:88:22:1e:af:9a:e1:ea:88:2f:37:fb:0e:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019
Validity
Not Before: Jul 1 00:57:39 2024 GMT
Not After : Jun 30 01:02:39 2025 GMT
Subject: CN=326944D2D728A1668516944D18805082250AF0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:ae:e6:67:41:97:c8:87:bb:92:aa:99:60:
c0:1e:66:a7:62:0a:d0:8c:3c:2f:d9:15:3d:69:ba:
5a:b3:91:e0:de:e8:a7:21:a8:4e:62:9d:ad:82:b9:
c2:15:d5:20:02:c8:ca:76:51:ef:27:c6:66:02:9b:
c5:f9:26:cb:36:fc:47:35:f8:76:47:62:22:27:be:
06:8c:ea:15:7f:fe:f4:c6:36:31:aa:e6:ab:8a:49:
cc:ae:b4:5e:1f:10:b0:53:c2:02:16:71:b9:1e:80:
dd:68:f7:58:94:ee:bf:ad:f4:05:40:ed:9f:b0:c1:
ca:22:24:0c:67:58:f8:6e:53:26:3f:44:80:07:f7:
01:69:19:2d:6a:8c:51:93:c2:84:e1:bf:37:e2:88:
60:1d:bf:fa:d5:67:be:a2:a2:70:a7:c9:17:58:92:
39:48:4a:e6:22:4d:ce:9a:33:ad:cf:d4:03:08:b1:
5c:41:46:0d:0f:83:8d:34:d4:e4:cd:2f:ca:4b:bd:
da:eb:66:57:ca:5f:fb:e2:81:f3:3a:a5:e7:0c:e1:
07:e9:21:25:e6:69:01:b1:07:ff:fc:c3:81:96:8b:
d9:69:05:33:e9:46:d0:39:18:56:0b:17:7c:88:43:
5c:71:f5:d1:aa:8f:ad:87:c0:e6:74:3c:0e:14:c5:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:44:D2:D7:28:A1:66:85:16:94:4D:18:80:50:82:25:0A:F0:EC
X509v3 Authority Key Identifier:
keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:16:1d:99:f3:29:d3:7c:2d:e2:bb:2b:0e:8e:74:4a:05:f3:
ce:be:a0:19:fe:e2:20:6e:cc:d4:3b:3e:5a:e0:44:6d:b1:7b:
ae:35:18:74:79:4f:31:a8:b0:d5:b4:af:8f:21:93:86:f5:54:
9e:57:a8:71:02:20:3b:44:14:3d:1b:ad:af:51:9a:fb:4a:60:
a2:2b:d6:65:70:0c:d8:aa:51:7a:cd:07:4e:af:ee:f0:1a:c7:
9a:fa:f4:bc:91:b6:90:ad:9a:91:2a:86:e1:d4:89:03:71:1b:
2b:43:0d:42:b3:0c:4e:0d:96:b0:3f:64:06:15:bb:25:ff:75:
50:af:2c:cf:56:b4:fe:86:c4:0b:b9:4d:8e:e1:fa:0e:13:b9:
50:a2:d8:c2:3a:b9:ed:29:30:ea:68:a8:6c:29:a6:01:a7:71:
ca:20:b0:89:d5:d2:e7:10:bf:59:99:1b:e8:7a:40:b9:04:7c:
7d:77:39:6d:9f:8c:39:4e:af:87:a4:1b:27:96:6b:4a:f9:54:
e9:c0:49:50:1c:42:84:67:a2:28:4a:62:f3:ed:2a:84:8e:a8:
ab:b6:87:1f:38:2c:8b:3d:21:d9:a5:78:67:70:10:ee:98:7b:
62:95:22:f1:59:0c:5e:cb:f8:f4:f2:78:1a:d0:6e:5f:7b:37:
c5:ab:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:25 2025 by rpki-client