Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
File: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (raw, json)
Hash identifier: f8foxBjRj9x1k1B3bcZ/wP48pss2SGs4EMiDBO6U6II=
Subject key identifier: 83:85:CC:29:9D:E1:5C:F1:4D:F5:D2:CB:45:C8:E9:5F:BF:31:DD:D4
Certificate issuer: /CN=F503463BC571123F80B94A358280E0D0F9750C09
Certificate serial: 2D69DAF7DF51CF6082AD72FB0D99597E3CEF6881
Authority key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
Signing time: Sat 29 Mar 2025 10:02:21 +0000
ROA not before: Sat 29 Mar 2025 09:57:21 +0000
ROA not after: Sat 28 Mar 2026 10:02:21 +0000
asID: 142352
IP address blocks: 103.169.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:69:da:f7:df:51:cf:60:82:ad:72:fb:0d:99:59:7e:3c:ef:68:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F503463BC571123F80B94A358280E0D0F9750C09
Validity
Not Before: Mar 29 09:57:21 2025 GMT
Not After : Mar 28 10:02:21 2026 GMT
Subject: CN=8385CC299DE15CF14DF5D2CB45C8E95FBF31DDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:93:a0:c9:06:df:56:f4:98:5d:ed:3d:ab:
bc:0b:9d:41:d4:b5:0b:fc:3f:ac:75:c4:e0:67:01:
ae:26:3d:bd:22:59:19:2d:20:46:54:0e:6c:6e:a8:
c0:d5:f1:58:16:85:99:7a:7c:89:48:29:dd:0f:02:
9b:90:18:e9:0a:76:bb:7c:68:16:7b:40:97:1b:eb:
b8:04:53:1f:0f:22:86:cb:9e:b2:54:66:a9:91:f2:
13:f3:b6:d0:5f:00:16:ee:cc:ec:11:20:0e:fb:dd:
0b:f2:bd:88:70:8a:74:a1:5e:9c:96:f2:ff:1e:34:
1c:9d:8a:c5:ed:04:55:bf:33:14:99:24:07:64:fa:
62:57:1f:42:bb:94:f4:d8:23:3b:4f:29:c8:38:86:
48:c6:64:d5:a0:71:2a:f6:80:20:cd:7a:c2:a5:9e:
8c:e2:3a:cd:ae:90:c9:23:60:1f:f4:99:c8:47:1d:
d2:08:45:b5:ee:93:57:cf:96:b8:ee:06:dd:ed:24:
74:9d:74:2a:e5:86:26:21:60:be:e5:66:ec:fb:10:
57:45:5d:c6:6e:b8:13:a6:04:9b:5a:4f:b0:60:f7:
59:29:47:00:ac:4a:7d:63:3c:55:b6:88:fc:5c:00:
3e:c5:19:45:4f:05:b7:5c:ae:36:f0:f6:90:44:4f:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:CC:29:9D:E1:5C:F1:4D:F5:D2:CB:45:C8:E9:5F:BF:31:DD:D4
X509v3 Authority Key Identifier:
keyid:F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.186.0/23
Signature Algorithm: sha256WithRSAEncryption
70:2f:37:75:17:70:e8:12:f6:ed:2f:92:5f:5e:c6:cf:42:61:
0c:81:21:c3:ff:b0:af:40:7a:70:b6:4a:e1:19:af:aa:d0:5b:
c5:c8:a5:7a:ed:8c:98:91:47:73:9f:2e:47:38:d7:c2:9d:c1:
5d:c6:a7:24:5f:b2:fd:35:54:f3:5f:35:98:f2:58:da:ec:5a:
43:12:fc:e1:d0:5f:b8:ef:30:8d:da:3b:4a:bc:ec:f5:07:ec:
1d:cd:54:84:1d:e3:86:18:03:9f:c2:72:99:44:e2:37:44:23:
ec:38:e1:31:e2:8a:8b:41:39:ed:5b:f4:19:3a:85:fc:c4:7c:
1e:47:0a:71:a6:da:bb:d8:36:cc:51:0d:da:4a:a6:b1:7d:12:
08:e9:dd:8f:49:f5:e6:4b:f5:c2:6a:cd:de:27:d7:a7:cb:ce:
3e:28:f2:30:42:b8:bd:70:87:8d:89:05:72:3c:bf:4a:19:54:
f8:c3:9f:96:08:23:a7:a1:09:a8:2c:43:5d:1b:80:b9:d1:9d:
1b:ab:90:e8:fa:ff:dc:59:2a:f2:24:e2:46:c2:dd:f1:41:88:
dc:35:3c:ce:32:06:10:48:b3:ee:b8:7f:0b:43:26:77:f2:86:
92:bd:ad:26:74:a4:32:54:61:cd:96:7a:9f:d8:34:9c:11:40:
27:a7:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:18 2025 by rpki-client