Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313530323533.roa
File: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (raw, json)
Hash identifier: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=
Subject key identifier: 70:B3:52:88:C5:7C:47:02:85:3D:18:DA:6C:AB:57:45:AC:EA:61:E9
Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Certificate serial: 49A05642C150A75D7EC6BB843655650F3F4B577E
Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313530323533.roa
Signing time: Tue 25 Mar 2025 07:03:38 +0000
ROA not before: Tue 25 Mar 2025 06:58:38 +0000
ROA not after: Tue 24 Mar 2026 07:03:38 +0000
asID: 150253
IP address blocks: 103.83.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a0:56:42:c1:50:a7:5d:7e:c6:bb:84:36:55:65:0f:3f:4b:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Validity
Not Before: Mar 25 06:58:38 2025 GMT
Not After : Mar 24 07:03:38 2026 GMT
Subject: CN=70B35288C57C4702853D18DA6CAB5745ACEA61E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:f9:f3:63:ef:fa:ae:47:df:09:17:71:cd:
d1:3b:d5:fa:23:58:46:4f:0a:09:e1:e0:df:9b:f5:
8d:9a:a8:63:55:6e:12:c7:6a:c1:cf:f6:f5:b8:ef:
65:43:b1:8f:70:c0:71:02:c8:ca:f2:e3:41:d3:f0:
e3:e0:49:38:b2:0b:1d:04:65:16:03:c8:23:9f:f8:
f6:1f:8b:72:55:32:d4:6e:13:17:e8:43:16:c0:3b:
8d:85:89:b6:05:e5:d5:8b:45:e4:6e:dc:73:45:06:
15:95:58:19:2d:da:6c:58:76:3c:f8:5a:d3:90:e0:
31:64:36:0a:10:92:fd:24:93:48:14:2c:93:54:0c:
f2:bb:28:9b:78:41:2b:41:33:fc:b0:f0:cc:6c:e2:
b8:ea:c0:8a:e5:46:e0:93:6d:cd:2a:5a:93:d1:56:
80:9b:04:ac:e7:63:51:27:15:38:c4:0c:cc:73:2d:
94:fd:48:5a:56:4e:1f:43:96:0a:3f:82:e3:59:af:
d2:a6:a2:5d:aa:b4:87:9d:a4:93:c1:c6:2e:c5:c2:
18:a5:cc:24:29:57:4b:e4:07:81:52:89:de:32:3b:
c9:49:dd:f7:d0:a8:23:e1:97:d4:28:b9:3c:fc:2a:
33:17:68:77:8a:a4:cf:f6:7d:a6:17:b4:36:a6:74:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:52:88:C5:7C:47:02:85:3D:18:DA:6C:AB:57:45:AC:EA:61:E9
X509v3 Authority Key Identifier:
keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3130332e38332e38342e302f32342d3234203d3e20313530323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:45:e7:03:12:83:5f:36:6f:61:4c:76:e8:ec:45:a8:66:ac:
e7:8f:af:33:8d:4b:b2:a2:1d:29:94:26:f0:cb:18:5a:99:5b:
f2:f3:81:cc:ea:fe:25:36:d8:6a:8f:ae:84:6e:1f:c6:09:f4:
74:2c:0c:64:12:25:cd:41:80:8a:e9:42:ee:d1:b9:73:77:ee:
9f:7b:c1:6f:b2:95:34:ff:d1:f5:4b:c7:8d:38:c6:24:39:38:
f7:77:b6:16:cb:46:03:4f:94:ed:d8:9f:e4:f8:71:3b:76:92:
b0:84:40:93:fe:4b:04:54:d4:40:00:6c:6d:4e:fa:0f:31:85:
91:55:c3:2c:71:d4:cf:2a:3b:02:09:47:2b:40:9f:c0:3a:01:
fc:f2:a9:b6:d5:5f:2c:3e:09:67:b8:30:64:51:4f:a8:00:6a:
72:63:ae:0f:ca:ca:d2:61:64:32:77:1b:eb:98:2d:69:21:9d:
4a:f0:9d:73:cd:8c:4f:ba:2c:cd:9b:00:54:31:e6:cf:c3:0e:
67:6e:6e:cf:6c:23:66:aa:49:08:0f:cb:cf:a6:9a:4e:c5:a1:
f8:1d:bb:07:f9:d6:b2:48:8f:83:d8:f2:35:8f:62:87:01:cc:
09:d3:06:62:d6:02:f3:1d:46:10:93:d7:9e:ab:f2:16:0a:54:
c7:28:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:07:55 2025 by rpki-client