Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa
File: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (raw, json)
Hash identifier: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=
Subject key identifier: B0:9E:C1:8D:A4:2D:4D:2A:C0:75:B1:12:64:7C:50:D5:E0:11:34:4B
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 57E0542AF068A807B7A837621DD723B3304A42F7
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa
Signing time: Thu 13 Mar 2025 11:00:00 +0000
ROA not before: Thu 13 Mar 2025 10:55:00 +0000
ROA not after: Thu 12 Mar 2026 11:00:00 +0000
asID: 149744
IP address blocks: 103.187.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e0:54:2a:f0:68:a8:07:b7:a8:37:62:1d:d7:23:b3:30:4a:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Mar 13 10:55:00 2025 GMT
Not After : Mar 12 11:00:00 2026 GMT
Subject: CN=B09EC18DA42D4D2AC075B112647C50D5E011344B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:d5:2e:5d:78:70:de:f0:be:70:fc:9c:d8:
40:a2:71:dd:35:e8:ea:30:6d:ee:fe:f0:12:ca:72:
c6:cf:4c:4c:ab:2c:e7:c5:5c:1d:47:42:b1:68:3a:
49:4d:db:ae:a4:c2:a2:23:79:d2:e7:26:ba:4d:9e:
4e:11:81:9e:af:cb:9c:70:6a:73:1a:8a:32:be:79:
54:24:85:02:8a:9e:4e:f7:dc:be:90:cd:04:76:c8:
99:d9:20:85:5a:6c:fa:87:59:9a:ea:ca:12:a4:26:
d5:e8:b2:5a:f1:66:3a:bb:c1:7a:b9:57:0f:29:f0:
38:2e:f7:55:f2:71:b1:38:77:4b:a8:46:74:84:6b:
58:57:8a:a6:b1:d6:99:9a:1e:31:60:e9:f0:be:68:
f6:6d:11:68:ee:a1:5b:78:e5:5c:e8:12:57:49:1a:
b3:42:fe:be:9d:c4:5b:18:1d:9f:3c:a1:44:f8:d4:
02:14:b9:db:50:0e:77:6c:f6:a1:54:e9:06:62:cb:
77:11:ed:0d:af:0e:ff:0c:5a:b1:f3:66:e3:3f:eb:
64:87:5c:33:b0:e6:f9:f3:12:f2:ad:0e:de:8f:0c:
06:8a:a4:cc:97:a9:f5:4f:ce:b5:be:c6:0b:a3:43:
a3:7e:d0:eb:eb:36:c5:98:73:68:fb:f7:45:5d:60:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:C1:8D:A4:2D:4D:2A:C0:75:B1:12:64:7C:50:D5:E0:11:34:4B
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:2a:d0:3e:a3:19:c2:dd:f1:47:42:0b:2a:3c:60:6e:b2:
24:77:91:a7:a1:86:03:dc:9b:6d:f2:cc:e5:03:15:27:26:ae:
98:c5:e2:81:cd:39:75:7a:af:4d:9f:78:e9:65:ae:32:8a:08:
8d:18:69:e6:b0:c9:22:e4:79:98:42:8b:a9:c7:e8:72:60:9e:
22:f8:cc:82:58:c8:3d:8f:24:d8:43:45:17:8f:d1:4b:1e:ec:
64:52:f6:63:34:14:c6:9b:f5:3f:e6:df:4b:59:85:43:42:c1:
7f:8b:b2:85:09:13:7c:2f:bf:24:0a:7b:c4:31:01:7b:39:92:
4f:0d:a9:88:50:b3:7d:b6:fc:a9:2d:5b:1b:83:f7:02:73:72:
da:8c:29:7e:73:27:9d:d8:4c:38:ac:d1:57:6d:cd:f1:34:bc:
2c:37:d7:24:68:1e:3d:72:da:7f:2b:b0:28:42:0c:80:2c:39:
80:e6:45:b8:b7:19:94:9e:c2:78:77:84:b1:cd:b8:c1:3b:7e:
ed:dc:9c:0d:83:2d:f2:b9:4a:a8:44:9d:3b:e0:b8:ee:cb:1e:
85:ce:19:2a:aa:01:fe:64:3e:f4:b7:58:d3:5e:b5:bd:60:82:
a2:a3:92:a6:ef:1f:a0:b1:e4:1f:32:d5:91:2c:7b:38:42:97:
e0:ef:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:39 2025 by rpki-client