Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
File: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=
Subject key identifier: 83:28:52:08:29:AB:75:91:29:D7:6D:23:6D:57:45:2C:D9:4B:38:5D
Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial: 3C7407D69D82EBE510A327D1742325C73AF2E172
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
Signing time: Sun 12 Jan 2025 09:00:02 +0000
ROA not before: Sun 12 Jan 2025 08:55:02 +0000
ROA not after: Sun 11 Jan 2026 09:00:02 +0000
asID: 9341
IP address blocks: 103.179.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:74:07:d6:9d:82:eb:e5:10:a3:27:d1:74:23:25:c7:3a:f2:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
Validity
Not Before: Jan 12 08:55:02 2025 GMT
Not After : Jan 11 09:00:02 2026 GMT
Subject: CN=8328520829AB759129D76D236D57452CD94B385D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:42:21:ae:e6:bc:c1:63:1c:7f:76:b1:d3:
f1:8c:9e:7e:19:c9:47:84:38:06:4f:ff:59:3a:11:
cc:c1:9b:2b:7c:e6:f5:46:54:7a:7b:73:6a:08:a9:
70:c6:28:23:fa:a0:d8:74:67:81:35:6f:10:24:26:
49:96:49:c2:ed:fe:ea:6b:e3:d5:31:7e:a8:4d:73:
08:05:a6:14:d3:f4:92:94:a8:ac:44:26:8b:87:99:
a4:54:d6:7e:d7:3d:a4:1b:ca:ee:c2:0e:70:f2:1a:
74:7a:4f:4d:0b:62:c8:2e:59:17:6b:8a:8a:91:f7:
fe:27:81:07:89:09:02:70:48:f4:e8:fe:2a:f6:3b:
c5:07:17:3e:ee:d9:9a:5a:03:28:5e:0d:6c:d0:5f:
fd:14:79:8c:fb:fa:12:35:7d:dc:12:35:67:c5:ca:
f7:65:99:99:0a:d6:12:70:33:0a:f5:06:c0:d8:99:
33:4f:c9:68:53:71:99:b0:93:ad:ea:1b:52:32:a3:
19:30:4b:07:f4:db:ec:94:6d:b4:2f:f5:f9:f5:6d:
6f:da:1c:45:6c:10:21:db:3a:72:92:57:08:49:c2:
ab:2d:7a:da:73:e6:9f:c5:98:36:21:be:63:04:49:
07:3c:d5:89:91:f5:00:34:69:eb:a4:fd:9f:29:7b:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:52:08:29:AB:75:91:29:D7:6D:23:6D:57:45:2C:D9:4B:38:5D
X509v3 Authority Key Identifier:
keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.248.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:a0:d6:e2:5b:03:26:0c:33:de:bd:1b:1b:30:26:6b:db:74:
0e:20:6a:b3:b2:49:29:d9:ad:d2:42:da:c9:72:23:34:af:de:
db:27:fd:30:8d:b0:8a:c1:ee:33:b2:12:5c:f5:79:9f:23:40:
6b:6f:91:2f:6a:d2:23:33:4a:cf:6d:b4:96:14:df:b6:90:9c:
c5:7e:f3:46:f0:cf:73:e2:70:bc:76:cf:4f:a1:e9:fc:15:0d:
0a:53:21:6c:3d:f7:be:a9:82:82:5a:6e:80:20:77:61:ed:3f:
ce:99:ad:78:ec:69:d0:12:a8:66:c6:67:42:a0:67:e0:0c:41:
8f:97:e0:96:7e:87:03:20:4c:9a:7a:73:fd:f0:08:b2:31:5e:
0b:dd:1a:52:32:a1:18:ac:6f:4f:19:dd:aa:f7:0e:e4:78:03:
70:36:27:0d:7c:88:e9:70:30:5c:ea:ee:cb:ec:5a:17:98:68:
45:2c:a6:b8:89:44:7d:cf:5e:25:0c:39:3b:ea:af:cc:f7:28:
46:c2:df:47:0e:c2:9c:8e:2c:46:e8:1c:37:87:31:a7:6a:26:
8a:a0:d0:98:a3:3b:cd:0f:ac:dc:e3:13:c0:93:d1:64:85:04:
42:49:46:76:30:52:57:f9:06:1c:ab:9f:27:6b:8a:38:1d:b6:
88:14:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:47 2025 by rpki-client