Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa
File: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier: qjzhR95ymw0taG0t2O442+cnY2VZL01g0Ypqud4E2Io=
Subject key identifier: D2:3C:3C:1C:8D:49:FE:A7:F9:96:B6:AB:F8:38:3E:11:FC:E3:03:BD
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 560D556440C27122088C5740DD991AFF381B7ED7
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa
Signing time: Mon 03 Mar 2025 18:33:22 +0000
ROA not before: Mon 03 Mar 2025 18:28:22 +0000
ROA not after: Mon 02 Mar 2026 18:33:22 +0000
asID: 139419
IP address blocks: 103.43.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0d:55:64:40:c2:71:22:08:8c:57:40:dd:99:1a:ff:38:1b:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Mar 3 18:28:22 2025 GMT
Not After : Mar 2 18:33:22 2026 GMT
Subject: CN=D23C3C1C8D49FEA7F996B6ABF8383E11FCE303BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:d9:44:07:0d:1d:b9:af:c9:f1:38:a2:0d:
3e:03:d3:a2:19:50:b3:e1:96:99:7a:bf:df:35:17:
c8:c0:c3:a1:70:28:82:b7:a0:52:86:29:4f:37:aa:
b2:67:d3:97:00:00:22:49:16:ec:00:09:c3:48:d6:
be:27:82:f9:aa:93:65:0b:19:5b:03:a5:3b:18:49:
2d:fb:69:e8:ae:b3:0d:59:f1:35:93:12:bc:b2:8f:
97:93:b7:d8:71:2e:87:8d:42:92:9d:8f:b7:39:27:
c5:bc:0f:17:05:47:f9:b3:a9:f6:e0:85:df:4a:bb:
bf:27:c0:cb:69:18:94:25:82:81:d4:b3:01:50:49:
67:4c:77:67:20:bb:63:64:e4:f1:e4:b9:f4:10:07:
09:7b:97:7e:f4:10:5b:d0:1f:ed:d8:56:f3:88:b4:
2f:bb:e1:e3:7c:8e:f2:e1:ed:e4:a4:b1:6b:d3:a3:
ab:98:9d:c8:64:60:46:f4:6d:dd:a8:4a:6b:e6:8d:
f5:74:3e:19:9a:0b:01:3d:e5:79:b1:b9:5b:0a:8f:
a4:42:9a:39:6e:dd:e6:75:18:66:9d:1a:4e:bb:ed:
5a:cb:d9:82:e9:35:4b:06:07:af:ed:06:3a:c9:3f:
4f:fb:c4:83:be:f0:6b:3d:97:23:63:fe:e4:cd:5f:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:3C:1C:8D:49:FE:A7:F9:96:B6:AB:F8:38:3E:11:FC:E3:03:BD
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.25.0/24
Signature Algorithm: sha256WithRSAEncryption
83:46:b2:5f:b8:14:65:92:77:2a:07:a1:cb:f6:7b:b7:79:98:
a6:eb:af:ad:ec:b6:07:b6:8d:9b:ce:c1:80:eb:0f:9b:a1:df:
38:9a:ee:db:6c:db:03:4b:f7:8d:48:3a:00:66:41:c2:ce:9e:
c9:40:8b:0d:56:21:ff:1b:d1:aa:fc:91:f8:61:fb:30:b2:94:
88:7a:d7:d6:1e:fc:6b:ab:85:c2:91:99:3a:3d:89:2a:55:bd:
f5:31:8b:3a:48:0b:17:04:b6:24:c3:e6:c8:67:cd:f8:0e:56:
cd:04:08:21:f5:90:81:2c:cb:02:ea:c7:9b:17:52:ed:cc:f1:
d3:56:5e:68:e1:58:6b:5c:b8:de:2f:a4:f2:73:79:1c:f9:68:
34:a7:20:b7:53:db:49:35:10:9b:fc:6b:b7:13:92:43:37:20:
df:88:27:45:61:68:29:65:bb:0a:cc:a7:a6:42:e3:d5:a6:30:
b5:07:05:b4:74:17:8c:e7:aa:14:0a:7a:91:55:04:29:85:e7:
df:33:53:ca:85:a8:fc:6c:62:ac:b2:a2:cb:51:74:87:52:28:
c8:86:11:46:73:f9:8f:30:0c:e1:7c:49:21:77:d9:80:0a:65:
91:e9:5d:1e:bc:9e:4b:a8:55:20:57:fe:bf:ec:9d:82:9d:6e:
ab:96:be:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVg1VZEDCcSIIjFdA3Zka/zgbftcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0
MzFFMTc1RjAeFw0yNTAzMDMxODI4MjJaFw0yNjAzMDIxODMzMjJaMDMxMTAvBgNV
BAMTKEQyM0MzQzFDOEQ0OUZFQTdGOTk2QjZBQkY4MzgzRTExRkNFMzAzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W9lEBw0dua/J8TiiDT4D06IZ
ULPhlpl6v981F8jAw6FwKIK3oFKGKU83qrJn05cAACJJFuwACcNI1r4ngvmqk2UL
GVsDpTsYSS37aeiusw1Z8TWTEryyj5eTt9hxLoeNQpKdj7c5J8W8DxcFR/mzqfbg
hd9Ku78nwMtpGJQlgoHUswFQSWdMd2cgu2Nk5PHkufQQBwl7l370EFvQH+3YVvOI
tC+74eN8jvLh7eSksWvTo6uYnchkYEb0bd2oSmvmjfV0PhmaCwE95XmxuVsKj6RC
mjlu3eZ1GGadGk677VrL2YLpNUsGB6/tBjrJP0/7xIO+8Gs9lyNj/uTNX3jjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0jw8HI1J/qf5lrar+Dg+EfzjA70wHwYDVR0j
BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw
RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF
MTc1Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMDgzZDQ0LTc4MzUtNDQzZC04
NTNhLTBhNzljZjAwZTk1MC8wLzMxMzAzMzJlMzQzMzJlMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcrGTANBgkqhkiG
9w0BAQsFAAOCAQEAg0ayX7gUZZJ3Kgehy/Z7t3mYpuuvrey2B7aNm87BgOsPm6Hf
OJru22zbA0v3jUg6AGZBws6eyUCLDVYh/xvRqvyR+GH7MLKUiHrX1h78a6uFwpGZ
Oj2JKlW99TGLOkgLFwS2JMPmyGfN+A5WzQQIIfWQgSzLAurHmxdS7czx01ZeaOFY
a1y43i+k8nN5HPloNKcgt1PbSTUQm/xrtxOSQzcg34gnRWFoKWW7CsynpkLj1aYw
tQcFtHQXjOeqFAp6kVUEKYXn3zNTyoWo/GxirLKiy1F0h1IoyIYRRnP5jzAM4XxJ
IXfZgAplkeldHryeS6hVIFf+v+ydgp1uq5a+vw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:40 2025 by rpki-client