Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
File: 3130332e332e37392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: qQcryLfnvUfE+rNuBWGcLBLK/bSJEOXtFdlywpr+pmE=
Subject key identifier: A9:57:5E:D7:3E:8C:FB:07:22:D9:76:3F:57:85:20:10:94:86:8A:6B
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 4AD235C9388140CBE220C2FA7AF3F877CA5732FC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:01 +0000
ROA not before: Sun 23 Mar 2025 05:55:01 +0000
ROA not after: Sun 22 Mar 2026 06:00:01 +0000
asID: 9341
IP address blocks: 103.3.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d2:35:c9:38:81:40:cb:e2:20:c2:fa:7a:f3:f8:77:ca:57:32:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:01 2025 GMT
Not After : Mar 22 06:00:01 2026 GMT
Subject: CN=A9575ED73E8CFB0722D9763F5785201094868A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:dc:d8:83:24:da:eb:f0:83:7c:43:d2:d4:
c8:1d:12:48:74:b5:f6:91:a9:89:f3:20:44:9c:f1:
da:b4:f6:5b:78:ab:41:8c:e2:16:66:32:11:9e:b3:
c1:c5:d7:0e:c8:50:f7:4d:53:de:ec:46:40:10:2e:
11:6d:2b:8e:1b:07:b4:48:ca:ea:5e:92:de:2a:79:
5a:88:40:49:43:67:9d:af:4d:94:7a:de:87:fe:1f:
8d:26:38:62:ff:5f:cd:96:d7:9f:af:d2:77:03:39:
31:0e:02:a6:3b:1f:e6:c1:5c:03:59:9f:19:b5:bd:
d2:59:5d:b3:9e:2d:41:65:40:fa:50:f4:9f:93:d2:
02:9f:79:18:a4:84:35:92:8b:00:a2:bb:bb:5b:71:
bb:98:0d:70:cc:ed:23:37:2d:17:57:85:a8:1e:55:
ab:4a:1d:63:97:62:a0:a7:ca:8a:6c:9c:a8:39:b5:
76:5c:ca:1a:33:61:02:e7:60:48:8f:7e:02:92:b8:
de:b8:36:ba:20:22:c1:27:64:74:db:c8:1d:8a:44:
b8:9e:2e:1e:bb:c3:44:17:66:36:27:08:7f:b3:04:
6b:2f:09:80:3f:95:f4:fc:75:37:05:8c:e6:f7:98:
ce:3d:0e:fe:dd:5c:a0:9f:24:c2:5c:94:3c:75:db:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:5E:D7:3E:8C:FB:07:22:D9:76:3F:57:85:20:10:94:86:8A:6B
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.79.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1c:b7:2d:04:dd:56:98:ae:aa:73:d9:dd:7e:56:c8:78:56:
e0:8e:a2:e4:37:6c:e5:07:7a:59:c7:db:4d:21:15:86:13:3a:
37:de:f1:43:11:e8:9a:74:68:82:b4:03:3c:72:45:49:69:d5:
ee:18:43:8b:f5:4f:ad:34:53:c9:a9:4d:50:bd:e7:19:c8:6b:
db:fa:8c:10:7f:1c:59:30:b4:dc:8f:9a:1b:46:a3:00:63:13:
c7:5d:bd:39:87:a5:e0:8e:18:c7:03:6f:62:75:6a:c5:bc:c1:
56:93:14:f6:84:60:eb:09:cc:56:87:71:7b:5a:54:a4:b5:6a:
80:ef:2d:7f:b2:75:1c:81:e7:17:90:87:22:47:78:2c:56:d2:
3c:76:a7:f3:0a:e2:40:d1:37:e9:bc:19:6f:64:12:3c:9d:6c:
2f:d1:64:cf:c2:cd:35:f9:e7:0f:f8:89:91:b4:47:fd:b2:ba:
92:fd:0a:66:06:8d:3e:88:60:86:0c:26:60:1f:65:21:c1:71:
9e:46:45:b4:f7:a0:7b:c5:f3:2a:1f:48:25:9e:87:2d:bb:09:
8a:8c:4f:ce:16:dd:80:32:70:dd:65:ad:9a:e0:00:3d:1a:1d:
51:66:83:96:6a:22:3a:02:b0:5c:55:12:8e:da:16:a6:71:e3:
2d:9d:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:19 2025 by rpki-client