Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa
File: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (raw, json)
Hash identifier: eG3L50RlSnDUuOVwkVlYnQebEQc3JXkDObYN4u0w6z8=
Subject key identifier: 63:F2:04:FC:AE:C2:D7:EB:92:26:69:98:41:C2:DA:4C:AB:F4:A9:1E
Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial: 5D8EE587D09652B9C3B8E63B3CDC5401E974C05A
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa
Signing time: Wed 25 Dec 2024 03:00:00 +0000
ROA not before: Wed 25 Dec 2024 02:55:00 +0000
ROA not after: Wed 24 Dec 2025 03:00:00 +0000
asID: 150529
IP address blocks: 103.69.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8e:e5:87:d0:96:52:b9:c3:b8:e6:3b:3c:dc:54:01:e9:74:c0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
Validity
Not Before: Dec 25 02:55:00 2024 GMT
Not After : Dec 24 03:00:00 2025 GMT
Subject: CN=63F204FCAEC2D7EB9226699841C2DA4CABF4A91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:dd:65:5a:71:16:8b:24:7d:57:bf:f6:54:
0d:0a:aa:8c:98:ee:e0:eb:93:a8:b3:aa:6f:f4:0a:
90:f5:09:5f:be:56:a8:21:e5:55:07:fe:63:59:10:
3e:12:0a:77:e5:65:1d:8c:cf:1b:d6:02:29:9a:32:
5b:6b:a5:27:5a:39:96:d9:6c:cc:9a:ac:39:33:8b:
27:38:b5:81:f5:59:c9:25:a2:09:7c:da:b8:26:6f:
b1:b4:05:94:6f:d4:56:7e:88:da:78:24:b9:b8:53:
b7:3d:11:66:d7:0a:9e:8c:df:2a:d4:89:48:86:83:
96:be:8a:3b:78:da:54:64:c6:be:2c:e8:08:b8:19:
18:46:37:d4:58:c7:0e:77:22:a5:9d:6c:09:90:f6:
35:44:92:21:9a:15:b0:a9:ac:2e:e4:1f:d6:a6:da:
1b:c7:38:f1:dc:d7:a5:6c:82:d0:f0:a8:fa:a8:1e:
55:5f:52:f7:03:b4:58:fc:8d:11:7b:96:86:89:24:
5a:da:99:90:ed:83:59:5a:b0:af:2f:7d:1c:39:d4:
af:28:35:45:6d:a4:e2:8e:47:6d:33:47:60:2d:3a:
c3:ef:16:9a:27:1d:89:36:6f:59:93:2b:b0:75:8d:
c6:e1:24:08:47:64:b9:d4:5d:9f:e1:b3:67:59:7a:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F2:04:FC:AE:C2:D7:EB:92:26:69:98:41:C2:DA:4C:AB:F4:A9:1E
X509v3 Authority Key Identifier:
keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.61.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d0:e2:fd:54:aa:aa:ff:bb:cb:f9:7a:92:1a:ca:70:51:53:
e0:20:e3:9e:38:e5:a5:80:d9:c6:84:ad:ff:18:a8:2e:36:22:
c2:48:ec:c6:81:78:5b:d3:96:25:49:78:da:82:29:19:c6:e6:
21:03:3c:e5:6b:51:20:67:c0:0c:ea:2a:d3:a3:5c:76:fd:8a:
32:91:17:53:d1:f5:8c:06:35:b4:6f:27:5d:46:cf:23:2e:96:
ba:58:c2:29:d1:a1:e2:32:9f:a7:b7:13:85:26:3c:51:e8:7a:
58:8e:d1:58:fe:fb:8a:91:79:c9:05:66:f2:03:60:78:fb:7d:
ea:53:59:5c:ad:8a:99:b0:e6:b8:02:8f:f3:5f:f3:7f:48:fd:
b6:d8:05:15:84:ee:d2:5b:4e:60:7b:6d:69:9e:27:22:c9:8b:
77:37:98:90:ce:53:fb:7e:ee:10:f0:89:54:3d:50:47:62:b3:
8f:32:84:9d:da:b7:b1:97:74:58:d8:37:a0:da:f4:7b:e3:82:
80:39:68:7c:e6:1f:c7:68:b5:05:7a:15:22:4e:85:87:14:a9:
61:b7:15:11:82:a1:e5:89:82:ed:af:5f:ce:3f:6b:6b:a1:3e:
ea:2e:92:43:8c:3a:50:f7:75:f9:04:a4:9f:e3:22:eb:de:95:
37:d9:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:00 2025 by rpki-client