Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa
File: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=
Subject key identifier: 1E:7D:8F:21:CD:EE:B0:F9:9D:A9:8E:FB:9F:A0:69:86:02:FF:60:82
Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial: 03585CF79E9FCDC84591F2D535DB1833B6AD309E
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa
Signing time: Fri 08 Nov 2024 22:00:01 +0000
ROA not before: Fri 08 Nov 2024 21:55:01 +0000
ROA not after: Fri 07 Nov 2025 22:00:01 +0000
asID: 58397
IP address blocks: 103.41.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:58:5c:f7:9e:9f:cd:c8:45:91:f2:d5:35:db:18:33:b6:ad:30:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Validity
Not Before: Nov 8 21:55:01 2024 GMT
Not After : Nov 7 22:00:01 2025 GMT
Subject: CN=1E7D8F21CDEEB0F99DA98EFB9FA0698602FF6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:a2:20:eb:fc:ea:9f:de:c2:92:23:67:c7:
8d:b7:c9:6e:95:66:65:65:18:e5:1a:b5:83:ef:91:
2d:51:ea:14:dd:f7:e6:7f:77:da:af:8f:d7:27:76:
28:25:18:cb:68:20:01:ce:01:4d:f2:b7:49:fe:59:
7f:e9:5c:6b:b6:60:f1:0a:70:af:c7:6b:9b:64:c1:
a7:b1:6b:36:70:8d:d9:4e:5f:46:05:2e:90:32:d9:
84:65:b9:71:47:f7:a4:24:7b:c2:42:d8:6b:71:6a:
de:70:ef:29:f7:32:40:93:05:6c:74:c1:c3:66:dc:
48:93:0a:25:0b:1d:6b:bf:1a:bf:7a:cc:8c:2a:28:
9f:6e:72:52:bb:84:eb:c9:43:d3:8d:a8:16:af:cc:
34:bd:cf:41:8c:e2:4f:79:84:93:0a:a7:67:18:a4:
3c:f1:c3:6f:95:86:b9:2d:fb:8f:18:18:6a:b9:79:
35:9f:21:13:e3:59:c7:7c:57:e6:b4:21:c7:29:8a:
5d:e6:7d:ac:78:9f:22:79:48:07:ee:de:9c:48:c9:
39:c9:df:26:d1:03:ba:50:61:08:ed:7c:5a:35:d2:
5c:94:03:90:06:2f:e7:30:b3:a3:ef:94:22:2c:b1:
23:91:13:ae:d3:28:6c:15:74:a2:a7:c9:bf:51:4f:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7D:8F:21:CD:EE:B0:F9:9D:A9:8E:FB:9F:A0:69:86:02:FF:60:82
X509v3 Authority Key Identifier:
keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.205.0/24
Signature Algorithm: sha256WithRSAEncryption
81:af:45:ba:96:27:fa:23:cd:c3:ae:7e:70:9d:17:cb:a5:55:
b6:42:78:eb:5d:bf:b9:78:47:1b:e5:63:49:01:91:ee:01:7c:
56:b7:fc:3f:05:1d:4b:e4:03:a2:30:c6:d4:50:62:fc:35:6b:
d0:0e:2a:8f:f6:51:9b:7f:ad:3e:98:7e:07:37:08:8f:9b:ef:
18:f4:b3:5f:52:34:39:ab:d0:e2:49:16:d7:3d:bf:cf:4b:b6:
84:b2:83:fd:9d:67:35:4c:70:77:26:cf:a2:6e:9f:1e:72:eb:
e9:df:e1:f5:fc:19:5c:ae:95:47:e9:9c:c0:2a:75:1d:93:ff:
4e:d1:1b:d3:23:b7:95:26:bf:fa:61:52:17:bf:07:52:b9:05:
6e:cd:6b:23:58:63:c3:fd:2a:97:65:c6:18:01:5b:5e:95:53:
62:91:e0:2e:ff:a4:59:c7:2a:79:58:af:cb:3b:f0:17:cf:cb:
14:cd:19:c6:22:7e:e1:88:3c:34:16:44:ad:e7:17:30:00:35:
8d:eb:91:65:fd:43:99:f1:d3:79:dc:08:7a:7e:4d:fb:79:ea:
1a:51:b1:9d:1a:19:58:cf:d9:1f:8f:c8:0d:9f:85:eb:3a:f9:
e8:67:43:9a:68:cf:1d:31:7a:0d:07:05:81:55:1c:7c:a9:57:
d3:ba:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:02:04 2025 by rpki-client