Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
File: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (raw, json)
Hash identifier: rlplgg3r+rxIXNon2dNy9blKlPvtpCpYwV7XkrITM4U=
Subject key identifier: 6B:33:1C:0A:AD:6E:7C:09:2E:5B:B4:F6:F1:D6:6D:5C:00:A4:34:F5
Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial: 10603530A97A2BF45F6A07E0D4D08D968B173DC6
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
Signing time: Mon 01 Jul 2024 01:02:49 +0000
ROA not before: Mon 01 Jul 2024 00:57:49 +0000
ROA not after: Mon 30 Jun 2025 01:02:49 +0000
asID: 58482
IP address blocks: 103.28.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:60:35:30:a9:7a:2b:f4:5f:6a:07:e0:d4:d0:8d:96:8b:17:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Validity
Not Before: Jul 1 00:57:49 2024 GMT
Not After : Jun 30 01:02:49 2025 GMT
Subject: CN=6B331C0AAD6E7C092E5BB4F6F1D66D5C00A434F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:65:b5:e1:0a:27:f4:d2:43:56:4a:e0:4a:
9b:42:e6:ec:e4:fb:b6:18:c4:8c:5d:c4:18:11:57:
b2:f8:10:89:3e:a9:65:c4:2a:df:84:85:41:bf:c1:
f0:3c:d1:9f:2a:eb:fe:b0:d9:7a:a2:c5:01:8e:aa:
85:e6:56:ed:35:18:50:73:50:36:ba:99:72:8a:90:
80:45:a9:dc:fd:3d:65:05:7f:e6:2c:94:20:79:46:
2e:1c:2a:35:38:f8:41:d1:07:83:84:d6:cb:a0:03:
56:10:4c:da:46:47:4b:96:82:00:a0:69:85:64:3d:
ff:68:87:16:cf:10:09:04:39:10:b6:d7:59:50:18:
d5:24:de:4b:a3:83:68:48:ad:31:01:e5:fa:6d:cb:
d3:3c:b9:c3:be:13:8a:0d:89:95:16:2e:6c:fd:13:
12:04:ab:c3:8d:94:45:22:cd:e4:7e:c6:b4:ea:9c:
c6:b1:8a:82:c0:17:50:b1:9c:db:c4:1e:f5:fb:68:
13:6f:69:23:87:ba:cf:42:69:45:4d:11:ab:ed:10:
d9:c9:c6:7d:6b:c9:03:72:a3:c3:00:33:27:dc:a5:
84:7b:06:7c:22:7a:06:23:ab:cc:1f:f2:27:0e:3f:
4f:07:c7:9c:0a:37:10:05:04:57:a3:8e:d8:16:01:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:1C:0A:AD:6E:7C:09:2E:5B:B4:F6:F1:D6:6D:5C:00:A4:34:F5
X509v3 Authority Key Identifier:
keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4d:2d:07:a5:51:c4:ea:86:4b:d5:01:f8:9c:05:2e:c4:e6:
ec:b4:1b:bd:62:c4:56:6f:93:44:72:a5:dd:b4:82:ab:c5:58:
68:b2:b3:e6:5d:22:02:31:23:5f:5c:dc:18:7a:3f:b4:c0:c0:
5f:d5:d1:48:13:50:04:68:b4:78:7d:51:5a:9a:9a:b6:e0:98:
8a:13:48:39:ec:59:20:62:c2:d7:4b:2d:e1:42:5c:e3:44:fc:
ce:06:6b:82:4f:a7:49:7a:33:ee:24:2a:de:a6:7c:85:3b:fd:
a0:16:ce:d7:7a:51:52:79:39:74:29:18:0c:77:68:cb:2d:81:
2a:c7:91:13:6c:47:4a:ff:5b:69:21:2f:99:7a:bc:f8:12:bb:
c9:8e:71:08:74:e2:f3:23:c0:0b:3e:bf:a4:dd:d5:11:ca:bf:
a1:cd:58:b8:fe:6a:9d:7d:5c:45:cd:3b:a9:5c:72:56:bb:bf:
2e:33:6a:36:fe:6a:b1:8c:8c:5c:68:f6:4d:e0:4c:06:53:80:
0b:8d:9e:af:9e:7f:fe:18:1e:44:fc:c7:e4:97:92:d7:e5:af:
01:70:5e:de:44:0a:b9:3f:48:02:2b:be:f3:7f:e2:4b:f5:7b:
e3:96:2e:6b:e2:59:ac:d6:4a:bf:da:27:a0:83:30:75:8e:82:
7a:c1:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:41:17 2025 by rpki-client