Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32332d3234203d3e20313530353339.roa
File: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (raw, json)
Hash identifier: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=
Subject key identifier: 2F:E3:8E:8D:68:E0:9D:38:8D:75:66:46:77:5C:F4:6B:36:03:D5:4A
Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial: 15A87F01A70ED0F88911950CE24A5CDDD4194F68
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32332d3234203d3e20313530353339.roa
Signing time: Thu 02 Jan 2025 06:00:02 +0000
ROA not before: Thu 02 Jan 2025 05:55:02 +0000
ROA not after: Thu 01 Jan 2026 06:00:02 +0000
asID: 150539
IP address blocks: 103.75.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a8:7f:01:a7:0e:d0:f8:89:11:95:0c:e2:4a:5c:dd:d4:19:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Validity
Not Before: Jan 2 05:55:02 2025 GMT
Not After : Jan 1 06:00:02 2026 GMT
Subject: CN=2FE38E8D68E09D388D756646775CF46B3603D54A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:43:82:b6:19:68:3d:1f:b8:4a:1b:7b:33:
85:b9:66:97:e3:8c:78:bc:52:f1:31:b2:80:bc:a9:
7d:8f:e3:5b:64:43:b2:26:c6:3f:bf:3b:80:9d:61:
1a:33:d3:96:d4:37:c8:3b:64:41:02:54:0e:cd:ba:
78:c2:fb:3b:da:66:0e:af:d1:8b:db:b6:55:9f:2f:
32:3e:2e:14:d6:92:2a:8b:1a:59:aa:19:4a:76:81:
ff:23:bb:70:cd:b7:69:68:e6:18:15:78:14:a6:b2:
e9:5f:16:37:d7:20:8b:2d:e1:3e:f9:e2:37:a2:70:
b3:a3:6c:6f:18:2d:37:6d:de:6e:b4:6f:3e:95:e9:
51:65:ab:fe:5c:84:5d:4e:6d:c0:a4:42:3e:00:24:
28:7d:e8:86:3e:20:6f:72:df:f8:fa:c8:30:c7:2f:
78:19:c0:ab:cb:85:80:33:8a:a4:77:ed:bf:a9:9d:
df:30:5a:38:51:18:6f:7f:be:00:65:02:d0:37:83:
0c:0e:e7:1a:56:8c:fa:50:23:80:fe:b4:60:ec:27:
42:c0:44:97:40:bd:ad:53:81:c8:87:c1:b6:fd:18:
d0:cf:d5:2d:74:57:35:19:6c:0d:19:a3:c4:35:b5:
10:c6:ab:ed:fd:64:33:60:c3:85:c3:60:5a:fb:b4:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:8E:8D:68:E0:9D:38:8D:75:66:46:77:5C:F4:6B:36:03:D5:4A
X509v3 Authority Key Identifier:
keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32332d3234203d3e20313530353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.62.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b9:8d:3d:0d:15:f9:eb:42:77:b9:6f:70:81:80:89:e9:d4:
89:57:e5:4a:b4:84:42:24:e0:3a:e1:40:3e:2f:31:22:52:e6:
d6:a2:e2:22:80:e4:6a:4f:a8:a7:30:bb:2a:75:fd:25:00:5b:
31:08:7f:53:58:3a:dd:b9:c1:82:da:04:dd:69:e4:d5:7a:9d:
bd:3b:58:bd:6d:cf:9f:ae:9a:02:c1:cc:31:34:0d:38:47:4f:
04:91:b1:f2:10:16:ed:33:46:df:c7:5d:b2:77:91:06:ba:48:
9a:2b:6d:e3:d0:59:d8:52:32:08:8e:25:16:0f:4c:ea:64:b2:
ea:2d:52:72:91:c1:ff:5f:e7:30:81:b1:97:c5:5b:eb:db:80:
d5:c4:6b:90:87:a7:cb:31:37:fa:57:87:fd:14:fb:38:67:07:
e6:de:56:65:bb:df:f7:e6:6f:ec:bf:37:2b:4d:d8:d8:a5:f1:
6d:9d:af:a3:b3:3a:3f:d7:09:c8:9e:9d:84:a0:24:2b:03:07:
72:a6:dd:55:b4:ce:8b:e5:3a:1d:49:62:44:1a:a5:13:e9:ef:
f6:db:a5:38:3f:97:d1:56:81:9c:8f:c1:00:19:2b:c2:c1:a6:
a9:ca:a2:94:d8:95:82:34:41:0f:1f:21:91:d5:68:40:75:11:
19:65:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:21 2025 by rpki-client