Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa
File: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier: ehP408+CXUe13X4F5TvwPj6ddCoH7T+4InUUhWjVyGw=
Subject key identifier: CB:83:CC:B8:26:A5:E6:BF:73:D2:EA:BD:BD:D4:C5:CC:33:3A:EC:39
Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB
Certificate serial: 5C5065F18F7016B662F285E4DB2EE85D3C87AFC4
Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa
Signing time: Tue 04 Mar 2025 06:00:59 +0000
ROA not before: Tue 04 Mar 2025 05:55:59 +0000
ROA not after: Tue 03 Mar 2026 06:00:59 +0000
asID: 136841
IP address blocks: 103.100.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:50:65:f1:8f:70:16:b6:62:f2:85:e4:db:2e:e8:5d:3c:87:af:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB
Validity
Not Before: Mar 4 05:55:59 2025 GMT
Not After : Mar 3 06:00:59 2026 GMT
Subject: CN=CB83CCB826A5E6BF73D2EABDBDD4C5CC333AEC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:ea:05:40:a1:58:fd:d7:2b:90:b4:31:0b:
78:c2:94:6e:7b:05:53:68:de:a0:87:af:3e:47:73:
83:57:c7:db:9b:7b:f9:e6:e5:6a:6b:f0:6c:6c:9d:
22:05:8c:80:88:91:80:d5:64:87:e0:c8:15:be:2e:
e0:50:a2:d2:bc:3e:44:f7:ae:d9:1f:e5:50:6d:4b:
7e:ee:0c:04:6a:3f:d2:21:e6:c2:37:b4:cf:1c:1b:
4e:5e:48:52:c8:57:d2:4c:66:c4:0f:ef:c7:a4:3e:
b0:4c:23:1c:fc:73:29:60:9b:ff:fd:5d:e3:48:dc:
48:6d:e6:80:be:4b:b1:88:bd:69:3a:f0:4a:ad:bd:
fc:c6:cd:89:37:a3:a9:39:fd:6c:8e:27:d1:5b:9b:
4a:03:ef:10:bb:59:0b:14:e0:63:95:80:68:75:5d:
0b:31:a4:29:fb:16:b1:e5:60:83:2c:6d:2f:78:12:
c3:70:88:41:f5:03:9d:0d:e8:41:1f:84:2f:89:3a:
06:1d:83:d6:e6:52:6d:2d:75:21:29:8b:4e:b5:9c:
c9:74:5d:67:66:39:6b:70:ee:1c:45:16:68:1c:21:
e7:09:86:b8:4b:02:49:e2:de:54:3f:82:43:e4:44:
fa:eb:8b:cd:fa:e9:8b:27:fd:1a:26:a5:cf:33:64:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:CC:B8:26:A5:E6:BF:73:D2:EA:BD:BD:D4:C5:CC:33:3A:EC:39
X509v3 Authority Key Identifier:
keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.172.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:73:81:16:5b:8b:20:fd:fd:cd:68:45:c3:cc:28:59:41:
00:2c:61:66:2f:32:a8:0a:ba:d7:4b:22:22:46:d4:1c:19:11:
80:29:28:12:14:f1:bb:40:91:2e:b6:10:81:5e:b2:f4:87:eb:
ba:59:f0:cd:cd:c2:d9:d8:ff:7b:a3:fe:83:f9:56:10:23:8d:
02:38:d0:8f:68:bb:e7:bf:fa:38:d1:aa:a8:4a:9f:44:e5:1b:
3d:64:40:3d:80:a6:b7:91:07:2d:2b:cd:3d:f4:3d:e4:3f:fa:
83:8a:b4:cf:ba:e9:ea:23:dc:50:9e:ce:94:e9:a0:bd:ac:70:
2d:f5:79:c7:f0:8a:cb:ec:00:a4:d2:99:09:80:00:44:72:d6:
00:27:0b:4e:bf:7b:fa:2b:20:f0:bc:33:29:dd:66:db:29:28:
c3:29:dc:5a:f1:e3:4d:6d:d1:f8:cc:cd:02:7b:5f:44:8f:4e:
02:13:b9:ff:97:5e:63:c7:5e:1a:51:6a:52:5d:61:52:6c:d9:
a7:6b:d5:17:06:81:1b:b0:61:df:3a:30:3e:67:7d:78:5e:65:
88:80:6d:3e:17:cd:4e:59:ef:72:96:5e:b9:e4:c7:3c:6d:3f:
ef:cc:14:2a:ae:d5:1b:a6:6c:df:2a:a6:56:99:83:72:1e:15:
77:ff:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:42:57 2025 by rpki-client