Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa
File: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=
Subject key identifier: 3B:F4:4A:D9:82:69:E3:61:07:12:40:74:E8:36:89:E8:1F:F6:B0:6B
Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial: 189EAB03F9EB8589F39CAB4F41DD378690CAC2FB
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa
Signing time: Wed 19 Mar 2025 10:00:03 +0000
ROA not before: Wed 19 Mar 2025 09:55:03 +0000
ROA not after: Wed 18 Mar 2026 10:00:03 +0000
asID: 135455
IP address blocks: 103.68.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9e:ab:03:f9:eb:85:89:f3:9c:ab:4f:41:dd:37:86:90:ca:c2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Validity
Not Before: Mar 19 09:55:03 2025 GMT
Not After : Mar 18 10:00:03 2026 GMT
Subject: CN=3BF44AD98269E36107124074E83689E81FF6B06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:fb:d8:5b:e3:77:7f:4a:89:57:e5:81:26:
d6:ab:da:9c:b6:61:61:22:44:f0:8a:3b:9f:9d:17:
95:a4:23:40:ad:45:3c:3b:f1:58:a5:30:1a:a6:d2:
5d:e7:68:c5:a6:fa:1b:cd:e3:35:40:b4:e3:c0:5e:
be:83:d2:fc:30:11:38:87:25:11:e9:0a:08:2a:53:
bf:95:50:25:82:9e:82:6e:0a:7e:15:88:6e:f7:dd:
c4:c4:f3:2c:73:44:54:9b:3a:15:7e:c5:6e:5a:3a:
1b:04:80:63:88:f5:8f:1d:0d:bf:91:f9:6a:f6:a1:
85:30:b3:42:da:c3:eb:55:3e:ad:a5:c6:d4:2b:7c:
3a:e3:a9:80:87:24:75:79:4a:01:23:bf:86:7d:57:
3a:96:79:c5:ce:0e:89:62:1a:a2:54:d0:78:88:af:
15:2a:9e:4d:6c:52:81:a6:e5:42:07:69:88:93:09:
b3:74:7c:9a:27:75:a5:33:2f:b8:f8:7f:ea:c6:94:
aa:8b:86:8d:9a:d8:d5:96:31:66:6d:4f:ce:76:f4:
52:00:dd:70:d3:9e:0b:2e:df:4c:e7:62:08:c4:72:
43:a7:bd:60:c1:6a:b7:dc:ef:75:e4:8a:56:f3:56:
d4:a3:d2:ae:dc:0f:19:fd:e5:74:66:75:b8:ee:f0:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:4A:D9:82:69:E3:61:07:12:40:74:E8:36:89:E8:1F:F6:B0:6B
X509v3 Authority Key Identifier:
keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f6:9c:a6:40:15:5a:57:eb:4c:52:f6:8a:fd:b1:a5:8b:83:
a9:f0:81:35:02:8e:03:c0:a8:38:48:cc:09:02:0e:5e:73:7d:
c7:bf:74:87:76:ef:e3:9a:e6:23:72:68:43:5f:eb:df:b5:eb:
a9:63:6e:98:4f:c0:df:9b:83:75:8e:ea:27:46:d4:af:0d:1d:
b3:06:b4:ab:23:e0:38:f4:4f:1a:75:d0:eb:28:85:70:9a:82:
de:12:56:e8:4e:43:ff:e2:9a:b1:92:84:fe:57:02:0a:de:40:
04:1a:2c:d1:39:37:dd:bd:12:51:19:9c:61:af:c6:bf:94:2a:
b8:21:11:26:0a:61:99:1a:52:d9:8c:e8:9b:c6:9d:73:af:4c:
df:5c:75:5a:74:55:1d:30:03:dd:0f:f9:13:bd:47:c6:ec:d5:
77:be:55:ba:f1:13:45:f2:fc:f0:50:40:2d:09:ed:be:ff:e7:
7f:4e:42:10:3f:93:cc:b7:c7:68:94:4b:2d:8c:69:b2:07:c9:
34:43:a1:e1:7b:a6:65:38:f0:15:fe:c6:44:f7:ff:49:f9:69:
69:19:ab:1a:32:0c:3a:a0:db:fc:eb:7b:5f:c7:b6:08:af:73:
1e:71:a6:90:22:63:79:c8:d2:c5:34:d0:3c:b4:a8:c5:d6:f2:
30:e3:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:43 2025 by rpki-client