Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
File: 3130332e332e37362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: tLzsmSmrdy4NREvrke1LZM7uDAlB87xHIm2EO9/n72c=
Subject key identifier: EC:D9:1A:B6:61:91:F2:6F:46:8D:48:F1:BE:94:63:44:F8:04:A2:65
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 7D0231A454EB00C3F60204E4A18CC1E3802BC043
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
Signing time: Sun 21 Apr 2024 05:00:02 +0000
ROA not before: Sun 21 Apr 2024 04:55:02 +0000
ROA not after: Sun 20 Apr 2025 05:00:02 +0000
asID: 9341
IP address blocks: 103.3.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:02:31:a4:54:eb:00:c3:f6:02:04:e4:a1:8c:c1:e3:80:2b:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 21 04:55:02 2024 GMT
Not After : Apr 20 05:00:02 2025 GMT
Subject: CN=ECD91AB66191F26F468D48F1BE946344F804A265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:4d:8b:1a:a4:e6:b1:60:eb:8e:45:5c:3f:
46:42:60:bb:cf:5a:11:8e:30:83:9c:bf:91:30:ea:
60:76:a8:7f:64:ec:58:72:ff:70:6e:c2:63:a4:bd:
48:38:2c:85:33:02:2b:f5:86:87:57:d7:44:4d:bb:
2b:15:dd:6d:0f:77:5f:d2:20:70:04:0d:fe:7d:51:
a5:02:11:a1:59:4b:d2:23:a4:fe:a0:ec:05:12:f8:
18:52:84:cd:74:cd:68:b1:fd:e6:59:07:66:dc:bf:
fb:0c:48:ab:2f:3e:71:3c:5a:bd:70:3d:ce:80:76:
52:5b:eb:7d:76:2e:b3:10:4d:c8:72:6c:06:70:e8:
bf:8e:20:dd:01:aa:a9:33:51:ca:0a:7b:e7:cc:bc:
43:9b:12:c7:07:d7:cb:5b:2d:8a:2d:f3:81:70:c7:
a3:87:fb:23:45:9c:68:37:d7:95:86:92:63:0c:ab:
ae:7d:fa:41:78:69:1e:91:51:17:80:5a:65:a1:9d:
8c:78:86:f1:07:0e:ef:0d:d6:68:f4:61:1c:f2:10:
5a:2e:c9:8a:1a:3f:cc:e4:96:b4:56:fe:13:53:5c:
da:5c:29:a2:13:6b:14:51:1c:bd:2b:90:ca:e7:6f:
2c:49:24:34:79:c3:31:dd:b0:10:d3:95:fa:45:56:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:1A:B6:61:91:F2:6F:46:8D:48:F1:BE:94:63:44:F8:04:A2:65
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.76.0/24
Signature Algorithm: sha256WithRSAEncryption
55:78:93:73:df:5c:f0:41:61:a8:15:4f:2c:91:87:1b:f0:27:
d6:7c:98:a1:e7:87:7b:16:06:da:37:e1:14:82:ef:0f:ed:02:
dc:72:9d:fb:ba:37:a6:27:2c:7a:cf:04:dd:2f:13:05:53:28:
34:6a:f1:b4:07:8b:1a:87:b3:e5:9c:52:f6:c1:a3:03:38:29:
b3:75:78:17:3d:2d:b6:26:02:d0:be:e9:d7:e3:0b:ee:8d:4f:
73:80:8f:60:09:82:e3:00:f1:90:1c:7b:8c:56:ce:23:94:32:
e6:68:84:e2:a4:be:ae:58:5a:6d:67:af:32:d4:7a:f4:95:89:
06:c5:41:2c:a4:f7:b7:0e:26:59:5e:a2:0c:65:76:af:32:35:
9c:c2:4a:29:1f:cb:4e:c1:03:a5:d0:a4:a8:08:a4:40:12:85:
ac:7a:6b:3e:0b:09:7c:df:f2:42:fb:9b:94:db:e6:19:af:59:
3a:76:5f:0f:7e:d3:c6:23:36:46:db:50:2a:7b:81:cc:be:dc:
0f:12:0a:c8:ac:be:b1:13:31:ab:39:86:03:6e:24:4a:78:7e:
7d:b0:87:2b:93:53:fd:cf:fa:7d:f7:e6:37:49:38:65:90:19:
99:28:7b:12:0e:1f:94:ad:52:de:9d:98:c3:f6:4f:51:b5:9c:
8d:32:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:54 2025 by rpki-client