Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
File: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=
Subject key identifier: 48:2B:6B:22:DC:C7:89:F3:37:38:0A:CF:D0:4F:B6:80:B2:5F:58:6D
Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial: 42FE520AE0227AE3D9D7BA46A06BD5C1AC9E1487
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
Signing time: Mon 17 Mar 2025 10:00:01 +0000
ROA not before: Mon 17 Mar 2025 09:55:01 +0000
ROA not after: Mon 16 Mar 2026 10:00:01 +0000
asID: 149383
IP address blocks: 103.181.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:52:0a:e0:22:7a:e3:d9:d7:ba:46:a0:6b:d5:c1:ac:9e:14:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Validity
Not Before: Mar 17 09:55:01 2025 GMT
Not After : Mar 16 10:00:01 2026 GMT
Subject: CN=482B6B22DCC789F337380ACFD04FB680B25F586D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:ad:51:52:29:1e:f4:a7:94:93:54:1c:28:
c1:88:d3:32:77:fb:f4:09:1d:b3:0b:e9:7a:3d:0e:
12:af:1c:29:36:24:6c:91:fb:91:db:6b:01:74:c6:
93:17:37:60:03:9c:58:31:4e:ee:13:80:7c:9b:ac:
58:7d:1a:fb:41:ca:a2:f2:80:35:02:35:a6:16:fb:
0f:6c:82:68:80:88:0a:0d:2d:92:ec:7a:13:42:1c:
8c:a1:e5:23:b0:c1:3f:92:b4:f7:e4:c2:08:18:e1:
86:88:b2:34:f8:6c:7f:4e:f0:f1:ff:dc:6b:05:88:
06:75:e0:24:81:77:d5:42:a6:b2:25:10:24:a9:a0:
5f:3b:c5:c2:dd:a8:74:fd:e2:85:60:4f:45:3f:c1:
b4:73:a0:3f:78:d1:07:f7:1f:cd:a9:43:d0:78:da:
79:38:16:5c:2d:8f:d0:59:36:0a:b9:83:e4:59:05:
29:ff:58:ad:a8:5d:71:98:9d:31:0c:cc:51:74:60:
67:2f:8f:5b:2a:43:09:cb:0c:fb:f0:34:63:f6:61:
69:3a:60:7e:9d:69:37:f0:f8:43:37:7f:24:45:9e:
5b:6c:69:a3:4e:49:0b:b7:84:f2:b8:e6:ae:54:b6:
99:a6:0e:18:bf:05:60:26:47:ea:b0:6a:5e:26:b8:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:6B:22:DC:C7:89:F3:37:38:0A:CF:D0:4F:B6:80:B2:5F:58:6D
X509v3 Authority Key Identifier:
keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.139.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a2:d4:d3:27:45:67:be:0e:b0:65:fa:9e:11:61:f4:0a:4b:
1f:e2:b9:9c:2c:95:08:f3:3e:20:d2:3a:7c:56:50:1e:53:b7:
b4:eb:82:ea:e0:49:84:d4:fa:6c:6f:bf:b4:84:cd:ea:26:fb:
ed:cc:4a:f3:ff:70:18:c1:b0:e6:6d:53:ef:b0:de:fc:e6:1d:
3f:85:1e:b7:26:3c:68:1b:a7:01:ef:d1:82:a1:08:0e:36:f9:
2f:7c:02:94:67:d5:00:82:87:68:98:96:3e:38:38:21:70:18:
fa:00:83:18:4a:94:c1:4a:bc:d7:1c:62:a1:68:df:e6:e6:7a:
cb:87:23:e1:37:f3:b9:45:79:27:ad:7f:3d:44:54:78:94:50:
23:7c:37:4f:a2:37:6e:da:e4:bf:e0:63:c7:b9:9b:7e:5b:b1:
cd:c3:e4:57:d0:d6:5d:80:cb:9d:9b:07:11:be:c1:54:c8:e0:
d5:86:b3:7d:bb:35:3f:81:64:1b:49:a1:7c:c4:a6:dc:7c:61:
e0:d1:7c:69:cd:62:07:47:30:12:b5:40:6b:d8:d7:aa:46:7d:
88:87:66:1c:a3:f8:29:e4:bf:21:73:97:19:85:96:7b:ea:25:
52:f2:a6:1e:04:7d:1a:f2:ad:a5:df:eb:5e:28:44:40:44:04:
e2:0d:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:43:59 2025 by rpki-client