Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa
File: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (raw, json)
Hash identifier: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=
Subject key identifier: 87:09:D6:CD:57:9A:30:16:43:80:DE:55:5A:01:8F:D3:3B:8E:F3:7B
Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Certificate serial: 5FB06367C6BCE27B7F311A0400F60E025D9A40F0
Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa
Signing time: Thu 27 Mar 2025 15:00:00 +0000
ROA not before: Thu 27 Mar 2025 14:55:00 +0000
ROA not after: Thu 26 Mar 2026 15:00:00 +0000
asID: 150980
IP address blocks: 103.70.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b0:63:67:c6:bc:e2:7b:7f:31:1a:04:00:f6:0e:02:5d:9a:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Validity
Not Before: Mar 27 14:55:00 2025 GMT
Not After : Mar 26 15:00:00 2026 GMT
Subject: CN=8709D6CD579A30164380DE555A018FD33B8EF37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:93:7b:d5:74:9a:52:fb:35:6f:56:b9:f0:
37:8a:23:52:d2:bd:5b:4c:04:5d:0f:e3:c8:f0:10:
8f:78:36:90:92:c4:6d:d2:99:be:b4:a4:b3:79:15:
43:83:28:4e:c2:b1:d7:f4:b3:30:96:c7:fe:07:d1:
a8:e5:7c:e5:fe:33:94:aa:62:bb:ac:76:6e:25:53:
01:c8:b8:56:d9:16:c0:56:91:68:0c:9c:e4:fb:9a:
1d:26:fc:42:7c:9c:f2:59:6e:6a:4f:59:39:6e:8d:
69:8b:1b:84:75:50:c9:1c:f2:5a:c0:45:fd:e2:69:
21:12:26:c6:f5:d7:ab:14:89:c3:e2:9e:06:ac:06:
50:87:40:50:c3:09:43:02:7a:62:69:5a:12:de:ff:
4c:0a:72:da:95:81:00:e0:12:53:8e:1f:8f:16:a2:
0a:7e:8e:c8:df:c8:bc:a4:5e:d4:ca:7b:26:4b:1a:
1c:9c:6e:e8:10:e7:ed:7f:2f:33:31:69:ab:18:cc:
6a:6c:d9:25:0e:48:ec:ee:52:ea:6d:5c:55:0b:7c:
20:9c:b2:a4:9a:7a:f6:7d:f9:90:fb:2e:5e:99:8f:
f7:4b:7b:87:03:07:e0:ed:41:10:a0:1d:c3:9e:3b:
02:e8:06:0e:ea:45:7d:3e:af:a7:41:cf:d5:54:a6:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:D6:CD:57:9A:30:16:43:80:DE:55:5A:01:8F:D3:3B:8E:F3:7B
X509v3 Authority Key Identifier:
keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e9:ac:ca:fd:bc:80:0c:8a:e1:52:76:ba:f4:b4:9c:e5:9e:
ec:4a:c5:1d:c7:61:52:c3:2c:b6:b0:0f:6b:54:42:47:93:75:
c1:1f:1d:7b:e4:35:d5:03:88:8d:b0:11:ba:8d:f5:7b:af:db:
4a:e8:1d:7a:f5:a9:91:c1:0f:ba:85:73:c4:51:66:78:f8:e1:
63:88:26:9e:b6:73:66:b2:de:3e:0c:2f:57:7f:91:13:3e:f2:
d2:c4:ca:13:5b:f8:3d:ac:87:f0:a5:66:24:62:99:5e:a0:ba:
41:bd:23:a3:f0:a2:3d:6e:6d:24:e1:ec:fa:aa:59:fb:f9:25:
11:3d:1a:3e:a8:c8:01:8e:22:64:f8:c6:45:56:85:ee:56:a5:
c9:2b:0d:62:65:9a:c4:e7:8a:6c:7e:a1:7b:36:3c:01:94:8c:
62:84:78:76:49:6e:eb:fc:8c:06:0a:97:ec:3b:a8:3b:9e:60:
8a:96:5d:52:b1:6e:80:4c:24:d5:f4:ec:4d:a9:37:fc:f6:52:
25:c6:b1:53:4c:5b:86:05:1c:9b:e0:c4:37:46:b9:bb:50:e6:
f7:1e:55:de:3a:cb:3e:df:a6:7d:6c:4d:ae:26:81:6b:d3:08:
53:a8:d9:04:1a:6d:52:d8:b4:02:c9:41:22:82:33:98:b7:bb:
0a:80:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:01:26 2025 by rpki-client