Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
File: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier: pZSg4ZcwnxgrWfNtRCnRAOFoso9An1R++e3w158JR+U=
Subject key identifier: 64:C7:43:F6:FE:50:0B:4A:94:5B:36:E0:48:F2:24:C0:1F:D9:5D:93
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 30906F0A3EB7C0D5366D951FE230F9892DC1E51A
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
Signing time: Mon 01 Jul 2024 01:05:47 +0000
ROA not before: Mon 01 Jul 2024 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:05:47 +0000
asID: 58396
IP address blocks: 103.11.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:90:6f:0a:3e:b7:c0:d5:36:6d:95:1f:e2:30:f9:89:2d:c1:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jul 1 01:00:47 2024 GMT
Not After : Jun 30 01:05:47 2025 GMT
Subject: CN=64C743F6FE500B4A945B36E048F224C01FD95D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:57:0d:f8:63:de:69:95:3a:58:cb:9a:61:
4a:fa:88:7e:f6:10:7b:ce:d9:18:cd:77:34:f7:cd:
43:dc:4a:13:e6:01:8b:97:fb:c4:15:ab:9e:29:e6:
c4:6b:a7:19:ad:44:1e:29:dd:ff:d4:b3:7e:15:ea:
17:e3:74:c6:5f:5b:2f:41:cd:f9:bf:1e:68:b5:84:
e8:a7:dc:c5:c6:28:df:4e:d6:96:4d:92:1e:02:45:
2d:b9:b9:5b:7d:ca:e3:3b:bd:44:a4:85:ed:fa:a5:
5f:e7:69:bd:35:28:87:0d:dd:2e:e9:12:2d:04:58:
5b:50:db:3b:82:5e:44:58:1b:b9:15:84:c5:e2:8c:
3b:3d:85:37:74:1b:d1:4b:93:3f:8d:7a:f8:ae:cf:
b9:48:10:38:06:c5:8d:a1:d7:ae:2c:58:7e:8a:78:
49:97:ea:e9:84:f9:f4:9d:b6:6e:8f:8a:9a:2c:3d:
30:e9:77:82:64:92:2e:32:d4:8d:f9:ce:4f:e5:2c:
a7:59:d7:bc:1b:fe:a1:ab:53:59:44:9c:2d:a4:89:
bd:3c:d5:13:2d:e6:99:44:a9:de:17:f9:8b:5d:44:
f4:ac:1e:e1:66:2d:2d:34:b8:b7:c0:1f:c4:f5:cd:
4d:2e:31:03:dc:34:65:97:84:78:7c:cf:83:d8:64:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:43:F6:FE:50:0B:4A:94:5B:36:E0:48:F2:24:C0:1F:D9:5D:93
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1e:6a:b9:1e:c6:99:ad:9c:f9:77:a4:8f:78:6b:1d:88:c9:
53:ea:10:ed:6e:ab:84:81:90:5c:92:6a:b2:e2:4f:43:1d:83:
11:1a:8d:bb:86:7b:61:5e:53:ac:10:8b:02:dd:f1:32:4b:06:
31:69:16:75:fe:b0:35:ac:95:ca:96:58:0d:b0:d3:49:a5:e7:
ec:73:3c:1c:4b:6f:22:cf:b7:fc:b7:1b:87:e2:14:33:7d:30:
5a:73:15:77:85:74:64:a9:65:a4:71:3c:04:d0:fc:49:1d:f7:
cd:49:d7:d2:7e:83:c0:de:f4:74:08:8b:b3:03:32:64:db:da:
42:69:66:f7:26:57:4f:89:d1:6b:d8:c1:14:7c:0b:69:0c:75:
af:93:9f:b9:92:f4:e3:1c:51:94:db:c4:46:af:d1:0e:e1:20:
be:af:89:2f:e4:fd:af:33:5f:42:61:63:91:7b:4f:3a:e3:b5:
4b:08:0d:47:bb:32:96:96:69:ef:3a:0d:9d:b8:af:d6:5b:1d:
fe:5b:a4:c7:61:f2:75:07:b3:99:7c:69:0f:7b:54:99:55:52:
08:f4:b5:17:67:7b:f4:72:54:8c:70:60:6f:24:d3:88:ea:ca:
59:4a:0b:ba:8d:10:d1:27:7c:ed:79:87:89:d4:6f:b2:8d:00:
e7:28:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:24 2025 by rpki-client