Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa
File: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier: qbkH1qedbuL2nkb9oW2AlysgwJB8XaNgGrzurioAZP0=
Subject key identifier: 19:FC:D3:17:B3:95:1B:79:A7:D1:F9:1E:A7:DA:23:82:CD:CD:B3:9A
Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB
Certificate serial: 2620D309841E217833F78C1F331B73B2F266E9E9
Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa
Signing time: Tue 04 Mar 2025 06:00:58 +0000
ROA not before: Tue 04 Mar 2025 05:55:58 +0000
ROA not after: Tue 03 Mar 2026 06:00:58 +0000
asID: 136841
IP address blocks: 103.100.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:20:d3:09:84:1e:21:78:33:f7:8c:1f:33:1b:73:b2:f2:66:e9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB
Validity
Not Before: Mar 4 05:55:58 2025 GMT
Not After : Mar 3 06:00:58 2026 GMT
Subject: CN=19FCD317B3951B79A7D1F91EA7DA2382CDCDB39A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:aa:ac:a1:39:19:f5:e6:04:1e:e0:f0:05:
6b:af:9b:07:1c:96:9f:f7:58:1a:f4:58:09:02:92:
dc:be:76:28:02:56:a2:38:b2:e3:b5:57:64:b2:9e:
4f:01:b9:6b:47:96:70:40:c0:46:16:5b:a5:02:de:
09:d9:9d:90:09:d8:24:c8:69:0c:70:0a:86:19:71:
3d:54:55:47:37:bc:e0:b0:61:8c:20:d8:2d:85:86:
09:65:93:74:53:35:77:04:33:c9:0f:c3:96:95:1f:
f2:0a:44:3e:9c:02:40:88:af:56:b2:6b:d2:55:56:
f9:1c:b7:c0:6f:c3:7e:19:f5:86:2f:07:47:81:97:
37:ba:b2:7a:ad:b3:a6:68:04:87:1d:55:c0:52:dc:
be:e8:2a:57:46:0d:2a:85:ff:cb:93:a8:5c:b2:f3:
69:7c:a0:bc:6f:e8:82:b5:45:16:80:14:ca:77:cd:
28:f5:0e:34:d5:c0:28:a2:fb:a0:3a:66:ba:2c:31:
c9:2e:03:c5:50:66:00:37:52:f2:93:fb:b8:29:07:
96:6d:2e:4b:de:02:92:15:a5:07:9a:0b:1a:23:38:
31:d9:90:61:9d:0b:49:b1:1c:25:ce:90:74:3b:29:
db:3c:04:f8:8c:34:f5:b1:ae:23:18:33:ca:c4:aa:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:D3:17:B3:95:1B:79:A7:D1:F9:1E:A7:DA:23:82:CD:CD:B3:9A
X509v3 Authority Key Identifier:
keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.175.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:68:7d:85:5a:77:ce:a5:f8:02:9d:93:ae:dc:87:e1:a1:
07:2c:60:47:94:f0:8c:d6:8b:b8:c1:d9:52:81:85:9b:01:ea:
52:b8:81:7a:d2:87:40:75:a7:6d:15:7b:1d:20:1c:2e:64:32:
0d:78:e4:a8:cd:63:89:af:15:be:de:8a:f1:37:50:31:bc:c2:
47:e6:57:17:f5:3f:b9:eb:2b:ce:bf:c1:3f:7b:bf:fe:01:98:
a8:37:ca:e7:99:0a:14:a0:af:77:92:55:71:b9:49:96:00:31:
09:b7:d4:98:88:4b:dd:34:b3:57:2b:10:f6:94:cf:ca:61:e1:
08:b5:a7:07:80:1b:d0:c2:72:8d:5c:ac:15:d9:ea:5d:29:64:
06:74:ab:fa:d6:1f:16:60:75:ef:0e:fb:6c:eb:b6:97:c6:cd:
34:a9:77:fb:13:cf:49:e6:e5:68:70:57:a8:f1:af:40:97:52:
e0:8e:29:41:78:93:9a:3f:54:82:3c:b1:7f:ad:60:a7:dd:c8:
f1:c0:65:3a:6f:c0:c6:d9:e4:55:50:5b:cb:1c:9f:55:df:bc:
35:f9:31:e5:69:6d:0b:a3:14:28:b9:8c:8d:bb:50:fb:c0:d4:
6c:87:4a:9f:1c:cb:ea:68:4b:c8:e4:2a:3b:d0:6a:ee:56:3e:
3f:17:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:20 2025 by rpki-client