Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa
File: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=
Subject key identifier: 9C:0F:8C:EA:06:63:60:B1:C0:56:E7:40:A7:FF:68:F8:7D:71:72:15
Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial: 084D8A93B6E33825614303782E798E8AA16C14C2
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa
Signing time: Mon 20 Jan 2025 09:00:01 +0000
ROA not before: Mon 20 Jan 2025 08:55:01 +0000
ROA not after: Mon 19 Jan 2026 09:00:01 +0000
asID: 9341
IP address blocks: 103.180.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4d:8a:93:b6:e3:38:25:61:43:03:78:2e:79:8e:8a:a1:6c:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Validity
Not Before: Jan 20 08:55:01 2025 GMT
Not After : Jan 19 09:00:01 2026 GMT
Subject: CN=9C0F8CEA066360B1C056E740A7FF68F87D717215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:2f:bf:8e:c7:e6:03:6f:e1:cd:0f:91:ae:
2e:cd:8f:48:6c:fb:21:64:f5:dd:ae:52:2c:3d:cd:
50:5d:21:87:0e:8f:dc:a0:1a:98:ea:bb:cf:b3:64:
08:9f:63:9f:b9:e4:7d:ee:56:e9:cf:61:b9:c4:19:
94:3f:b1:15:a9:14:19:62:a6:35:86:f4:6a:4c:75:
fc:90:25:02:b2:87:52:a3:58:e6:e9:78:6c:be:ce:
1c:b2:7e:b0:b7:55:bb:b2:39:6c:0a:67:68:6d:5a:
b0:5e:4d:1d:76:76:02:f3:60:e8:50:db:6a:0e:3d:
4a:6b:7b:b6:6a:2f:b7:42:c7:78:43:9f:3e:55:4d:
0b:28:a7:83:a0:d0:41:77:10:50:e7:50:98:b2:73:
41:65:f2:63:6d:9a:f5:49:2c:e6:8e:87:46:e7:5b:
e6:a1:62:6b:e0:c5:44:ab:f9:be:32:c4:5b:55:18:
21:25:11:07:bd:2f:4e:68:f9:7e:56:de:d1:4d:d3:
db:4c:69:4d:e2:67:5f:a2:b6:f7:82:cb:28:c2:3d:
b9:ad:85:08:db:54:2a:50:22:ba:e9:f4:c4:65:26:
94:a4:e9:71:f3:01:1d:06:b1:ca:2f:4b:c5:40:6c:
05:70:b3:14:36:be:49:57:e8:02:80:30:9a:e2:58:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:8C:EA:06:63:60:B1:C0:56:E7:40:A7:FF:68:F8:7D:71:72:15
X509v3 Authority Key Identifier:
keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.195.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ff:93:46:3a:7a:ba:d4:6d:b4:cd:05:d2:7b:6d:3c:e4:e7:
b8:70:0f:21:dd:fc:ab:8a:6c:8e:1b:1d:58:e9:80:91:7c:e1:
2f:44:d8:75:c0:87:bc:e9:5b:5b:76:06:d9:65:ea:4e:18:94:
41:41:ef:c9:e6:f0:c1:7f:13:7c:75:d0:21:04:98:e1:b6:fc:
bb:a1:fa:d8:3a:3f:9e:0a:c1:0a:4c:d8:f1:02:8f:cf:cb:36:
8f:6c:81:8c:0a:ba:a8:68:10:8c:cc:0f:b5:8f:3d:02:6d:2e:
b1:4f:91:c6:9a:04:9c:b3:74:e8:67:97:e0:22:48:62:fd:0a:
0d:84:ff:ba:46:35:36:8b:cb:0f:70:9f:c7:8d:34:1f:d4:f8:
90:eb:79:93:f6:a3:f7:c3:01:5f:ec:e2:14:6f:02:4b:cc:a4:
53:de:d8:25:7a:7c:9b:f4:ae:23:72:5b:d4:c9:a7:56:5b:5a:
26:cd:60:b9:8b:17:3c:b9:cd:7d:a7:14:6a:b7:4d:59:0b:7c:
94:f5:71:73:a8:fd:36:f6:3a:c0:a4:91:cb:4b:91:c7:ba:64:
57:8c:7c:d3:dc:05:9b:84:93:de:07:e5:5d:17:a2:43:ca:ea:
68:07:3d:90:ed:8c:68:6e:75:33:68:5a:0d:47:82:5b:d5:26:
d0:04:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:41 2025 by rpki-client