Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
File: 3130332e332e37382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: J04TXPBrNPgYBFS2lTDyhqJSw7uFHuA9mUDVMrzOkoQ=
Subject key identifier: B0:C8:6B:45:3A:BE:D1:D4:39:24:AC:04:17:57:77:CF:1F:9D:7E:B1
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 48E27254F50EECBCE3F3E55BBD28D6BE97C13EFA
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 05:00:01 +0000
ROA not before: Sun 23 Mar 2025 04:55:01 +0000
ROA not after: Sun 22 Mar 2026 05:00:01 +0000
asID: 9341
IP address blocks: 103.3.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e2:72:54:f5:0e:ec:bc:e3:f3:e5:5b:bd:28:d6:be:97:c1:3e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 04:55:01 2025 GMT
Not After : Mar 22 05:00:01 2026 GMT
Subject: CN=B0C86B453ABED1D43924AC04175777CF1F9D7EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:da:8d:ed:22:9a:0c:e9:61:ca:28:41:ed:
79:7c:50:88:71:d7:c3:83:79:12:f0:66:f3:79:a2:
23:fa:9f:3e:7c:9a:c7:fa:b9:bc:08:ca:21:0d:5f:
46:69:34:42:ec:ab:81:2a:b9:28:4e:ef:c3:66:47:
5d:1b:43:c3:78:2a:08:fc:6c:7c:f7:2e:fb:17:45:
06:70:f3:c2:fc:07:15:0d:35:8a:11:d6:27:b8:0e:
fe:66:5f:c1:6f:cb:36:b4:5f:5d:a7:42:2f:c0:ab:
56:b9:b2:bd:7a:81:3b:64:61:80:2e:a6:8c:08:d6:
de:90:08:1e:0e:62:ef:cd:ef:ec:e7:92:2a:39:24:
53:07:24:e7:30:b0:a0:05:12:18:82:34:60:ed:0d:
b1:68:c0:e5:83:da:c8:47:e9:07:73:5a:ef:aa:14:
fb:87:ba:56:0c:85:b5:3f:b0:24:3c:67:43:1e:5e:
05:9b:e6:cd:e2:32:02:37:d5:f2:4a:3d:28:a9:ad:
f3:41:28:92:e0:9f:c8:af:8b:18:60:be:ab:2f:cd:
46:34:17:bf:e5:e6:51:28:24:7e:63:1f:49:1e:62:
6b:55:df:30:bd:d0:98:61:63:ed:5e:26:fe:2f:91:
09:67:c8:a0:ca:22:f4:d2:bb:d8:af:c7:ed:28:29:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:6B:45:3A:BE:D1:D4:39:24:AC:04:17:57:77:CF:1F:9D:7E:B1
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.78.0/24
Signature Algorithm: sha256WithRSAEncryption
86:07:21:cb:24:ea:2b:b2:7c:5d:ac:a5:79:3b:fc:7e:62:68:
41:6d:ff:b4:fc:d6:0f:27:98:8b:f0:f2:93:5a:f1:3d:e1:69:
20:3b:9e:e5:1b:c4:d2:5f:92:19:3f:81:d4:54:38:33:69:a5:
7f:18:38:f1:34:20:af:35:7f:b3:d9:17:07:93:51:9a:3e:7f:
90:7e:90:02:57:36:2f:c9:00:d9:21:ac:c5:80:78:2b:a1:34:
ae:af:4d:e8:de:45:41:50:e3:9b:55:61:84:7c:52:87:f8:7e:
8a:9b:52:05:f2:a1:07:00:33:73:d8:a6:3e:38:71:c9:cc:ff:
01:a6:a7:58:8a:8c:35:dc:d7:fe:35:1e:81:fc:90:92:63:0e:
cd:03:12:b9:fc:67:62:e8:07:7f:eb:e2:5d:db:fb:51:3b:a6:
ea:82:a1:98:60:61:56:2b:c9:50:7a:7e:3e:8d:c5:11:78:70:
4e:bd:6c:28:de:e6:1a:ce:44:bc:e4:ea:62:e7:42:a4:5f:9c:
a1:f6:4c:18:ef:0a:02:75:a3:ff:ae:12:4f:10:2d:12:bf:33:
26:b5:99:2a:ed:69:4d:2b:86:61:6f:cf:e0:88:b9:61:b4:31:
22:46:12:e2:bd:11:2d:07:3d:42:99:ef:9f:dd:2d:71:f6:a6:
a8:3c:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:19 2025 by rpki-client