Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa
File: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (raw, json)
Hash identifier: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=
Subject key identifier: D7:6B:30:D8:5B:78:A8:B1:AB:11:CC:B5:A3:30:24:16:62:C2:2E:C3
Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Certificate serial: 5E25F64727DC0CE0EE2686788B06123FD4F42E60
Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa
Signing time: Thu 27 Mar 2025 16:40:17 +0000
ROA not before: Thu 27 Mar 2025 16:35:17 +0000
ROA not after: Thu 26 Mar 2026 16:40:17 +0000
asID: 131781
IP address blocks: 103.17.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:25:f6:47:27:dc:0c:e0:ee:26:86:78:8b:06:12:3f:d4:f4:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Validity
Not Before: Mar 27 16:35:17 2025 GMT
Not After : Mar 26 16:40:17 2026 GMT
Subject: CN=D76B30D85B78A8B1AB11CCB5A330241662C22EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:47:64:ad:61:4b:bc:26:9c:d5:e9:cb:78:
77:c4:44:81:09:db:f2:d8:73:b1:cf:fd:3c:05:2b:
86:73:f4:aa:29:10:8d:f3:fb:fe:d0:10:92:ca:95:
d4:98:58:ae:b7:c9:79:b5:43:09:b4:5c:f8:70:4f:
0c:23:9b:a4:32:33:82:30:f6:3d:0c:38:1f:48:f2:
31:79:49:be:ce:60:3d:de:78:be:58:73:17:aa:eb:
99:eb:85:8f:d5:23:3d:40:f6:cd:0e:c8:29:59:fb:
e5:13:12:11:2b:76:87:9e:a2:58:01:75:77:b6:76:
c6:93:d5:97:90:31:f3:5f:78:18:29:ae:92:85:2a:
9e:b4:a2:67:37:cf:b8:44:78:a8:4f:7b:f5:b6:fe:
71:40:78:ad:5e:f5:bc:b3:11:36:7e:b5:6e:35:36:
6d:77:ec:84:80:26:54:d7:ac:6f:86:10:eb:3e:09:
2d:73:2d:43:c8:80:d7:8c:f4:a3:89:29:07:55:13:
c0:dd:84:ac:72:72:f4:f3:5a:e1:23:d2:39:85:87:
c1:e4:05:8b:50:45:bf:c9:1f:64:61:b9:62:c3:35:
13:df:b0:16:02:13:ac:2d:77:68:68:68:31:1d:74:
73:0f:a4:5f:51:de:00:7f:8b:48:ad:10:d6:fe:1e:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:30:D8:5B:78:A8:B1:AB:11:CC:B5:A3:30:24:16:62:C2:2E:C3
X509v3 Authority Key Identifier:
keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:2f:f6:8f:c7:e9:bf:01:a3:97:f6:be:ff:70:1f:cb:e8:dc:
af:38:e0:e7:b4:e1:fa:ab:06:0e:69:5e:9c:38:e6:e6:3c:f1:
81:ca:45:cf:90:35:10:e7:b9:b0:8b:5d:45:d4:bb:a1:70:8d:
66:ab:ee:da:35:a6:f6:87:da:96:65:a5:c6:7f:a3:97:ce:89:
ce:b0:af:b0:0d:14:af:98:cc:a1:64:a5:7f:c6:05:4f:62:2f:
69:bc:28:32:fb:8f:08:48:d6:63:99:f6:28:5a:67:bd:b4:01:
60:dc:f9:a5:12:b8:44:9a:39:ae:38:9f:fd:f8:a4:c0:18:28:
97:36:3c:da:44:48:9d:4c:cc:5d:20:ac:07:20:ef:7c:68:f4:
84:4a:bc:99:14:0d:04:f6:fb:ea:47:fd:80:b7:b6:89:eb:da:
2b:3d:c5:84:26:9d:15:23:eb:16:e0:e8:f1:70:ee:ea:f6:d9:
f5:80:bd:19:53:ef:c8:55:a6:f1:34:84:ea:8e:ac:e6:c9:5d:
67:70:a1:a5:d2:d1:7b:eb:38:dd:c2:e3:50:2d:f1:11:2d:97:
ab:5c:35:2e:9a:94:4f:83:db:3f:d4:65:29:d6:01:ff:14:04:
61:05:56:25:71:4f:7a:c5:45:37:81:e4:ff:c1:af:e3:b3:8e:
70:6e:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:45 2025 by rpki-client