Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa
File: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier: KXby9djIRSMhLtiY+1iIK8h6Zdgp7aSyIhPxwupb118=
Subject key identifier: EF:6C:83:78:75:35:B4:AB:6C:90:06:91:F6:A2:09:E8:CC:4C:5F:E5
Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial: 042E5DB8C843DA2BC15A1D9D79D027459CB7EACE
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa
Signing time: Tue 25 Feb 2025 09:00:00 +0000
ROA not before: Tue 25 Feb 2025 08:55:00 +0000
ROA not after: Tue 24 Feb 2026 09:00:00 +0000
asID: 132669
IP address blocks: 103.112.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2e:5d:b8:c8:43:da:2b:c1:5a:1d:9d:79:d0:27:45:9c:b7:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Validity
Not Before: Feb 25 08:55:00 2025 GMT
Not After : Feb 24 09:00:00 2026 GMT
Subject: CN=EF6C83787535B4AB6C900691F6A209E8CC4C5FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:41:70:d3:98:65:fc:3b:6b:e6:9e:19:dd:
05:ef:61:e0:4d:c9:2c:77:75:f5:a9:a7:02:9a:fc:
2a:12:01:38:c6:17:47:d6:15:82:05:f1:91:5e:a6:
09:29:5d:8d:65:28:39:d4:53:da:54:3a:de:5c:ea:
22:f7:47:37:b2:b9:f7:2f:3f:a9:08:fb:77:5c:65:
ba:f3:dc:30:dd:90:85:d3:be:96:63:1a:a3:ed:45:
7b:1f:2a:92:26:81:89:dc:1e:b6:06:6a:90:3d:6b:
e1:63:d3:df:35:d4:08:50:25:5d:39:02:bf:db:a4:
2c:f3:97:95:99:9c:52:70:f0:bc:d7:4d:0d:60:f1:
3c:e3:4b:19:ad:6a:63:14:15:9c:7e:47:0d:53:d5:
8c:49:eb:d5:fc:8e:b2:37:51:80:79:d7:40:08:27:
6e:08:28:dd:f0:2b:7a:21:d1:48:56:3f:4b:9a:91:
65:b5:b1:7a:7f:8b:07:6e:c7:9c:07:29:b4:5f:88:
9f:46:79:62:dc:66:b4:d9:67:ca:51:52:ec:ca:c9:
71:1c:00:c5:e4:23:4c:ef:e7:71:f7:ba:95:cc:35:
bd:d4:a7:79:f4:39:54:ab:42:90:39:71:6e:a2:1e:
6c:03:cf:b1:7f:b8:eb:e8:ed:72:5b:62:9a:b0:20:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:83:78:75:35:B4:AB:6C:90:06:91:F6:A2:09:E8:CC:4C:5F:E5
X509v3 Authority Key Identifier:
keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.44.0/24
Signature Algorithm: sha256WithRSAEncryption
55:64:1d:e7:ce:4c:62:9e:66:10:66:d5:3b:35:ba:fb:e9:26:
3a:47:a6:e7:72:be:0e:e3:55:c0:84:4c:38:52:a7:d8:56:01:
9e:db:ce:2f:20:80:e3:3b:68:46:01:d6:67:75:1a:92:fc:f0:
19:c0:35:03:07:4c:28:18:0f:33:6e:a3:0a:5b:04:47:a0:cd:
f1:42:53:0e:29:d0:26:ae:17:0c:e4:cf:01:fa:39:d2:28:6b:
71:1a:f0:84:43:a9:e3:43:24:e2:19:44:3a:ce:bf:13:1e:cc:
f2:09:ff:78:05:88:e3:b5:b6:b6:e2:fe:0c:39:de:a9:45:ce:
16:3f:6d:f5:dd:2c:d2:18:c4:70:05:31:85:86:28:d1:d0:1d:
1b:4a:ea:d6:d6:42:1b:46:5d:2c:d7:f3:22:78:8c:a5:f1:ae:
0a:2e:79:b7:fc:a2:14:51:9a:0b:46:9e:24:78:f3:57:c5:91:
69:06:86:a7:14:53:12:a9:d4:dc:76:9d:27:49:52:1f:33:68:
c1:85:f7:eb:3a:e5:97:43:54:82:3c:7e:03:b1:ca:0a:49:e1:
38:7d:30:06:1a:27:9f:af:e9:87:ed:71:2f:19:a1:8b:38:72:
39:87:f9:ac:4d:11:4b:50:9c:ca:5a:e3:18:05:30:e9:34:cc:
a4:9c:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:15 2025 by rpki-client