Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
File: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=
Subject key identifier: 6D:49:1A:AD:24:27:08:06:66:BA:A3:69:F6:21:F4:14:BA:B8:40:10
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 0CF4E4147D96047A1CDE9ED25C825C017E5CBA69
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
Signing time: Mon 03 Mar 2025 18:33:46 +0000
ROA not before: Mon 03 Mar 2025 18:28:46 +0000
ROA not after: Mon 02 Mar 2026 18:33:46 +0000
asID: 139419
IP address blocks: 103.43.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f4:e4:14:7d:96:04:7a:1c:de:9e:d2:5c:82:5c:01:7e:5c:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Mar 3 18:28:46 2025 GMT
Not After : Mar 2 18:33:46 2026 GMT
Subject: CN=6D491AAD2427080666BAA369F621F414BAB84010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:28:02:e9:38:f0:78:e6:8c:2a:e1:9d:8a:
20:cd:99:0c:d9:14:ab:a4:2f:fe:6a:4c:e0:6b:5e:
0f:71:0f:bd:9d:07:9f:83:30:7e:79:4f:94:23:6b:
2c:4b:a4:9c:f7:96:8c:94:df:28:c4:58:37:52:d0:
af:7f:b8:29:7c:05:84:cf:d1:aa:e1:a0:6e:37:8b:
72:7e:8f:5b:10:09:0f:d5:8e:f7:97:b2:e4:01:43:
34:78:02:2b:fe:1d:9f:fd:42:02:81:9b:ee:a4:9e:
eb:d3:c6:2a:7f:24:a1:d1:99:06:3e:fb:28:3e:3d:
0c:13:bd:9f:65:45:59:94:04:a4:43:f8:2e:a4:90:
c9:9c:e6:c4:9e:d6:74:a2:2a:d7:46:f9:f8:f8:a7:
8c:99:56:1c:d3:60:98:b4:b0:1b:22:2a:32:c8:98:
96:63:be:6c:2b:1c:94:7d:04:33:38:25:bf:47:fc:
ec:71:52:fc:c5:20:ba:f6:c4:90:77:fa:d8:f1:0f:
d3:ed:7d:91:ff:a4:07:2e:ec:a3:2e:ca:a4:6b:7b:
12:82:d2:74:13:ae:ff:a6:a2:1d:30:46:8f:d1:38:
67:34:8a:26:e1:b7:96:fb:f5:42:48:df:35:1c:fa:
71:df:5c:1a:1f:49:db:af:55:b6:eb:36:ed:18:33:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:49:1A:AD:24:27:08:06:66:BA:A3:69:F6:21:F4:14:BA:B8:40:10
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ce:77:97:19:76:02:e1:5c:0b:0a:44:4c:6d:aa:c0:d0:a8:
e1:74:47:7d:b5:2b:a5:45:27:47:a5:8c:fd:5e:fc:6c:08:a8:
91:c8:bf:9b:a0:98:ff:cc:c0:2d:36:df:03:4d:ba:a9:fc:53:
d5:ce:68:11:60:9a:db:cc:b3:67:ea:08:ff:08:29:80:eb:13:
6b:8b:3d:06:5f:9a:e5:c0:fb:90:6c:42:bd:f5:04:15:5f:5f:
8c:59:be:c1:3b:04:2b:ea:8a:6a:9f:3b:e2:6a:b0:26:0c:9a:
9c:94:bd:dd:c4:c5:49:3b:50:cc:10:70:69:d3:83:47:e1:df:
d4:ff:54:3a:7c:db:ec:01:60:4b:56:1e:51:51:bf:90:ce:5f:
5b:46:1b:6d:5c:19:df:ca:45:2d:05:73:c7:f8:ad:85:d4:21:
6c:19:48:fa:eb:c0:f6:fa:62:c8:4f:9c:9c:4c:b8:e3:ac:a3:
cf:2e:db:ee:b2:05:16:71:df:11:cf:71:a7:43:f5:4b:16:24:
a6:f0:36:65:14:87:68:de:71:15:9d:e2:29:0f:b8:fd:1d:c4:
b4:77:11:87:d5:1b:c2:0e:24:3c:23:79:25:20:5e:00:5f:84:
74:a4:1b:7a:8d:a8:25:ae:4c:99:eb:21:b2:40:19:ed:ff:95:
d9:9d:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:08:00 2025 by rpki-client