Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32342d3234203d3e20313530353339.roa
File: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (raw, json)
Hash identifier: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=
Subject key identifier: 0B:E6:93:41:A9:D8:1D:C5:38:43:8E:5D:08:DA:AC:65:75:89:EC:A6
Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial: 3EA2F88A0501A202295212816637D04FA2A5709B
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32342d3234203d3e20313530353339.roa
Signing time: Thu 02 Jan 2025 06:00:02 +0000
ROA not before: Thu 02 Jan 2025 05:55:02 +0000
ROA not after: Thu 01 Jan 2026 06:00:02 +0000
asID: 150539
IP address blocks: 103.75.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a2:f8:8a:05:01:a2:02:29:52:12:81:66:37:d0:4f:a2:a5:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Validity
Not Before: Jan 2 05:55:02 2025 GMT
Not After : Jan 1 06:00:02 2026 GMT
Subject: CN=0BE69341A9D81DC538438E5D08DAAC657589ECA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:a5:80:cd:0d:7c:46:6f:82:15:c0:af:a2:
19:98:c6:d1:2c:96:21:5a:25:60:8f:fd:98:4b:23:
c5:0f:a7:fe:48:c7:9c:a8:e9:b4:a7:c3:dd:a0:70:
4f:18:d7:ef:dc:3c:56:11:af:3d:74:bf:0b:ca:4a:
c9:8c:3d:55:33:50:29:45:7a:de:2b:99:97:07:c3:
5a:75:b8:41:03:ec:99:b3:d7:53:6a:f7:cf:01:35:
b7:76:85:e8:af:c9:2d:ee:bf:fe:54:f4:e4:fb:c2:
23:26:37:ae:b3:99:cb:84:da:2c:fa:59:bc:f3:2f:
d7:4a:d4:a9:fb:5b:22:7b:7e:0d:44:24:9c:ee:7e:
59:e4:d5:16:bd:ba:5f:aa:a6:0c:76:d7:29:e6:d3:
d2:c5:f6:f6:4e:8b:fd:ec:a2:c7:59:20:22:08:aa:
a2:23:b0:56:40:90:e8:1a:7e:e9:b5:28:a2:e5:48:
a3:9e:cf:3c:e5:80:f4:78:9a:f0:73:36:62:b1:6d:
d6:d0:eb:30:dc:7f:68:c7:e5:c0:02:3b:6f:76:0d:
40:8a:50:dd:51:f4:ea:97:70:ba:6e:db:60:83:9b:
b4:61:18:15:3c:11:6f:89:43:6a:bf:20:85:0e:ee:
50:0c:ab:3a:be:53:35:f2:55:e3:68:4f:24:5f:e2:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:93:41:A9:D8:1D:C5:38:43:8E:5D:08:DA:AC:65:75:89:EC:A6
X509v3 Authority Key Identifier:
keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36322e302f32342d3234203d3e20313530353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ee:2e:8a:ae:de:3e:d8:b6:85:67:6a:aa:bc:4c:64:37:de:
35:ca:71:32:ed:f9:06:a0:b7:62:35:dd:2c:d9:05:04:7b:f2:
6f:7d:26:ee:3f:95:18:75:f4:75:d6:46:58:2a:6f:7f:58:c3:
fc:dc:21:f3:5d:b9:05:25:69:6a:de:e9:5c:f5:8b:e2:0c:8e:
44:2b:23:cd:82:68:5e:0b:c0:c9:c8:ae:4a:c7:12:93:f5:ed:
3b:ef:6c:36:db:a8:bf:ce:02:39:2a:9a:ba:3e:82:d1:ce:15:
81:73:f0:be:ea:90:f2:ba:b5:bc:98:6b:f9:65:5b:d7:d6:0c:
ef:be:b5:e8:fa:01:4e:10:11:16:4d:4e:31:74:03:b6:07:a3:
94:10:b2:1e:ae:e2:2a:29:99:75:5d:da:f5:38:35:dd:41:b7:
ff:c8:20:4d:cc:ca:ef:56:af:03:3f:47:e6:6b:f6:d6:95:20:
f1:be:82:9f:01:32:04:fe:ce:12:b3:97:46:ea:69:ad:26:e2:
f5:ac:e9:c3:63:9d:38:24:34:04:e8:2f:93:a7:8d:94:88:93:
4c:3b:e5:06:f9:48:9e:8f:8a:29:1c:bf:dc:a0:ac:ef:5d:6e:
f6:81:4c:ac:77:c5:f0:56:a3:f1:e8:fa:cd:33:72:d7:80:3f:
27:28:db:cb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPqL4igUBogIpUhKBZjfQT6KlcJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2
RTM0MjlGQTAeFw0yNTAxMDIwNTU1MDJaFw0yNjAxMDEwNjAwMDJaMDMxMTAvBgNV
BAMTKDBCRTY5MzQxQTlEODFEQzUzODQzOEU1RDA4REFBQzY1NzU4OUVDQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DKWAzQ18Rm+CFcCvohmYxtEs
liFaJWCP/ZhLI8UPp/5Ix5yo6bSnw92gcE8Y1+/cPFYRrz10vwvKSsmMPVUzUClF
et4rmZcHw1p1uEED7Jmz11Nq988BNbd2heivyS3uv/5U9OT7wiMmN66zmcuE2iz6
WbzzL9dK1Kn7WyJ7fg1EJJzuflnk1Ra9ul+qpgx21ynm09LF9vZOi/3sosdZICII
qqIjsFZAkOgafum1KKLlSKOezzzlgPR4mvBzNmKxbdbQ6zDcf2jH5cACO292DUCK
UN1R9OqXcLpu22CDm7RhGBU8EW+JQ2q/IIUO7lAMqzq+UzXyVeNoTyRf4kz5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUC+aTQanYHcU4Q45dCNqsZXWJ7KYwHwYDVR0j
BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3
MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0
MjlGQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMzLTM3ZjUtNDY2Ny1h
NDMwLTZmYTExMWQzNDNhYS8wLzMxMzAzMzJlMzczNTJlMzYzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdLPjANBgkqhkiG
9w0BAQsFAAOCAQEAHO4uiq7ePti2hWdqqrxMZDfeNcpxMu35BqC3YjXdLNkFBHvy
b30m7j+VGHX0ddZGWCpvf1jD/Nwh8125BSVpat7pXPWL4gyORCsjzYJoXgvAyciu
SscSk/XtO+9sNtuov84COSqauj6C0c4VgXPwvuqQ8rq1vJhr+WVb19YM77616PoB
ThARFk1OMXQDtgejlBCyHq7iKimZdV3a9Tg13UG3/8ggTczK71avAz9H5mv21pUg
8b6CnwEyBP7OErOXRupprSbi9azpw2OdOCQ0BOgvk6eNlIiTTDvlBvlIno+KKRy/
3KCs711u9oFMrHfF8Faj8ej6zTNy14A/Jyjbyw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:24 2025 by rpki-client