Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa
File: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (raw, json)
Hash identifier: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=
Subject key identifier: B3:F8:31:AA:89:34:E5:AD:7B:E9:2B:9B:A4:7A:D0:87:B3:E0:54:13
Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Certificate serial: 0F76809E0489F9CC47C656A43151F0887E31E75C
Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa
Signing time: Thu 27 Feb 2025 08:38:31 +0000
ROA not before: Thu 27 Feb 2025 08:33:31 +0000
ROA not after: Thu 26 Feb 2026 08:38:31 +0000
asID: 138050
IP address blocks: 103.122.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:76:80:9e:04:89:f9:cc:47:c6:56:a4:31:51:f0:88:7e:31:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Validity
Not Before: Feb 27 08:33:31 2025 GMT
Not After : Feb 26 08:38:31 2026 GMT
Subject: CN=B3F831AA8934E5AD7BE92B9BA47AD087B3E05413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:30:98:1c:5c:5e:53:b1:23:a8:4a:7f:00:
77:b7:2d:d6:dd:ab:f3:24:67:26:ef:5d:a4:f2:4f:
27:10:b6:a1:06:5b:34:1b:b5:8e:c6:7d:af:72:63:
34:42:45:14:de:df:6c:20:65:9b:35:3b:9d:a8:5b:
64:25:9f:cc:6a:a3:54:18:c7:5d:1f:31:3a:57:57:
80:f5:47:cd:7b:2a:1c:b4:65:6a:aa:a6:7f:d7:3b:
21:92:2a:a2:f3:15:6e:6a:2b:48:f9:8e:54:14:d6:
2d:77:f9:cb:cf:49:31:03:65:9b:20:2a:da:36:13:
63:ac:14:c4:33:65:5d:e3:32:87:91:8f:99:38:f4:
f1:d9:7c:e5:bd:1a:72:72:81:67:15:1d:07:c1:c6:
8a:de:69:4c:ac:38:49:c1:3e:3d:05:7f:5f:c8:48:
b5:7d:3f:66:31:02:95:22:1e:99:b3:f1:06:cf:88:
63:40:1c:9f:ea:63:43:4c:c1:4a:7a:ac:72:68:01:
8f:2e:c7:3d:77:6d:47:76:6c:2e:14:00:66:e9:83:
c6:33:ad:58:ad:a1:3c:f3:94:fe:c8:1d:48:2c:7c:
cf:04:8c:bf:6e:6d:e1:4b:6b:d2:3d:ec:f2:f4:8f:
ac:5f:ab:c9:c7:66:f6:30:2b:53:dc:7f:93:25:72:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:31:AA:89:34:E5:AD:7B:E9:2B:9B:A4:7A:D0:87:B3:E0:54:13
X509v3 Authority Key Identifier:
keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.5.0/24
Signature Algorithm: sha256WithRSAEncryption
22:42:60:42:06:2b:d4:23:46:66:9c:a7:20:72:51:9d:51:92:
5f:f2:70:fa:d5:c9:c8:5a:47:1a:5f:6c:b1:8c:76:8b:e2:fa:
3c:3d:70:26:65:f5:78:2f:9a:a8:6f:70:0b:1c:13:3d:6f:fa:
9b:66:ae:71:96:76:70:6b:02:80:44:ea:55:03:8d:d8:21:62:
e5:61:b0:3c:2c:c7:d4:91:e5:af:67:b3:59:74:fe:00:9e:91:
c4:08:ed:92:ea:3b:3b:89:c6:19:2d:27:e7:0e:55:d0:05:c4:
2c:c1:1b:4f:55:e4:fa:db:e0:d4:0c:b2:45:6d:73:0d:80:59:
43:dc:2a:f1:2f:59:57:2e:2a:f6:3f:97:29:87:90:86:0b:9a:
43:a6:b0:14:6b:22:83:48:95:f9:57:4c:4c:e3:39:bf:25:99:
df:6c:e1:f9:06:20:c2:80:69:99:a5:a4:77:26:d9:96:d9:9d:
5d:04:16:4b:d3:1c:b2:86:e9:5f:42:22:94:2f:51:6e:eb:a0:
85:2a:b9:3d:dd:c2:8a:81:b2:7b:f6:56:c5:cd:f6:cd:5a:c8:
f3:b7:4c:12:b9:5d:7d:62:67:a6:f2:d1:20:22:3a:8c:69:b8:
e1:a1:9e:af:4b:71:30:7c:38:cc:fb:de:53:40:62:f2:bf:d3:
4d:c1:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:30 2025 by rpki-client