Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
File: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier: aV3ZPEDkk9pkPeRsaffKFxqQrrWxvO7+4mI9TdYcewg=
Subject key identifier: 01:5B:22:FB:D1:BF:A5:6D:03:C5:55:AE:DC:59:DD:40:CA:47:B1:D6
Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Certificate serial: 68804F14055547DC59D0602F54D43DEE1D04FF22
Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
Signing time: Fri 19 Apr 2024 19:00:01 +0000
ROA not before: Fri 19 Apr 2024 18:55:01 +0000
ROA not after: Fri 18 Apr 2025 19:00:01 +0000
asID: 6939
IP address blocks: 103.162.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:80:4f:14:05:55:47:dc:59:d0:60:2f:54:d4:3d:ee:1d:04:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Validity
Not Before: Apr 19 18:55:01 2024 GMT
Not After : Apr 18 19:00:01 2025 GMT
Subject: CN=015B22FBD1BFA56D03C555AEDC59DD40CA47B1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:bd:b4:ba:42:fb:bc:f7:dc:32:e9:9a:19:
a0:55:41:e4:b2:a8:59:0b:fe:a9:05:73:92:ef:5d:
1a:b9:69:11:02:e0:f2:35:06:23:22:1f:84:43:15:
e5:ca:7b:55:b4:22:ca:84:f5:10:d8:c4:57:ef:08:
2a:2c:28:a7:c3:db:8e:26:cb:68:8a:e5:50:62:72:
d9:f4:1b:76:e7:3c:98:d1:ca:5b:26:5b:c3:52:df:
2d:dc:bb:ff:d8:c3:2d:fe:22:01:44:dc:b5:b9:c4:
2c:22:0e:62:41:9e:0e:21:b0:c8:b0:24:46:13:18:
3c:c7:32:ed:39:63:90:f5:e8:3d:1b:cf:3a:82:96:
59:5d:fb:2d:86:6a:d7:78:fc:55:a6:1c:62:11:14:
d8:42:f6:d8:f7:57:67:ec:94:33:12:5b:75:f4:cc:
87:eb:40:94:73:21:ba:1d:d8:ad:5d:71:4e:0a:38:
89:e2:54:c3:3a:31:33:15:b6:9d:a1:68:32:53:ff:
90:a1:0b:83:e8:02:2c:2d:19:18:38:63:07:2f:e1:
73:b9:59:8f:11:75:19:ea:de:68:97:fe:ca:7d:08:
8a:15:e6:c5:f6:92:76:48:9b:76:af:a2:8a:3c:40:
b0:31:e4:e9:d5:38:6f:c5:60:6f:42:50:c0:48:21:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:22:FB:D1:BF:A5:6D:03:C5:55:AE:DC:59:DD:40:CA:47:B1:D6
X509v3 Authority Key Identifier:
keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:39:1f:f4:11:9d:04:dc:8b:50:9c:d5:57:a2:57:d6:2c:8b:
29:68:97:6b:fa:27:f2:1f:37:a8:8b:81:14:86:f2:6f:b0:77:
f3:95:df:8f:3d:f5:59:66:69:97:d2:8e:68:6b:f6:4a:93:25:
85:7a:e9:a7:00:64:39:78:1b:91:08:fa:18:4f:50:85:d6:79:
ab:60:d4:07:e5:43:00:90:b4:42:c8:f4:f8:f0:ff:2a:0f:05:
08:4c:98:5b:d7:24:18:9a:88:26:c2:cb:24:d5:be:bc:a9:fc:
79:09:46:bd:b8:8c:d1:93:c5:97:a7:35:dc:57:0d:fe:99:81:
9c:51:28:d0:04:25:35:42:9c:10:29:a0:ef:29:dc:d2:3d:7e:
fd:5e:d9:f3:cf:57:69:ce:ca:07:d0:2d:bd:98:d7:ac:54:ca:
ca:ce:9e:40:56:eb:fb:2f:b5:45:f4:56:32:18:4b:ed:bb:b0:
36:a6:21:70:7d:f1:a0:23:15:2a:36:d9:14:9f:6c:a1:c2:d8:
1c:a7:12:d0:62:a9:c2:46:89:4e:eb:43:79:19:30:62:90:af:
4d:14:4c:ea:cf:76:5f:2d:38:96:d2:a9:c5:a3:95:12:ee:8c:
1f:42:71:1a:4c:df:5b:84:5f:b6:55:9d:0a:e4:7f:88:63:42:
80:ab:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:25 2025 by rpki-client