Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31322e302f32342d3234203d3e20313432333238.roa
File: 3130332e3136392e31322e302f32342d3234203d3e20313432333238.roa (raw, json)
Hash identifier: cnlufvkbupHZhAkfyZghIlzGkJyXNreiKAN5ULm1GfM=
Subject key identifier: 53:0C:D9:41:FE:D5:84:A0:5D:89:F2:B0:7C:02:29:1A:C4:7C:98:2F
Certificate issuer: /CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Certificate serial: 48D7EA2281D598EF9C4BD32B684DE7DA6F187297
Authority key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31322e302f32342d3234203d3e20313432333238.roa
Signing time: Fri 21 Mar 2025 05:02:52 +0000
ROA not before: Fri 21 Mar 2025 04:57:52 +0000
ROA not after: Fri 20 Mar 2026 05:02:52 +0000
asID: 142328
IP address blocks: 103.169.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d7:ea:22:81:d5:98:ef:9c:4b:d3:2b:68:4d:e7:da:6f:18:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Validity
Not Before: Mar 21 04:57:52 2025 GMT
Not After : Mar 20 05:02:52 2026 GMT
Subject: CN=530CD941FED584A05D89F2B07C02291AC47C982F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:ff:d6:0a:43:f5:ff:96:61:33:50:13:66:
da:f2:2b:a3:84:9c:3d:ad:12:8e:21:cf:c5:0d:c9:
0a:17:23:99:a1:b7:0e:00:3f:0d:43:bf:e4:5f:bc:
f4:b0:c9:eb:83:27:23:f1:c4:13:59:8d:62:1f:13:
a7:e8:79:70:0f:38:e4:1a:0a:c7:6a:dc:c5:d4:50:
b5:93:ca:9b:ca:4e:62:a5:4c:45:da:d6:b7:13:0b:
90:fb:f0:38:74:ba:69:ec:27:2a:38:4b:35:51:22:
27:65:6b:b0:20:6c:b9:45:39:30:f6:2e:82:67:88:
9f:83:bb:a7:a4:ee:ed:67:18:69:1a:35:1f:9d:bc:
cd:2d:ca:29:a7:d6:70:20:a8:d4:ce:01:8f:99:24:
d7:a5:10:f9:d5:d5:eb:f2:7e:a0:9f:90:ff:22:7b:
cd:eb:e9:1d:68:f5:2c:58:a9:be:f6:59:68:01:d5:
ed:ee:5c:ab:ac:fc:1b:62:db:ba:75:10:02:53:2b:
df:e2:84:71:12:6b:a5:1a:5d:10:bd:5c:62:d3:45:
6d:47:18:36:d1:f9:ce:c5:ec:96:0c:59:d5:6f:57:
05:c6:ff:ad:ba:dc:6b:6a:f9:79:ee:ee:9a:5c:63:
c7:02:d1:06:0e:76:08:46:0f:44:2b:0f:ea:9b:4c:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:D9:41:FE:D5:84:A0:5D:89:F2:B0:7C:02:29:1A:C4:7C:98:2F
X509v3 Authority Key Identifier:
keyid:50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31322e302f32342d3234203d3e20313432333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.12.0/24
Signature Algorithm: sha256WithRSAEncryption
24:71:52:24:46:a5:9c:05:30:c3:ee:41:81:2d:42:04:a9:23:
be:ef:a8:eb:09:b2:95:37:6b:7b:c4:54:d3:26:d1:f1:2a:9e:
a8:96:b8:e0:37:b1:cb:d8:db:c8:cd:fb:59:c1:4e:a3:3d:ad:
de:8e:70:d2:a0:2f:3c:df:37:cb:85:43:3d:14:01:a9:1e:03:
54:fb:0b:c0:f3:ea:28:9e:3b:5f:87:51:ff:46:f1:de:67:b2:
60:68:cd:e6:e7:47:14:da:8c:0f:a2:18:1c:43:bf:e6:26:f4:
89:f9:90:80:ba:bd:b8:51:e9:81:f3:56:9c:65:04:76:39:82:
74:3a:59:fd:85:cb:91:4d:b6:31:5c:df:32:f7:4c:25:68:64:
79:4b:c7:c7:bc:2e:3b:cf:ec:32:f4:fe:64:0a:ec:f2:b7:2e:
71:51:77:f2:03:a3:8a:35:39:ec:b2:cd:59:8d:c2:42:aa:20:
9d:3d:01:93:83:35:6a:38:c3:8f:4a:27:28:ec:fc:d3:eb:80:
fd:ff:db:29:81:b4:88:50:e6:3d:df:b7:38:a1:a7:cb:ee:8c:
ab:85:16:80:c6:62:d0:72:b5:1a:4b:44:c0:e3:15:6e:5a:e8:
48:91:98:34:4c:6f:2a:25:f9:83:4e:44:59:ef:b1:3b:81:4b:
45:11:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:07 2025 by rpki-client