Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530323736.roa
File: 3130332e34312e3234382e302f32332d3233203d3e20313530323736.roa (raw, json)
Hash identifier: 4uO0Bx64cKteLIPR6mEX25nKXKrvSR6NBLZCO6EhEEk=
Subject key identifier: 43:30:C9:D2:22:CE:60:9E:5C:1F:6E:FD:35:F3:6F:DF:B9:60:0D:56
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 30760273DD098F1C8FA67960A646FC8B501E0B54
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530323736.roa
Signing time: Wed 19 Mar 2025 05:53:47 +0000
ROA not before: Wed 19 Mar 2025 05:48:47 +0000
ROA not after: Wed 18 Mar 2026 05:53:47 +0000
asID: 150276
IP address blocks: 103.41.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:76:02:73:dd:09:8f:1c:8f:a6:79:60:a6:46:fc:8b:50:1e:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Mar 19 05:48:47 2025 GMT
Not After : Mar 18 05:53:47 2026 GMT
Subject: CN=4330C9D222CE609E5C1F6EFD35F36FDFB9600D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:b3:db:c0:4f:eb:0f:08:b3:31:b8:c2:9e:
0a:e3:85:07:74:99:15:cb:70:0e:2d:8d:c9:5d:32:
4c:47:29:89:21:78:aa:49:6e:e4:db:da:e5:9a:35:
5c:0d:4a:99:0e:42:ed:35:c1:04:e4:6a:bb:6a:cf:
93:ae:9d:61:0b:71:fb:3b:70:df:84:df:0e:90:88:
f6:76:13:78:84:89:4c:a8:4d:0d:49:15:36:59:21:
46:60:a7:f5:12:cb:e3:d2:b4:71:f8:76:2f:92:fd:
2d:66:f8:e0:c1:8a:59:0a:c7:09:08:9f:4b:22:ea:
3a:1f:3f:bd:5f:fc:df:37:5e:08:0e:5d:d1:a6:1b:
2c:a6:64:d3:83:66:12:2e:99:80:7d:e5:f1:a3:27:
f5:fb:66:c8:95:3e:f7:23:8b:e8:2f:bb:30:97:e0:
41:e1:c4:f4:22:cd:e4:e0:8e:56:bf:5a:2a:9b:35:
35:ce:e8:69:b6:2f:cf:af:62:76:ea:9b:55:1c:d6:
ad:31:2d:6e:50:41:21:53:9f:9a:b1:62:52:42:9d:
20:81:65:34:10:5d:39:a7:f1:68:df:eb:b4:8e:b2:
1f:8b:6d:0c:01:fa:85:bd:6c:76:51:b9:4d:5d:6c:
74:ee:d5:24:77:a0:e9:e3:79:11:31:e4:8c:5c:07:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:C9:D2:22:CE:60:9E:5C:1F:6E:FD:35:F3:6F:DF:B9:60:0D:56
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.248.0/23
Signature Algorithm: sha256WithRSAEncryption
75:74:eb:eb:ba:a7:af:cc:77:2e:3d:c8:15:c3:86:88:b4:86:
35:ec:00:bd:89:87:fe:50:44:fb:26:be:b2:f4:e6:71:ea:11:
9b:2a:70:5c:a7:2b:44:06:93:9f:d2:1f:66:e0:66:ed:14:95:
ff:eb:df:b9:0f:cf:91:69:78:94:cd:21:89:cd:f2:54:f6:d1:
dc:54:7c:31:ab:a8:97:2d:ec:59:31:a8:21:42:09:d4:fb:f0:
c1:16:9c:02:fc:29:16:23:8c:95:90:e5:42:29:19:39:d9:c4:
e0:89:d4:95:0f:5a:f6:6e:5f:e3:93:2e:ed:4b:6d:9d:98:8f:
9a:1a:0f:ee:a3:4e:b1:8e:f1:83:55:eb:59:8c:73:16:6f:98:
7c:38:53:7b:99:65:b5:c4:ea:bd:c6:c5:10:88:96:9a:7c:36:
0c:a1:da:7a:7d:b9:25:23:4b:8b:f4:b0:05:84:05:ca:d6:a9:
4b:fe:c5:9d:b5:15:b1:77:fa:13:0f:40:87:a7:71:31:75:17:
ca:30:78:d8:ba:2b:8e:2d:b6:d4:2b:55:ce:1e:3b:83:f5:38:
73:36:d0:6b:a3:a7:a0:b9:48:79:19:87:53:b1:22:8b:d0:4d:
37:d4:2f:d8:64:6e:b9:a2:e5:7d:ee:11:46:14:03:ef:40:aa:
f7:32:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:43 2025 by rpki-client