Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
File: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (raw, json)
Hash identifier: QHpKXZVuXG2f340QMscd0f+AGvxE5DXBqxwCG9DIRdI=
Subject key identifier: D4:97:F8:BA:1F:69:01:93:13:B6:6A:CD:94:31:54:27:EB:D9:D2:4A
Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46
Certificate serial: 0D4A5F1B5C548FA4A10A7466C0079012A91A2E3F
Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
Signing time: Thu 15 Aug 2024 18:00:02 +0000
ROA not before: Thu 15 Aug 2024 17:55:02 +0000
ROA not after: Thu 14 Aug 2025 18:00:02 +0000
asID: 150193
IP address blocks: 103.211.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:5f:1b:5c:54:8f:a4:a1:0a:74:66:c0:07:90:12:a9:1a:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46
Validity
Not Before: Aug 15 17:55:02 2024 GMT
Not After : Aug 14 18:00:02 2025 GMT
Subject: CN=D497F8BA1F69019313B66ACD94315427EBD9D24A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:e8:ab:60:aa:c2:f2:ee:6d:2e:6b:27:7c:
77:13:51:da:cc:ba:c1:83:16:a3:50:7d:e4:d6:f7:
0f:03:83:b0:de:e6:55:1d:0d:f0:d9:21:bb:86:b0:
00:c4:df:b6:a0:93:f6:d0:1d:41:9d:29:5c:f3:1d:
3f:d6:21:2b:cd:ee:80:9e:60:b5:2c:00:53:6f:a7:
55:8d:23:9f:d6:ad:c9:c3:5e:ec:1f:d6:1b:81:76:
1c:be:54:38:c3:8c:7c:45:5a:13:72:22:cb:7e:7e:
7a:23:3a:8a:a5:61:c3:1a:9c:f1:e3:79:f9:11:21:
bc:03:d7:f3:05:7a:fd:0c:4c:b0:0e:37:e6:3e:a2:
d2:13:ea:74:2d:ef:d4:0d:10:03:a0:ec:52:1b:c3:
8f:5d:69:fb:45:7d:9c:f1:b2:71:d8:b5:9e:33:d1:
5b:d9:66:bd:7f:3c:89:5f:ae:44:9b:ab:4c:c3:31:
b5:51:a8:96:a1:c9:d2:f7:47:ae:0f:31:a6:b6:a6:
88:bb:12:aa:9c:0a:ad:9e:f2:42:b0:31:74:e7:94:
e5:c4:5a:5d:40:0e:83:ff:aa:95:a5:76:5b:1b:23:
3a:d5:63:17:bd:2a:f4:5a:24:c9:9b:cd:e8:9b:14:
b0:fb:50:67:e7:69:83:07:9b:69:d1:44:f9:9f:8c:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:F8:BA:1F:69:01:93:13:B6:6A:CD:94:31:54:27:EB:D9:D2:4A
X509v3 Authority Key Identifier:
keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.27.0/24
Signature Algorithm: sha256WithRSAEncryption
13:67:52:84:e0:d6:b4:92:ba:a4:59:06:a4:29:eb:20:3e:45:
db:8a:9c:c7:8e:d3:9a:e8:2b:46:59:6e:a6:43:9d:ea:aa:8f:
4a:23:50:41:05:57:e2:e4:51:aa:46:f0:74:81:2b:1f:3f:a0:
df:13:8d:6e:96:2f:ee:8f:8f:2f:96:d9:a8:a6:07:ae:3d:e0:
26:b8:a3:65:ef:11:b5:0f:9e:a2:54:17:cc:23:de:c2:e6:27:
7c:6b:47:54:27:5a:14:d5:a2:7b:0b:40:7b:e6:c9:16:6f:a1:
ba:32:3e:65:7d:45:4b:3d:a0:36:8b:3b:40:77:b9:2a:59:07:
f8:11:c1:29:06:37:2d:33:af:69:d3:60:c4:53:6e:96:ea:88:
06:e0:a9:1d:9e:66:e4:9b:f6:fe:20:dc:56:f6:88:6c:5a:88:
84:c8:25:3b:37:6c:f1:69:83:89:f0:cf:88:0a:7f:e8:a4:07:
d9:17:4a:95:3d:19:15:68:7c:8c:80:5f:d8:0a:5a:a8:30:1e:
fc:7c:ed:92:6f:14:27:7c:12:41:4c:7f:7d:00:f8:a3:fa:de:
9f:e6:a8:32:5f:94:6a:b5:22:9a:b6:e8:ec:52:22:f7:e0:12:
7f:60:71:08:ae:f1:3c:f4:20:05:b0:90:b4:c6:db:d2:12:55:
a3:59:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:11:50 2025 by rpki-client