Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
File: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (raw, json)
Hash identifier: viVk0fd1IGRahaA9QHSNJwt9tQb5HRy/oD87hvRQStY=
Subject key identifier: 62:7A:EF:3B:39:72:96:8B:43:55:97:0A:DB:60:BC:37:A9:C5:38:41
Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Certificate serial: 34B7A3401E13E20BB58B680F05E1A69BE07A6D4D
Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
Signing time: Thu 02 Jan 2025 13:00:02 +0000
ROA not before: Thu 02 Jan 2025 12:55:02 +0000
ROA not after: Thu 01 Jan 2026 13:00:02 +0000
asID: 150500
IP address blocks: 103.131.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b7:a3:40:1e:13:e2:0b:b5:8b:68:0f:05:e1:a6:9b:e0:7a:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Validity
Not Before: Jan 2 12:55:02 2025 GMT
Not After : Jan 1 13:00:02 2026 GMT
Subject: CN=627AEF3B3972968B4355970ADB60BC37A9C53841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:0c:3f:2f:34:7e:a1:8d:09:1d:f8:d4:e6:
29:dc:ab:49:87:8e:04:eb:b3:13:6f:d1:72:8a:04:
b0:0e:0d:03:cf:69:18:04:72:ca:df:ad:1c:68:5b:
7f:61:ca:b1:7c:0d:3b:ea:fb:9c:27:f7:62:b3:69:
68:43:e7:65:7d:0c:cf:08:9e:75:14:47:8a:07:1f:
4c:e3:91:dc:35:16:92:31:94:b7:d9:1a:27:cd:f7:
9d:06:ff:64:76:87:a2:2f:51:82:57:95:89:54:53:
64:4f:c3:d2:d1:f4:4c:f0:55:5f:33:48:a1:9f:83:
17:e6:de:e1:de:16:9b:b3:7c:f9:d9:fc:dc:4d:7f:
c3:d3:12:84:28:59:93:76:7a:50:85:5a:e5:a0:0c:
d8:62:d1:ee:4c:35:62:1a:06:d8:fb:7d:7e:cd:aa:
c1:72:c2:0f:1b:9f:b0:1d:43:e7:a2:66:f0:d4:07:
03:d7:6d:52:f7:ea:31:bf:e9:42:2f:e3:9f:66:0a:
70:fc:60:16:28:0b:61:83:c9:8c:fe:28:95:eb:e3:
37:cf:a5:64:90:82:7b:c3:78:d4:ad:2d:40:ff:ea:
2d:f8:df:a1:a9:9d:fd:55:90:ee:71:f9:31:44:7d:
4b:52:b3:59:d1:fe:d0:12:42:91:36:78:e2:fc:34:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:EF:3B:39:72:96:8B:43:55:97:0A:DB:60:BC:37:A9:C5:38:41
X509v3 Authority Key Identifier:
keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.28.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ca:d3:1c:9d:d5:37:a3:85:98:d7:69:7e:2c:f0:59:13:49:
cf:58:07:b4:53:27:24:58:64:56:e6:80:00:ff:52:d5:77:31:
fa:e5:82:de:6d:fe:69:e3:0d:d5:ef:99:ff:a8:3e:06:d9:50:
be:75:6b:23:c8:1e:8c:70:b5:55:29:e2:da:16:3d:64:13:be:
8a:77:49:a0:fe:ef:c3:7d:41:c6:5c:ea:38:3f:ca:c7:99:2d:
65:fc:2d:3a:79:1f:9e:7a:12:d6:3c:e9:8c:86:8f:17:de:62:
72:68:18:a3:f4:69:25:c2:8e:b9:0b:f2:aa:6f:c9:69:ed:56:
b4:91:3b:a9:ff:85:32:2b:29:b1:87:84:a7:93:32:1d:d7:59:
af:02:19:e5:61:d9:0b:99:0a:48:56:9c:01:72:7d:d4:4c:98:
99:8d:41:77:5d:eb:5a:90:8c:83:14:b0:17:05:27:af:71:b7:
26:38:3d:cf:a2:28:4e:99:3c:bd:28:98:a6:e5:f3:76:d1:32:
00:fd:25:54:64:72:33:fa:99:a0:fd:d5:4c:2a:42:6a:62:91:
85:2e:d0:4c:61:f7:7a:29:31:3e:01:64:70:1c:14:56:76:c7:
43:73:55:ca:f6:cf:89:da:5b:7f:34:59:e9:c3:49:58:8b:53:
5e:3f:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:08 2025 by rpki-client