Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
File: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (raw, json)
Hash identifier: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=
Subject key identifier: 00:53:01:44:89:55:6A:98:DA:69:CC:5D:8A:7C:14:1A:81:0E:83:30
Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial: 50EC1403AB22981B06B9B006C2FFA26DD623A51B
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
Signing time: Wed 19 Mar 2025 06:10:10 +0000
ROA not before: Wed 19 Mar 2025 06:05:10 +0000
ROA not after: Wed 18 Mar 2026 06:10:10 +0000
asID: 150537
IP address blocks: 103.81.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ec:14:03:ab:22:98:1b:06:b9:b0:06:c2:ff:a2:6d:d6:23:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Validity
Not Before: Mar 19 06:05:10 2025 GMT
Not After : Mar 18 06:10:10 2026 GMT
Subject: CN=0053014489556A98DA69CC5D8A7C141A810E8330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:72:0d:7a:07:5e:5a:7d:5b:22:95:36:50:
7c:de:ab:30:fc:cd:78:c0:78:26:8a:b1:4f:d1:78:
a5:4a:bf:77:66:23:fb:36:25:9c:c5:59:2c:36:d2:
cc:9f:9d:af:db:22:15:57:84:2d:b6:04:98:7e:52:
4a:85:6b:95:06:57:33:e2:66:8f:03:29:bc:9f:bd:
11:1e:d4:80:cd:cb:fe:df:d3:07:f7:15:fe:49:31:
2e:f7:cd:fe:3f:51:89:ae:f7:4b:48:ea:0e:3b:ff:
8e:24:96:78:2d:19:99:b7:a6:56:db:db:f8:fd:c5:
af:1c:04:e5:1b:a1:6a:a2:19:ce:b5:38:f0:c7:22:
f0:e8:44:73:8c:db:28:31:49:5d:10:1b:43:78:a8:
f4:6f:c2:15:db:6b:57:b3:45:a1:26:3d:30:51:99:
08:ab:ff:51:59:a5:5e:dd:30:91:ae:64:0c:8d:21:
08:c5:f2:ee:95:0a:fc:18:3a:e6:dd:76:c3:2f:92:
79:86:71:bc:87:20:7b:1e:4a:b3:e6:42:01:7c:da:
cf:38:e0:be:c8:ed:9a:c4:de:0e:bb:f0:f4:47:d9:
73:c3:28:fb:95:d0:55:5a:20:0b:ea:f9:22:c7:4f:
00:a6:c1:43:e8:85:56:36:c2:96:3e:a2:05:5a:eb:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:01:44:89:55:6A:98:DA:69:CC:5D:8A:7C:14:1A:81:0E:83:30
X509v3 Authority Key Identifier:
keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.81.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5d:e1:6c:e1:ab:e8:67:9e:b5:d6:39:9a:2e:22:01:6e:5e:
1e:8d:93:0e:75:c1:f3:ce:3b:8c:e9:5d:66:e9:c3:03:f6:49:
39:ed:4a:65:8a:54:dc:85:77:6f:b4:33:1d:b6:05:50:51:ea:
4d:91:3e:4a:ef:fb:34:0f:7f:b4:46:16:02:a6:61:03:96:96:
c0:cb:82:86:c0:c6:60:ea:d2:e6:5b:dc:07:f1:60:d0:34:8d:
01:59:4f:8b:d9:81:a0:57:44:a2:a5:6e:6f:0c:a2:08:ce:d6:
83:b4:1c:53:37:82:43:78:f4:05:a4:08:da:09:7a:aa:78:34:
ee:f9:d6:de:a5:4f:59:85:49:c2:64:58:44:d0:f2:ff:ba:39:
f4:b7:93:8d:5f:f3:a1:98:8b:60:ea:1d:a8:51:dd:ab:19:48:
67:c9:4e:d2:5a:56:3d:a0:a2:86:a0:ea:56:f6:96:da:9f:60:
14:04:1a:64:50:ee:d8:03:6a:20:c7:ff:7a:16:23:42:1f:5e:
9e:36:ea:fe:28:ad:36:cd:73:1f:e0:fb:46:72:d6:61:2b:b2:
03:6b:72:b1:cc:6c:2d:6d:a3:6a:1e:23:6e:1b:46:ee:28:96:
8e:32:b4:47:b7:97:80:4d:55:08:f2:61:75:e4:53:4e:45:81:
ae:0e:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:15 2025 by rpki-client