Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa
File: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (raw, json)
Hash identifier: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=
Subject key identifier: 73:54:49:BD:39:27:42:2D:FD:22:42:57:5A:43:65:E0:A0:B6:4E:AF
Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial: 5564768F43A57CDB8DA6B6CF23F7FA6DAF0F73D3
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa
Signing time: Mon 03 Feb 2025 05:32:54 +0000
ROA not before: Mon 03 Feb 2025 05:27:54 +0000
ROA not after: Mon 02 Feb 2026 05:32:54 +0000
asID: 142381
IP address blocks: 103.155.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:64:76:8f:43:a5:7c:db:8d:a6:b6:cf:23:f7:fa:6d:af:0f:73:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
Validity
Not Before: Feb 3 05:27:54 2025 GMT
Not After : Feb 2 05:32:54 2026 GMT
Subject: CN=735449BD3927422DFD2242575A4365E0A0B64EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:4f:fa:67:ac:44:14:4d:02:d1:9a:7c:a1:
2a:3f:34:1d:99:9e:ce:de:89:ea:4a:98:65:f2:5c:
12:55:4d:3f:ca:b1:68:02:4d:64:c0:aa:29:b2:1f:
be:43:0b:6c:b0:cb:94:8d:47:7e:a4:67:b3:80:12:
1c:d5:46:6e:d6:a5:79:42:da:e6:e5:69:0c:31:ac:
c2:ff:c2:e6:f5:6f:61:1e:0a:de:3f:47:1a:3f:f8:
8d:f4:78:ab:ab:b6:24:f6:df:3e:dd:9c:b6:23:53:
7b:d0:09:3f:03:cd:ec:e4:7f:7a:c2:a1:cc:25:70:
ec:08:3b:04:c8:ab:a4:84:ed:b2:c5:d9:73:5f:af:
98:f1:4a:9a:15:dc:65:43:eb:63:b0:fc:05:a2:5a:
f8:7b:17:e4:8d:87:90:ab:34:c6:04:37:c2:30:b6:
21:48:09:bb:09:ee:9a:87:de:f5:50:6a:d6:42:f3:
9b:bf:d9:82:a3:61:13:d0:2c:64:e8:86:fa:2b:90:
77:a2:4f:ba:f9:ac:f6:3d:f2:37:25:f0:da:c2:f3:
0f:35:d3:fb:63:c1:9d:23:9c:27:fd:55:2d:e9:d8:
59:48:c6:94:66:c2:df:bc:47:99:b4:cb:94:d9:80:
7d:cc:c3:c0:a9:78:66:e1:8e:b5:b5:7c:c1:f3:25:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:49:BD:39:27:42:2D:FD:22:42:57:5A:43:65:E0:A0:B6:4E:AF
X509v3 Authority Key Identifier:
keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.64.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a6:55:de:bb:7c:31:58:ca:fb:0b:06:01:5b:b2:e5:2a:c9:
64:12:80:63:2b:3c:f3:60:c5:ec:af:fa:08:a1:74:d1:18:9c:
73:bd:2f:46:87:74:41:da:8e:5e:cf:a9:e7:b2:f4:56:90:b7:
da:57:35:7a:7d:fd:61:53:35:06:98:2d:8f:91:13:c5:56:22:
7d:ee:bf:23:39:d4:43:c0:38:96:5e:e8:7f:23:32:ae:40:fc:
82:b2:1d:ac:ba:ca:88:77:4c:37:8d:7e:40:f0:8b:95:cd:5b:
83:3b:54:65:7d:2f:b6:00:54:35:26:66:87:42:4b:e2:b0:3b:
af:1a:e5:35:01:d0:f3:cb:59:2b:1b:b0:0e:bb:70:8b:cc:a9:
80:0b:00:4f:db:dc:3f:a1:6e:f7:24:ae:9c:67:22:4a:07:66:
1c:75:a2:38:d4:34:c1:54:d4:08:3b:9c:f3:ca:58:e0:92:ea:
bc:0e:b9:22:7b:bd:3f:a8:55:ee:fd:ff:d4:4c:a2:c2:1a:ec:
30:7c:c0:41:11:ae:18:52:5c:81:e9:c0:43:6d:30:e3:46:8e:
22:41:f6:85:e2:ae:44:d0:42:fd:2d:80:f5:c5:b5:2c:a1:63:
68:bd:ed:38:a6:ba:4c:01:89:85:2c:9b:4c:5a:7f:89:ba:f3:
41:c7:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:30 2025 by rpki-client