Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa
File: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=
Subject key identifier: F9:E9:7C:F4:BE:38:45:F6:84:4E:F7:E1:9C:91:EC:1C:52:99:6E:EC
Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Certificate serial: 40DB3C4E7BD0B8D07CD6B735AF407A4B7681BF52
Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa
Signing time: Mon 27 Jan 2025 10:00:01 +0000
ROA not before: Mon 27 Jan 2025 09:55:01 +0000
ROA not after: Mon 26 Jan 2026 10:00:01 +0000
asID: 137311
IP address blocks: 103.109.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:db:3c:4e:7b:d0:b8:d0:7c:d6:b7:35:af:40:7a:4b:76:81:bf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Validity
Not Before: Jan 27 09:55:01 2025 GMT
Not After : Jan 26 10:00:01 2026 GMT
Subject: CN=F9E97CF4BE3845F6844EF7E19C91EC1C52996EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:f6:ca:1c:98:f2:89:95:81:a0:9a:98:df:
74:28:ef:56:d7:6a:d3:8d:46:8b:b3:4a:33:46:49:
08:29:46:31:20:5d:9f:3a:e0:0a:c5:3b:aa:dc:9b:
48:92:08:18:d0:e3:e4:a7:16:41:3e:3e:38:98:ab:
b9:52:f5:08:b3:24:a4:ee:e0:8c:67:e9:f8:09:a8:
35:f7:f9:d2:c0:ad:b8:63:54:68:0b:2f:af:07:e3:
31:4a:64:2e:96:83:30:43:c2:86:6b:0a:c6:39:7e:
aa:2a:84:4b:44:aa:ac:45:de:bf:47:a2:28:06:ba:
2e:24:01:8a:17:cb:70:4e:68:3a:0d:4c:17:9e:a7:
95:3f:a3:17:34:28:97:c0:b8:08:1d:f9:db:c2:a4:
09:36:3b:4f:41:b5:e8:a2:7a:77:57:ab:86:92:d2:
5d:a0:7a:30:ae:4c:38:5f:2d:4d:4d:ba:c8:33:fa:
26:bb:cb:cb:ca:80:8a:cb:b6:4e:b4:a1:b4:da:f5:
ce:e9:f0:e0:05:86:c9:2d:b8:96:27:8f:02:27:3a:
8b:53:0f:b9:87:20:30:4b:84:41:e3:97:e6:9a:0e:
16:22:a7:93:a3:20:86:d2:a4:75:82:6b:fe:f8:16:
81:75:b8:4c:76:ab:5b:66:07:75:30:f3:6c:f9:ef:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:7C:F4:BE:38:45:F6:84:4E:F7:E1:9C:91:EC:1C:52:99:6E:EC
X509v3 Authority Key Identifier:
keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:73:74:e6:b1:94:f4:e9:9b:63:6b:fd:f6:c2:af:fd:a7:45:
b8:c2:f7:39:93:3c:a4:94:c7:2d:ff:fa:ec:2a:5e:d1:b1:00:
bb:e4:16:df:ee:0f:20:33:e5:bc:5a:2a:f3:4f:64:a7:50:ae:
23:9c:93:f6:c5:2e:14:21:fb:d6:42:51:3c:98:bc:f6:c9:ed:
6b:f6:6a:69:64:ca:98:9e:2d:3a:cd:2c:89:71:ad:50:94:bb:
f1:52:45:5c:ce:01:9b:f2:96:9e:62:36:19:bb:30:77:78:f0:
86:f5:d0:1e:30:06:5c:4a:a6:50:65:89:ec:d6:0b:48:9f:2c:
a6:f5:4e:cf:45:2e:ab:a2:95:83:d0:96:36:d8:f8:96:ce:b7:
b8:99:55:66:c5:f7:21:34:a2:24:b5:a2:e3:d3:a7:c7:13:c9:
3a:00:52:e3:13:d1:89:31:36:5c:3e:be:10:e3:98:2b:2f:5d:
4d:c3:37:3e:20:7c:55:bc:48:2e:11:d7:a5:e5:d8:4a:b9:79:
7e:4d:d1:d3:93:64:c1:a3:9b:2c:d9:12:c8:4e:fe:34:18:99:
bd:23:00:0d:f7:5b:db:8b:11:80:91:7c:dd:ed:d8:fe:c0:90:
f9:3b:2c:23:a1:2b:c4:e6:ea:72:c2:61:61:88:54:6d:9d:30:
c0:87:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:44 2025 by rpki-client