Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313336313331.roa
File: 3130332e34332e32342e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier: +rT7FA2E0iF4atXKVQtkLF9cvjDS1sZ52mo9oYaidZo=
Subject key identifier: AC:C2:F0:D3:98:11:A0:71:A5:E1:7B:C1:F2:4F:74:AC:76:61:72:09
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 147DEB339B77A847AFDBD87BDEB8DD3783485534
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313336313331.roa
Signing time: Sat 22 Feb 2025 08:55:51 +0000
ROA not before: Sat 22 Feb 2025 08:50:51 +0000
ROA not after: Sat 21 Feb 2026 08:55:51 +0000
asID: 136131
IP address blocks: 103.43.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7d:eb:33:9b:77:a8:47:af:db:d8:7b:de:b8:dd:37:83:48:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Feb 22 08:50:51 2025 GMT
Not After : Feb 21 08:55:51 2026 GMT
Subject: CN=ACC2F0D39811A071A5E17BC1F24F74AC76617209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:4e:66:b3:9d:c1:30:a1:9c:ed:00:09:fd:
69:3d:bc:7e:bd:34:0a:b9:a2:da:64:3b:6c:5b:cc:
33:ec:11:20:50:93:af:b4:2a:25:52:4e:69:70:f0:
08:46:4e:11:31:de:23:86:22:d4:74:d9:10:75:99:
e1:17:51:4c:02:60:03:9e:8b:1e:01:9c:8b:58:75:
85:68:0c:45:bd:11:0a:1a:3d:54:ef:cf:ef:3d:06:
a6:ba:e1:bc:ee:d9:af:3c:cc:36:84:bd:37:72:2c:
0a:1c:40:3b:0e:4a:96:a9:df:a2:a3:c5:c1:c6:a4:
92:57:8c:33:7c:dd:6f:b2:90:f9:d3:50:2b:a0:e1:
7a:d7:0b:e1:6b:e4:83:31:bd:c8:f9:43:d7:08:c9:
ea:37:16:6f:8b:1b:18:2f:a5:3e:55:2c:4c:71:3b:
c2:48:ea:dd:20:4d:6f:26:03:5e:d2:dc:0b:e4:fd:
0e:22:7e:bc:22:6c:50:42:41:a1:ab:59:74:4d:52:
a8:36:cb:bf:04:7e:4c:18:84:56:bd:8e:ff:20:ff:
92:60:7f:e9:2a:34:a1:55:71:a9:9d:2a:cf:bf:7c:
8b:01:60:0a:7e:03:32:48:ab:ce:3d:32:7e:ee:83:
14:98:1d:26:6f:67:3c:ab:1c:03:eb:2f:36:0a:29:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:F0:D3:98:11:A0:71:A5:E1:7B:C1:F2:4F:74:AC:76:61:72:09
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313336313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.24.0/24
Signature Algorithm: sha256WithRSAEncryption
80:69:23:86:98:9e:78:3f:1a:96:65:e1:b6:34:52:f8:3d:5e:
6a:48:90:49:5e:54:23:78:4f:50:5e:6a:27:58:36:c4:26:ac:
c6:3c:54:32:9c:a6:37:cb:52:ba:2d:c9:5a:5c:5b:71:1e:8f:
de:c1:28:4d:66:77:9c:50:b2:b4:5a:0e:b7:66:b7:15:1e:0c:
56:1e:0d:98:e4:c2:6f:05:41:3d:0a:7a:d2:13:1f:f1:1d:16:
b1:09:11:fd:97:71:d1:30:fb:be:d7:f3:89:d4:48:1d:f3:56:
24:eb:34:ff:51:d0:12:b5:6c:dd:a0:b9:98:41:b7:32:bd:fe:
9a:c2:11:84:39:35:01:4b:0f:da:b0:4b:ba:ca:39:6c:23:e8:
3c:52:d4:e5:57:ba:fd:6a:61:18:c3:0b:ba:2d:85:35:da:a4:
ad:ba:94:2d:53:5d:43:9d:1b:de:2f:8e:38:bc:5f:d7:6a:c9:
02:2c:f7:3d:cf:41:de:3d:86:cb:13:0e:89:2f:ac:c9:17:a0:
d9:58:b9:3e:d6:8f:70:26:34:bf:34:0e:96:03:f1:10:e8:9b:
7d:1d:d4:73:1f:22:ec:f2:33:73:b5:04:3b:33:98:d6:ae:e8:
cd:6e:29:82:94:a0:58:8a:6f:e5:c3:84:b5:da:b8:b3:64:8e:
fb:45:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:05:43 2025 by rpki-client