Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313431313430.roa
File: 3130332e38332e38342e302f32342d3234203d3e20313431313430.roa (raw, json)
Hash identifier: zEjnMWRjJmXJ2CBYaLzueSEjZmWHBYfGWkIBAGNE3t0=
Subject key identifier: AD:8B:75:B8:E6:6A:D2:88:A2:96:3A:29:8A:8B:00:44:F3:79:5F:98
Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Certificate serial: 40223422EE0DC43C188DA703CC77ECF8402D0AE8
Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313431313430.roa
Signing time: Wed 19 Feb 2025 11:01:47 +0000
ROA not before: Wed 19 Feb 2025 10:56:47 +0000
ROA not after: Wed 18 Feb 2026 11:01:47 +0000
asID: 141140
IP address blocks: 103.83.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:22:34:22:ee:0d:c4:3c:18:8d:a7:03:cc:77:ec:f8:40:2d:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Validity
Not Before: Feb 19 10:56:47 2025 GMT
Not After : Feb 18 11:01:47 2026 GMT
Subject: CN=AD8B75B8E66AD288A2963A298A8B0044F3795F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:82:60:0b:86:4c:16:77:c9:00:45:e5:af:
c3:95:9f:56:4d:8b:dc:00:56:12:c4:dc:90:10:f9:
cf:12:0d:13:70:cb:00:6b:8f:60:2a:0c:0f:7c:5f:
06:e6:fc:62:21:91:86:80:be:1e:d7:a0:53:90:c9:
1f:d5:27:29:2c:5f:03:c6:32:a0:73:a8:24:bd:ce:
68:78:4e:97:ae:69:5f:72:67:14:6f:21:0d:ea:e7:
5a:a6:56:88:ab:7d:83:e3:e3:61:8d:f9:b2:10:b5:
71:b5:f0:36:a4:46:d0:08:1d:65:e8:80:b4:0d:cf:
8b:42:f6:ef:0d:fc:d8:00:df:2f:6e:48:7d:4c:2b:
9e:95:49:5c:a0:70:d2:29:dd:ad:9a:50:a1:bc:78:
4d:e7:19:e3:69:c7:d2:01:6d:f5:cd:b2:3c:86:15:
50:ca:5b:be:e0:92:0e:62:35:16:e3:55:af:25:6c:
1b:84:7b:2b:66:ed:e0:22:6a:43:88:bc:6d:7e:dd:
b2:6d:35:c8:21:ce:7e:16:4b:ca:8c:21:be:48:11:
d2:9a:43:1a:b2:ae:a4:f8:92:32:66:96:4f:22:dc:
f7:81:d6:8f:66:9e:50:0e:d1:00:5b:8a:a2:b4:87:
e2:cd:31:cd:dd:3c:8c:83:74:fc:65:af:13:8b:de:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:75:B8:E6:6A:D2:88:A2:96:3A:29:8A:8B:00:44:F3:79:5F:98
X509v3 Authority Key Identifier:
keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313431313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:77:4b:a9:aa:33:3e:39:d8:8c:d7:e0:3f:5a:32:3e:a7:b6:
f3:32:1f:93:5d:35:f9:3d:e7:0e:06:51:4b:7b:3d:2a:99:77:
35:43:b3:d1:bd:90:bc:75:53:f1:28:b2:1f:14:8d:19:94:51:
df:f5:71:4f:20:02:95:37:7e:ca:76:81:15:84:90:27:53:17:
54:a6:61:d5:6c:e0:a2:a2:6e:ff:ff:43:02:d2:48:71:01:a4:
86:4a:c9:60:74:4c:7e:fb:3e:c2:57:0d:7d:b5:ff:b9:2d:3d:
76:5b:94:7e:a2:cb:d2:7e:04:d2:29:d6:93:ee:5f:7d:52:8c:
c6:c2:82:fd:77:89:e8:2c:dc:60:b7:6d:21:bf:a4:7f:07:65:
82:af:2b:b7:74:c0:0e:47:f5:44:62:3b:3b:63:93:ff:58:a0:
8b:d3:a6:ca:c5:e7:e8:c7:59:6f:af:df:31:1a:74:de:c1:06:
cc:4e:4a:a4:d2:6b:a1:8e:b2:f9:ce:14:31:c4:04:c0:e4:81:
48:48:f3:f1:b1:0d:5b:85:ad:54:06:29:dc:2b:f9:96:c4:07:
94:e3:e9:15:5b:b1:b2:48:36:46:20:ee:e5:1a:19:7b:f7:85:
49:5c:a6:02:1b:da:8c:ff:54:c2:2b:f7:28:e0:48:36:d8:b7:
e6:d6:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:09 2025 by rpki-client