Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa
File: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (raw, json)
Hash identifier: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=
Subject key identifier: 09:CC:82:11:D1:09:AC:C9:A9:AD:FC:FB:D9:00:4F:2E:E4:E2:23:FD
Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial: 69A58B4DE855B6AC428CAD217D02F435A532B3AF
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa
Signing time: Wed 19 Mar 2025 10:00:03 +0000
ROA not before: Wed 19 Mar 2025 09:55:03 +0000
ROA not after: Wed 18 Mar 2026 10:00:03 +0000
asID: 135455
IP address blocks: 103.68.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a5:8b:4d:e8:55:b6:ac:42:8c:ad:21:7d:02:f4:35:a5:32:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Validity
Not Before: Mar 19 09:55:03 2025 GMT
Not After : Mar 18 10:00:03 2026 GMT
Subject: CN=09CC8211D109ACC9A9ADFCFBD9004F2EE4E223FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:2f:d4:f0:5d:6e:67:0c:7b:14:74:98:fb:
80:63:74:12:be:4e:86:40:5f:86:08:dc:97:aa:3a:
cb:91:03:31:36:48:0a:7d:9b:75:ce:4d:c0:32:8e:
65:04:1e:02:c9:d8:c2:74:65:f8:a3:91:62:73:e9:
5f:6b:42:ec:af:b6:56:c5:a1:32:9d:c2:76:a7:1d:
ed:09:f3:14:8b:c9:78:1a:35:4b:da:fe:93:1d:46:
63:ee:7c:cf:b4:18:48:7c:2b:b1:ed:8a:7b:00:e2:
eb:01:79:ab:ce:fd:a3:64:65:f0:7e:a2:35:fc:e2:
08:26:dc:9d:ca:8c:83:2e:32:9f:26:d8:13:40:de:
32:9b:cd:cc:98:0a:c5:e9:6b:ac:e8:18:a5:82:bd:
8e:41:3a:f4:1c:dd:26:78:19:06:58:75:0f:a0:92:
fd:0b:e0:1d:b3:b0:75:ce:66:5e:9e:93:e9:9f:36:
90:62:90:16:a6:37:a2:14:86:eb:5e:d1:33:25:95:
3e:f0:ee:27:f4:7d:31:bd:00:d2:4d:59:9e:53:74:
ca:bd:e1:e0:03:7e:e0:a1:1e:de:1e:63:5b:af:29:
35:56:0b:53:43:3c:3c:23:46:e2:7a:db:1c:b6:84:
49:ca:04:05:ea:85:71:83:2b:d9:05:45:e0:ff:e7:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:82:11:D1:09:AC:C9:A9:AD:FC:FB:D9:00:4F:2E:E4:E2:23:FD
X509v3 Authority Key Identifier:
keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/23
Signature Algorithm: sha256WithRSAEncryption
33:ed:40:89:5a:a3:90:35:17:9a:72:aa:ac:03:de:1d:ef:8e:
5f:dc:6b:2a:5f:6c:76:a9:4c:4f:95:e7:a9:89:46:d4:b3:ac:
6f:70:19:b4:ce:6c:58:f7:69:9a:7c:c8:4b:75:9e:41:c5:ab:
31:25:bc:2c:0a:6c:38:33:c1:ae:f3:a5:b0:c0:bb:1d:53:8f:
6b:10:3b:ef:0c:38:b4:c1:12:b0:42:52:5e:a2:ca:ef:0e:6e:
d9:51:fe:a6:2f:fe:1a:bd:51:3d:6f:fb:6e:ca:d2:f7:1f:5a:
2f:cb:d4:e4:81:2a:4a:87:38:18:ac:27:da:a0:36:01:b5:4e:
03:03:17:8f:6d:4a:eb:90:f8:55:ad:9a:0c:48:5a:e9:22:d5:
dd:d4:5a:9a:1c:4a:54:44:99:08:83:18:e3:94:8a:8b:ad:bb:
fa:d2:50:db:ab:f2:ca:3f:7f:9b:8a:ca:fa:2f:c6:37:8e:02:
79:54:8d:aa:d0:21:97:5a:14:9a:af:1a:f1:51:0d:20:6a:a3:
a8:d8:37:90:77:58:ab:93:c0:9b:30:79:7d:dc:e5:76:b5:41:
fe:24:73:c0:f9:ce:a9:63:07:d5:53:98:76:d8:00:2b:89:26:
5f:7f:64:04:2f:28:9e:1d:3a:4b:f4:63:f9:31:39:1c:66:11:
04:39:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:46 2025 by rpki-client