Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
File: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (raw, json)
Hash identifier: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=
Subject key identifier: BC:82:FD:52:21:7C:F0:F0:9F:28:D3:44:A3:D0:22:DB:33:D8:C4:8B
Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Certificate serial: 38939C0BA853FBFF2D09C7A5DEB3A7FFF5EEF39B
Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
Signing time: Tue 11 Mar 2025 01:54:32 +0000
ROA not before: Tue 11 Mar 2025 01:49:32 +0000
ROA not after: Tue 10 Mar 2026 01:54:32 +0000
asID: 63508
IP address blocks: 103.90.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:93:9c:0b:a8:53:fb:ff:2d:09:c7:a5:de:b3:a7:ff:f5:ee:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Validity
Not Before: Mar 11 01:49:32 2025 GMT
Not After : Mar 10 01:54:32 2026 GMT
Subject: CN=BC82FD52217CF0F09F28D344A3D022DB33D8C48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:40:7e:69:24:55:c9:1b:95:b7:31:c1:c9:
74:5f:2d:a0:25:78:c7:72:17:4a:41:74:d7:5d:7b:
86:48:76:66:e1:d4:fd:2a:c8:c6:85:c4:aa:df:b4:
2a:e7:0b:15:76:ec:a3:55:12:d4:b6:f6:72:b8:c9:
1b:4b:87:78:b5:a0:86:7f:5c:56:0a:4f:6a:62:5e:
1f:28:be:5f:b5:bb:f8:98:aa:b6:17:6c:36:ec:97:
54:8d:e6:c1:96:84:b8:61:38:ae:36:bd:1f:97:26:
87:65:91:d2:98:31:94:41:26:ad:1a:ed:46:4b:03:
0e:b4:94:0f:d1:6b:35:88:44:34:59:88:71:54:8b:
29:db:03:bb:92:69:da:4e:ba:3f:93:2c:43:1d:ff:
8e:27:76:02:03:a1:46:0f:99:3c:d9:1a:57:f2:21:
ff:2c:f3:9c:8b:d2:4f:73:45:8a:a3:7b:ce:52:ad:
b4:bd:e4:ae:19:cd:6a:e0:e9:5d:8c:50:13:7f:7e:
42:a8:a8:6a:34:27:2c:57:f2:2c:b5:ae:96:e8:5f:
8b:7f:03:7e:4f:ef:09:6d:46:01:42:6e:09:76:18:
ea:53:ca:d1:c9:f9:4b:63:3f:1b:da:43:e2:3a:c6:
ac:3f:33:ad:a1:90:86:38:c1:51:c8:f5:e2:7f:46:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:FD:52:21:7C:F0:F0:9F:28:D3:44:A3:D0:22:DB:33:D8:C4:8B
X509v3 Authority Key Identifier:
keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.62.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b7:64:63:b6:62:77:53:ff:8d:e9:dd:dd:67:dd:26:fd:4f:
10:93:de:f6:9a:4e:c9:a4:a8:ed:ef:b4:fd:47:6b:f1:e4:4f:
93:aa:7c:f1:f9:fa:73:0a:88:53:3c:61:ee:19:a3:ae:98:bc:
6d:68:df:62:06:85:cf:b0:39:22:7d:7b:fe:be:83:b1:4f:b0:
c3:e0:a6:38:a7:31:c7:cf:ff:e7:57:b0:7c:7b:ed:9a:28:8d:
e1:14:98:61:7c:12:be:7d:68:10:57:f9:12:b0:eb:64:74:92:
6e:5d:c9:ac:ed:64:85:77:b0:c3:bb:e7:c2:cf:cf:40:dd:e0:
19:5e:95:4d:05:08:a0:2a:76:d3:5f:68:b9:f4:c5:e6:96:89:
77:2e:06:53:a6:8a:b3:a4:87:cb:e1:0a:8b:00:c2:c4:bb:98:
30:b5:05:39:db:5b:db:16:ca:5b:c7:0c:12:aa:ce:70:84:d1:
9d:b7:d5:9a:71:3c:2c:4f:4c:65:83:fc:22:6b:26:a6:fb:76:
06:50:35:4f:bb:d6:15:b6:55:42:65:8e:4d:08:96:2a:35:5b:
d6:d1:66:cd:bf:ac:fe:1d:a1:0f:89:e6:67:ff:54:bf:ff:73:
78:7d:f6:52:72:b5:06:ef:06:ef:bc:d5:f0:43:0c:88:e8:c3:
72:d0:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:07 2025 by rpki-client