Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa
File: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=
Subject key identifier: 42:BC:42:87:56:0A:17:27:55:84:49:0D:72:E9:35:BF:42:2C:F7:58
Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial: 4EF8FD36F7D2900697AA856995AD91477FE402C9
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa
Signing time: Wed 19 Mar 2025 11:02:21 +0000
ROA not before: Wed 19 Mar 2025 10:57:21 +0000
ROA not after: Wed 18 Mar 2026 11:02:21 +0000
asID: 138855
IP address blocks: 103.170.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f8:fd:36:f7:d2:90:06:97:aa:85:69:95:ad:91:47:7f:e4:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Validity
Not Before: Mar 19 10:57:21 2025 GMT
Not After : Mar 18 11:02:21 2026 GMT
Subject: CN=42BC4287560A17275584490D72E935BF422CF758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:7e:ac:e8:cd:9a:a9:73:45:a6:75:46:1d:
57:15:44:a7:5f:9f:f3:3f:c4:18:3c:cb:d6:ba:48:
d5:70:e8:38:19:50:4b:b0:f7:63:8f:60:45:2f:ce:
cd:d6:59:f3:cf:c5:16:58:79:f5:7a:e0:84:44:fb:
86:94:0a:e3:b3:ce:9d:3b:bb:ea:98:0a:1a:08:df:
e7:c9:47:ca:42:cd:61:19:f1:b1:16:6a:63:b1:0c:
16:d3:40:2b:63:fc:da:37:59:de:63:d2:42:79:30:
87:6e:9e:c5:be:a2:77:c0:04:a5:95:b5:db:f7:98:
cb:b6:c4:0a:18:03:fa:81:fb:56:3a:dc:ad:e8:af:
ed:8d:c0:f8:98:7c:6a:65:d9:26:77:d9:e3:d9:93:
be:9b:05:80:3b:9d:3a:de:18:12:f1:45:cb:1d:ab:
25:ef:33:e7:29:3c:39:7d:db:28:d3:a1:bb:15:c2:
82:e0:a7:1b:e2:74:d2:ac:9b:2f:d0:33:e5:c8:f4:
fe:e0:d3:7a:fd:9d:6e:ac:7d:40:0c:73:1e:82:05:
d8:45:f2:f8:2b:6c:12:ea:1a:ae:ed:81:9a:ef:41:
89:bb:c7:37:cd:ab:01:45:95:fa:fd:e3:3a:3c:3e:
6e:0c:6c:47:5e:38:29:c4:30:ef:ef:b7:fb:dd:0b:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:42:87:56:0A:17:27:55:84:49:0D:72:E9:35:BF:42:2C:F7:58
X509v3 Authority Key Identifier:
keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.234.0/23
Signature Algorithm: sha256WithRSAEncryption
88:9d:14:4a:cd:f4:61:3a:d0:5e:f4:63:14:d6:30:4d:dd:fb:
80:f3:63:ab:41:35:e4:7c:4c:bb:db:2b:37:c0:6a:5a:df:a5:
45:6b:b4:99:31:05:af:9a:4f:36:dd:1c:0f:4a:53:f6:87:cb:
6e:f8:9f:bd:42:75:20:c4:72:5a:05:08:93:90:92:07:58:46:
23:e7:e8:22:04:02:61:09:f2:c3:c8:7d:23:27:d3:32:77:a6:
1d:75:69:55:c3:66:ef:aa:2d:ae:13:53:7c:69:f2:b2:5f:72:
52:66:2f:93:ee:a8:23:7c:7e:85:f9:e0:da:9d:4e:a3:1e:42:
d8:29:7a:35:20:e2:4b:e2:02:c4:58:0f:5e:b7:79:4c:dd:0d:
e0:a4:3c:b8:41:5d:9a:94:f9:c8:c8:18:b3:a1:df:8d:06:ef:
77:24:f7:2b:c9:8f:66:5c:49:4f:89:5f:6f:50:03:0a:ec:da:
3b:c0:42:3b:0e:ed:0d:1b:05:31:03:11:b8:1b:f2:24:94:3e:
06:13:5a:83:42:9c:06:a1:04:5f:d9:be:77:7b:fa:e1:08:ad:
d7:41:3d:42:e2:b7:52:12:08:e6:b5:c7:fc:93:6d:95:ea:ed:
64:3f:0c:33:71:80:3d:45:2c:cb:28:d0:d5:5f:fe:6a:74:5a:
c6:ba:8a:6b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTvj9NvfSkAaXqoVpla2RR3/kAskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD
ODRFQ0VENDAeFw0yNTAzMTkxMDU3MjFaFw0yNjAzMTgxMTAyMjFaMDMxMTAvBgNV
BAMTKDQyQkM0Mjg3NTYwQTE3Mjc1NTg0NDkwRDcyRTkzNUJGNDIyQ0Y3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9H6s6M2aqXNFpnVGHVcVRKdf
n/M/xBg8y9a6SNVw6DgZUEuw92OPYEUvzs3WWfPPxRZYefV64IRE+4aUCuOzzp07
u+qYChoI3+fJR8pCzWEZ8bEWamOxDBbTQCtj/No3Wd5j0kJ5MIdunsW+onfABKWV
tdv3mMu2xAoYA/qB+1Y63K3or+2NwPiYfGpl2SZ32ePZk76bBYA7nTreGBLxRcsd
qyXvM+cpPDl92yjTobsVwoLgpxvidNKsmy/QM+XI9P7g03r9nW6sfUAMcx6CBdhF
8vgrbBLqGq7tgZrvQYm7xzfNqwFFlfr94zo8Pm4MbEdeOCnEMO/vt/vdCwN7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUQrxCh1YKFydVhEkNcuk1v0Is91gwHwYDVR0j
BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4
QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF
Q0VENC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNDRkNTc2LTM4MTgtNDlkNi04
NjYyLWY4ZGY4OWFiMjg2My8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnquowDQYJ
KoZIhvcNAQELBQADggEBAIidFErN9GE60F70YxTWME3d+4DzY6tBNeR8TLvbKzfA
alrfpUVrtJkxBa+aTzbdHA9KU/aHy274n71CdSDEcloFCJOQkgdYRiPn6CIEAmEJ
8sPIfSMn0zJ3ph11aVXDZu+qLa4TU3xp8rJfclJmL5PuqCN8foX54NqdTqMeQtgp
ejUg4kviAsRYD163eUzdDeCkPLhBXZqU+cjIGLOh340G73ck9yvJj2ZcSU+JX29Q
Awrs2jvAQjsO7Q0bBTEDEbgb8iSUPgYTWoNCnAahBF/Zvnd7+uEIrddBPULit1IS
COa1x/yTbZXq7WQ/DDNxgD1FLMso0NVf/mp0Wsa6ims=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:34:29 2025 by rpki-client