Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
File: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=
Subject key identifier: 0F:5A:22:9C:F7:F7:55:8B:C0:14:A4:B8:6C:AD:8C:DF:FD:B6:FB:6C
Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial: 16868CB2EA716D4D58B2C26D485F2812E7F122C9
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
Signing time: Wed 19 Mar 2025 10:00:03 +0000
ROA not before: Wed 19 Mar 2025 09:55:03 +0000
ROA not after: Wed 18 Mar 2026 10:00:03 +0000
asID: 135455
IP address blocks: 103.68.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:8c:b2:ea:71:6d:4d:58:b2:c2:6d:48:5f:28:12:e7:f1:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Validity
Not Before: Mar 19 09:55:03 2025 GMT
Not After : Mar 18 10:00:03 2026 GMT
Subject: CN=0F5A229CF7F7558BC014A4B86CAD8CDFFDB6FB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:78:53:07:e8:c4:3a:9a:20:da:e4:41:1d:
69:23:cd:8e:59:72:ce:cf:79:36:95:c7:33:9f:04:
6b:51:4f:e8:6e:ac:1c:ef:07:34:44:9c:10:51:32:
4f:f9:00:8c:8c:6d:88:b4:51:3b:7b:53:fb:8e:a9:
c3:98:ed:f4:10:33:28:cb:42:75:37:0b:d5:8a:f2:
4b:98:cd:5d:9e:f7:81:8c:18:b8:38:b0:a4:93:90:
8d:da:ed:f9:dd:43:4d:9f:f9:42:2a:fd:02:5d:d8:
4d:47:70:c4:c2:29:78:5b:d7:17:f3:c7:50:f6:94:
b9:15:0d:96:2f:8e:a5:30:83:c7:1b:3d:ec:94:81:
ce:d7:65:29:91:93:dc:83:7a:f8:43:85:80:f6:eb:
72:1e:ae:a3:16:0f:e4:c2:56:96:5c:dc:5a:53:d3:
e8:51:2c:d5:82:19:46:e7:26:e7:2c:a0:99:33:7e:
d6:e3:48:a4:5a:5a:e5:9d:55:07:67:0f:57:c0:22:
3a:2b:cb:d6:46:c6:b4:08:05:3d:06:5e:13:c3:3b:
39:a0:9f:bf:08:df:70:8f:57:15:68:dd:79:96:87:
5f:05:91:f0:8d:df:d7:69:77:36:3d:0e:77:22:f6:
00:7a:9c:30:87:e3:c1:6f:ea:1a:92:f9:e2:a0:53:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:22:9C:F7:F7:55:8B:C0:14:A4:B8:6C:AD:8C:DF:FD:B6:FB:6C
X509v3 Authority Key Identifier:
keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:da:e7:74:60:d0:ac:76:00:75:6a:ba:81:4e:ec:c7:c4:37:
d9:ea:c0:00:14:e9:f1:ac:fa:d6:c7:0f:37:e1:a3:ed:10:91:
4c:55:83:db:ce:ee:14:f0:5f:fb:47:75:57:f5:54:2e:79:49:
02:65:8c:a1:cc:21:5a:90:68:55:d8:f7:4e:f9:47:ca:f5:69:
83:6a:6a:94:58:d2:4d:9d:0a:6d:7b:db:59:1e:e7:65:07:1c:
39:31:df:68:f3:86:29:7e:98:fe:69:d6:8b:ec:f9:30:03:8e:
c2:1c:f0:cd:f3:0b:b4:ee:69:b0:38:97:7a:c0:00:0d:f8:bb:
45:c1:19:92:e4:bb:32:b6:b8:81:aa:09:a5:d0:14:5b:59:d0:
f5:8d:51:eb:f9:2f:7d:52:a6:90:b8:4d:9b:21:ca:ba:e0:22:
a9:e7:1c:19:2b:b8:e5:c9:39:c5:f9:27:49:43:59:72:17:b4:
08:18:e7:5d:de:eb:43:61:a0:f2:71:c5:b3:ad:fd:a9:f2:40:
d5:cf:38:aa:d6:62:db:99:0c:05:f3:23:fb:03:e3:b0:91:dd:
da:58:90:95:20:a8:f0:de:55:09:50:ec:3f:93:cd:6b:81:5e:
b5:21:62:1d:82:5f:44:9f:e0:c3:74:84:0e:ed:01:01:91:09:
59:bd:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:45 2025 by rpki-client