Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa
File: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (raw, json)
Hash identifier: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=
Subject key identifier: 42:F0:00:BB:C2:6C:A6:89:74:30:C1:41:C9:A4:75:C0:52:48:36:BC
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 1CD492B6C408E196CAA6C39A26C490821D57B311
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa
Signing time: Tue 04 Mar 2025 06:00:00 +0000
ROA not before: Tue 04 Mar 2025 05:55:00 +0000
ROA not after: Tue 03 Mar 2026 06:00:00 +0000
asID: 138086
IP address blocks: 103.90.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d4:92:b6:c4:08:e1:96:ca:a6:c3:9a:26:c4:90:82:1d:57:b3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Mar 4 05:55:00 2025 GMT
Not After : Mar 3 06:00:00 2026 GMT
Subject: CN=42F000BBC26CA6897430C141C9A475C0524836BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:26:b9:49:7e:50:30:2e:8c:b8:e1:f4:a2:
88:ff:14:f8:d4:40:f7:05:cf:a1:5e:b0:e6:57:ea:
11:82:63:09:a2:29:a7:c8:20:66:77:d0:2d:ed:23:
96:a6:c5:fa:1e:81:33:66:96:83:18:62:6c:c9:95:
70:de:91:93:ea:d2:23:d1:ea:7b:96:e5:bc:5f:e1:
a5:07:62:8f:41:9b:f3:bc:0d:37:45:1f:b6:7b:61:
68:7c:15:84:71:18:47:75:bb:8e:be:57:08:b3:c9:
27:67:73:7c:0b:67:2d:f1:a1:6f:50:ee:e2:36:4a:
31:60:39:36:f9:a0:ff:13:20:48:7e:14:cd:ef:0f:
c6:40:73:ba:81:32:a6:0c:6d:fd:79:92:f9:9d:1f:
1c:e2:25:b2:e7:ca:4a:22:43:38:9f:e7:5e:90:ea:
84:12:7e:3f:df:a4:06:73:62:29:4f:36:bb:90:b0:
d9:ec:fb:bd:46:ea:e7:a1:75:ff:0c:1f:0f:78:da:
91:91:ac:82:0a:d7:fd:69:76:9c:22:70:dc:f7:35:
b2:d2:fa:90:69:c7:e7:6b:ed:6b:6d:5e:12:61:2e:
a9:3e:c4:12:3f:49:b0:86:82:4f:b7:df:32:8e:9e:
43:a6:21:9f:53:4f:46:72:43:bb:88:fb:8a:de:ef:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:00:BB:C2:6C:A6:89:74:30:C1:41:C9:A4:75:C0:52:48:36:BC
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.255.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6c:12:d1:6f:bd:61:d9:e5:7b:73:11:a1:6e:2f:a8:5b:bc:
01:8d:05:9b:9a:ca:04:cd:bd:a4:88:70:ac:f5:44:6b:bb:6b:
a5:34:54:74:32:70:e9:e8:f7:52:fa:1a:ee:ca:af:ae:90:b3:
8b:07:73:c8:04:fe:ce:d6:2d:af:5d:da:4f:0a:c8:f7:51:86:
23:1a:38:a6:b0:e1:3c:8a:5d:e0:3b:21:0d:7f:0e:9f:37:7f:
3b:c2:c4:5b:2b:cf:35:48:a4:94:03:50:05:44:12:56:33:ce:
9f:3c:67:9e:74:f6:36:82:cb:a4:f8:1f:1a:04:ba:f9:4d:0a:
cc:43:07:6e:47:25:34:28:02:25:41:98:f0:8d:51:37:e4:14:
0b:1c:3b:8f:90:b3:f3:9f:48:57:62:e9:55:61:8b:38:eb:2e:
09:68:4e:91:ba:a2:8c:20:61:97:60:3b:ad:cc:d9:c0:5f:6a:
b5:e6:fe:0e:41:92:6b:c6:a7:75:bd:b0:4a:45:f6:f0:9e:fb:
7f:ca:9a:9c:8b:66:ff:11:e0:61:b4:29:4e:7b:e6:0e:5c:d7:
f8:f5:31:37:14:b2:0f:b7:d5:e7:61:d7:fb:da:aa:69:97:31:
f6:b0:32:78:dd:95:69:19:c1:2f:ec:a3:8c:e7:43:65:a5:32:
0f:36:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:03 2025 by rpki-client