Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
File: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (raw, json)
Hash identifier: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=
Subject key identifier: 4D:53:19:84:41:22:E6:8F:97:C1:EE:45:2F:D4:20:40:A6:DB:84:C5
Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial: 7D7A3A3E8956A4CBD53156AC9F76BEA5A06A153B
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
Signing time: Thu 02 Jan 2025 06:00:02 +0000
ROA not before: Thu 02 Jan 2025 05:55:02 +0000
ROA not after: Thu 01 Jan 2026 06:00:02 +0000
asID: 150539
IP address blocks: 103.75.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:3a:3e:89:56:a4:cb:d5:31:56:ac:9f:76:be:a5:a0:6a:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Validity
Not Before: Jan 2 05:55:02 2025 GMT
Not After : Jan 1 06:00:02 2026 GMT
Subject: CN=4D5319844122E68F97C1EE452FD42040A6DB84C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:86:1f:f2:64:f5:7b:28:58:06:95:91:61:
1f:5b:21:18:48:6f:ac:d2:5f:c3:71:34:f7:ad:85:
2b:d3:4e:7e:97:70:42:29:df:09:e3:9f:b5:de:4d:
a4:dd:de:c9:2d:50:95:ec:a0:d2:de:61:85:6a:d1:
ba:cf:37:e4:60:ec:08:1e:76:ad:59:ee:e2:19:75:
20:c1:08:c2:36:c3:e8:65:c6:30:0b:19:da:a3:b9:
ec:65:ea:c5:1f:c1:9f:d9:70:7c:d8:b1:a4:e8:b9:
09:c1:ce:66:c0:c4:ac:c9:63:9b:a4:3c:be:a4:bf:
f6:0d:99:55:9f:50:17:ef:7d:9f:0b:0b:eb:94:98:
f0:b5:70:f4:98:bf:e4:61:d5:7d:fe:f7:35:da:60:
66:2b:da:97:9b:b8:85:18:92:94:98:ff:58:66:aa:
83:d0:df:be:a6:0f:24:fc:bb:eb:aa:40:df:5c:85:
03:bc:a1:dd:b0:57:38:6b:3b:f0:26:75:78:0a:96:
6a:c7:e2:95:d0:90:cc:db:ea:0e:72:99:37:01:fc:
dc:5f:7c:61:9c:a2:f9:67:ce:2c:5f:f2:de:a8:81:
0e:4b:f1:a9:cc:96:1a:53:33:83:f4:0c:9e:5d:94:
14:54:81:70:e7:67:ab:76:42:60:c4:58:9c:86:8f:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:19:84:41:22:E6:8F:97:C1:EE:45:2F:D4:20:40:A6:DB:84:C5
X509v3 Authority Key Identifier:
keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:79:4c:6b:78:56:f7:52:a8:d0:2a:77:09:52:e4:56:79:aa:
11:70:cf:c9:71:ca:e3:cb:9a:36:83:b8:43:97:68:bc:d1:87:
01:08:a3:28:b5:56:db:77:bc:d3:43:66:47:31:6d:32:03:c5:
ba:1b:69:69:7f:e9:21:57:7d:ff:17:43:f7:e2:a7:f3:26:d5:
a8:38:b1:0a:6f:2a:da:6d:32:4d:f3:86:53:ac:b9:f8:df:61:
e5:c6:4b:ee:88:5f:2f:74:1b:3e:a6:2c:b3:3a:38:7a:db:a9:
02:d8:62:7e:28:d9:b7:a9:81:c9:00:fc:0d:c0:35:7d:de:10:
53:ec:31:04:17:15:c9:46:24:68:d2:7f:7a:95:5c:4d:cc:93:
dc:25:3e:57:cb:3a:4a:cc:7b:26:02:9a:65:78:7b:6a:06:0e:
7f:f5:19:b6:82:8a:3b:5d:89:45:a5:b4:2d:b7:e2:67:3f:6d:
a0:c8:64:98:42:27:47:39:db:dd:c5:36:d6:f9:8c:11:6d:ca:
4d:ed:b1:f2:e8:85:a4:b3:60:60:5a:81:e7:0d:fb:cf:bf:df:
70:3c:08:69:02:f6:a3:10:2a:f7:74:88:c2:5e:2d:53:f8:bd:
45:de:5e:a5:d4:6e:a5:13:ae:ec:2e:95:b9:18:db:16:3c:c2:
7d:02:4a:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfXo6PolWpMvVMVasn3a+paBqFTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2
RTM0MjlGQTAeFw0yNTAxMDIwNTU1MDJaFw0yNjAxMDEwNjAwMDJaMDMxMTAvBgNV
BAMTKDRENTMxOTg0NDEyMkU2OEY5N0MxRUU0NTJGRDQyMDQwQTZEQjg0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXoYf8mT1eyhYBpWRYR9bIRhI
b6zSX8NxNPethSvTTn6XcEIp3wnjn7XeTaTd3sktUJXsoNLeYYVq0brPN+Rg7Age
dq1Z7uIZdSDBCMI2w+hlxjALGdqjuexl6sUfwZ/ZcHzYsaTouQnBzmbAxKzJY5uk
PL6kv/YNmVWfUBfvfZ8LC+uUmPC1cPSYv+Rh1X3+9zXaYGYr2pebuIUYkpSY/1hm
qoPQ376mDyT8u+uqQN9chQO8od2wVzhrO/AmdXgKlmrH4pXQkMzb6g5ymTcB/Nxf
fGGcovlnzixf8t6ogQ5L8anMlhpTM4P0DJ5dlBRUgXDnZ6t2QmDEWJyGjxIFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTVMZhEEi5o+Xwe5FL9QgQKbbhMUwHwYDVR0j
BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3
MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0
MjlGQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMzLTM3ZjUtNDY2Ny1h
NDMwLTZmYTExMWQzNDNhYS8wLzMxMzAzMzJlMzczNTJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdLPzANBgkqhkiG
9w0BAQsFAAOCAQEApnlMa3hW91Ko0Cp3CVLkVnmqEXDPyXHK48uaNoO4Q5dovNGH
AQijKLVW23e800NmRzFtMgPFuhtpaX/pIVd9/xdD9+Kn8ybVqDixCm8q2m0yTfOG
U6y5+N9h5cZL7ohfL3QbPqYsszo4etupAthifijZt6mByQD8DcA1fd4QU+wxBBcV
yUYkaNJ/epVcTcyT3CU+V8s6Ssx7JgKaZXh7agYOf/UZtoKKO12JRaW0LbfiZz9t
oMhkmEInRznb3cU21vmMEW3KTe2x8uiFpLNgYFqB5w37z7/fcDwIaQL2oxAq93SI
wl4tU/i9Rd5epdRupROu7C6VuRjbFjzCfQJKvw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:40 2025 by rpki-client