Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa
File: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (raw, json)
Hash identifier: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=
Subject key identifier: 48:E1:1D:8F:84:69:66:7B:F2:B9:6B:F1:09:3D:7E:8F:A1:C7:5D:89
Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial: 17BB84CF7B4F8FBEF12D25E3C10C96AA2D12B9A3
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa
Signing time: Sat 15 Mar 2025 21:36:22 +0000
ROA not before: Sat 15 Mar 2025 21:31:22 +0000
ROA not after: Sat 14 Mar 2026 21:36:22 +0000
asID: 142381
IP address blocks: 103.155.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bb:84:cf:7b:4f:8f:be:f1:2d:25:e3:c1:0c:96:aa:2d:12:b9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
Validity
Not Before: Mar 15 21:31:22 2025 GMT
Not After : Mar 14 21:36:22 2026 GMT
Subject: CN=48E11D8F8469667BF2B96BF1093D7E8FA1C75D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:34:a4:04:4e:f8:19:69:71:cb:50:9c:f1:
4d:ba:a0:0c:2a:98:2d:3a:9e:0c:d3:dc:43:ce:83:
e0:e9:9b:a8:ca:0a:57:c4:e1:5b:d3:91:99:18:c6:
91:8e:bc:db:58:63:ac:9f:71:cb:68:53:15:a8:36:
f2:5f:90:4f:90:d5:e8:a2:20:0f:28:b1:5f:f2:10:
57:13:27:f5:f0:b7:2f:95:1d:8b:e2:07:fb:e0:5e:
ef:6f:e5:58:4c:ab:a9:ed:7d:e7:4d:0f:7e:f2:b2:
5e:9d:db:27:58:c1:c5:f6:49:f1:75:b9:b1:19:92:
fd:fe:bf:0c:c7:ed:96:af:53:27:df:cd:20:9e:6b:
e5:69:e3:72:e4:a8:84:16:97:3f:ca:1a:24:ec:24:
9d:df:ef:07:70:de:15:42:2a:28:f3:9b:c7:ba:a4:
21:95:fc:e4:6b:35:9d:5c:d0:f6:17:75:4f:83:68:
6f:b0:01:e2:71:2a:fa:0d:b6:d9:21:1d:55:67:22:
98:e9:30:63:49:43:d1:3b:11:fb:06:67:59:fd:91:
20:fa:79:37:9f:7d:f5:c7:98:da:fa:6a:89:e0:e1:
c8:2e:29:6b:5c:7b:88:8e:ee:1c:57:16:a1:ea:73:
be:60:1a:df:3f:0a:4a:2c:bc:a4:08:55:ed:7b:9d:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:1D:8F:84:69:66:7B:F2:B9:6B:F1:09:3D:7E:8F:A1:C7:5D:89
X509v3 Authority Key Identifier:
keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.64.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:32:a7:76:7e:71:84:09:f3:da:b7:74:56:38:3c:5f:63:a5:
62:5d:61:64:30:bd:67:ec:67:b9:06:f3:09:2b:66:b8:33:fe:
56:bc:f0:2a:35:90:c5:47:0c:1d:f1:8d:18:ef:24:3b:15:b6:
27:19:87:ce:d2:7c:fa:c3:6a:80:bd:61:01:0d:17:91:f6:b9:
56:ae:02:00:01:60:d2:e3:86:ab:93:4c:11:8b:17:e3:18:a2:
a1:2a:2e:7a:68:69:47:63:dd:16:20:72:63:08:8f:7c:77:0b:
ed:2d:57:01:cf:a8:5f:01:0d:76:53:ed:ea:8c:f7:81:54:7c:
bc:1c:ae:7c:e3:c4:9d:03:54:66:31:cb:e7:b4:96:7b:b9:39:
82:61:b2:90:cf:63:7f:f3:9e:46:61:74:77:40:c7:83:12:62:
7a:b4:17:19:44:86:d1:ec:ae:d0:eb:e6:97:23:45:46:fa:02:
0e:4f:97:26:f8:e1:ab:01:64:11:61:6d:d2:32:70:a5:95:5d:
22:50:7f:57:17:ff:dc:2d:c9:e4:6d:3b:87:b1:a4:56:c8:c6:
83:e8:4a:a7:8d:50:a0:61:52:8c:30:e7:d9:26:90:5b:95:42:
cc:19:82:ce:91:47:0a:6b:10:ee:0d:1c:8c:7a:64:a7:2b:19:
44:c3:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:11 2025 by rpki-client