Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
File: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (raw, json)
Hash identifier: RPH1Q5KSgvzuf4nqRbO9CPwqZ8A+VML/hmITbBy7T5g=
Subject key identifier: 24:0C:81:2B:D4:60:DB:03:BD:32:60:3C:92:FD:AC:5B:2F:D8:84:DA
Certificate issuer: /CN=4C493E592E006837A093CD288BB55329BE38D2D2
Certificate serial: 53F02E9BA2F53AADA90EB5C70765B4B304F6B250
Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
Signing time: Mon 01 Jul 2024 01:05:00 +0000
ROA not before: Mon 01 Jul 2024 01:00:00 +0000
ROA not after: Mon 30 Jun 2025 01:05:00 +0000
asID: 131778
IP address blocks: 103.30.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f0:2e:9b:a2:f5:3a:ad:a9:0e:b5:c7:07:65:b4:b3:04:f6:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2
Validity
Not Before: Jul 1 01:00:00 2024 GMT
Not After : Jun 30 01:05:00 2025 GMT
Subject: CN=240C812BD460DB03BD32603C92FDAC5B2FD884DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:ca:71:2b:4a:41:4e:42:e8:23:fd:96:a8:
29:71:ee:f9:e6:48:0a:00:43:53:7b:de:b1:d7:7e:
91:46:34:7d:99:01:38:28:e4:d8:d2:a9:4b:89:ba:
8d:80:32:1a:e0:bb:5c:77:42:6b:46:49:85:72:17:
72:dd:da:92:2f:04:30:04:ae:c5:66:d4:a8:30:64:
6c:58:2c:c0:44:67:06:25:c0:f8:1b:ae:74:f6:14:
89:cc:2e:74:36:e4:a4:fe:ea:23:15:c9:3e:0c:bd:
5c:60:f7:66:08:a3:1f:97:4f:21:36:94:0c:c8:26:
37:9d:db:68:68:91:e4:c3:60:c6:ed:cf:4d:9b:7e:
ee:62:80:30:c9:0b:27:7f:48:80:2f:00:bc:ce:bc:
1b:9f:f9:e9:46:1e:be:fd:b7:d6:99:57:fc:5c:d7:
1e:96:97:44:83:ab:e5:f4:b7:b9:b7:ed:7f:13:ed:
1d:04:c6:be:f6:42:ba:30:3b:59:81:7a:1f:39:2b:
fc:9f:ff:f3:e0:c4:3f:69:58:79:b3:cf:4a:86:52:
12:eb:e9:2a:20:76:2e:b1:6a:77:58:70:98:e4:34:
87:e9:9f:c9:ec:0a:83:c7:e8:80:6b:84:1a:39:4b:
aa:6d:ab:5f:f4:b0:ff:14:71:d0:a3:c4:27:bc:d5:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:81:2B:D4:60:DB:03:BD:32:60:3C:92:FD:AC:5B:2F:D8:84:DA
X509v3 Authority Key Identifier:
keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.0.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b1:93:42:c3:11:e8:e7:cc:49:e0:c8:d2:a6:3d:e7:25:dc:
80:3c:ac:db:cc:4a:20:97:de:40:ab:c3:76:ac:fa:54:2d:23:
1d:97:d4:4d:28:02:95:c0:42:d4:22:76:1d:22:29:ed:5b:ca:
ed:50:8f:06:3f:0d:cc:67:8c:68:ae:65:0b:58:9f:4b:16:bf:
31:3a:68:24:d9:06:42:c1:7f:46:e5:2c:f0:82:db:9e:32:1d:
4e:79:5e:84:82:f5:d1:4a:9f:67:af:22:30:b3:72:85:62:a9:
58:84:5b:72:53:03:f0:e4:9e:09:6d:fd:5e:e7:12:d0:ac:ae:
d8:82:b5:25:db:77:a0:63:db:fe:44:24:ca:20:41:52:7d:6c:
7a:ec:27:e6:d9:99:62:ff:0a:10:9a:f5:42:7f:ea:b7:3b:1b:
3f:89:3a:c9:46:a4:7d:fc:42:db:ed:c1:a7:85:0e:e2:25:c0:
f3:18:c1:41:68:48:b4:d5:c3:fb:79:24:dd:b1:bc:d4:fd:dd:
09:e6:e8:51:95:81:50:6c:ee:5f:20:05:46:5e:30:83:89:77:
31:c7:0f:28:01:81:87:0b:6a:69:77:d1:0a:1f:5c:00:82:7e:
de:4b:85:4a:87:f6:cd:72:bb:f3:17:59:c6:a6:ea:dd:c4:b6:
05:93:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:59 2025 by rpki-client