Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
File: 3130332e332e37382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: 4c7vE1ZJCvYropkh0TLhfAP9I0tQYntSStJ5Wb1iJm4=
Subject key identifier: BB:E6:BD:CD:E0:77:65:9A:AC:0D:94:55:86:83:10:36:0E:64:B0:B3
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 7F70CFF7B20AD7A6C2FEC282223815BF6426CE76
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
Signing time: Sun 21 Apr 2024 05:00:01 +0000
ROA not before: Sun 21 Apr 2024 04:55:01 +0000
ROA not after: Sun 20 Apr 2025 05:00:01 +0000
asID: 9341
IP address blocks: 103.3.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:70:cf:f7:b2:0a:d7:a6:c2:fe:c2:82:22:38:15:bf:64:26:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 21 04:55:01 2024 GMT
Not After : Apr 20 05:00:01 2025 GMT
Subject: CN=BBE6BDCDE077659AAC0D9455868310360E64B0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:37:d7:ae:db:a3:79:f0:a8:79:c3:5d:be:
dd:6e:d8:66:eb:f9:7e:5b:fc:8c:66:46:b1:e0:c5:
a0:6e:53:41:12:10:54:06:9f:b8:b8:3e:91:63:7e:
7b:d5:da:82:b5:95:b2:0e:bf:4a:48:bd:9a:26:a3:
53:09:69:32:d7:22:a1:2b:7f:fb:55:67:73:e0:4b:
93:44:5d:fe:09:28:d0:e7:6e:5d:02:7b:e4:18:23:
2e:60:c1:c1:b5:60:b3:65:2c:16:82:df:a2:24:c9:
94:c9:a1:07:36:50:08:7b:5c:a7:e8:d8:aa:ac:9a:
5e:18:58:18:fb:72:b7:5c:64:bf:ae:e0:64:da:82:
bd:41:d0:46:51:af:9e:ca:9d:96:20:02:8f:1e:5f:
84:d7:75:a0:d7:a8:31:d0:0e:17:94:17:70:4b:4f:
4f:3b:88:83:7e:7e:2e:5f:3d:29:39:0f:1f:f3:dc:
24:f7:90:7c:4f:73:f9:22:dc:a3:3e:c0:a4:8e:9e:
73:18:f7:e3:0a:06:c3:28:20:27:b0:72:88:6f:8b:
7d:05:3f:12:7e:fd:ad:c4:b8:3e:40:64:b5:06:f7:
6f:18:ab:00:a9:05:f5:ca:fc:c2:54:7d:93:af:bd:
4b:60:ac:5e:4b:14:98:24:7f:60:ef:f0:10:66:73:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:BD:CD:E0:77:65:9A:AC:0D:94:55:86:83:10:36:0E:64:B0:B3
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.78.0/24
Signature Algorithm: sha256WithRSAEncryption
69:76:2a:f3:48:a4:01:62:b3:ad:5d:b3:c4:65:9d:f7:a6:23:
fc:52:06:2c:1c:54:50:9b:13:91:f8:37:fa:15:9d:0f:48:d0:
a0:a4:81:bd:d7:98:10:50:11:07:39:d7:5b:66:f4:60:df:df:
1b:33:11:b2:74:37:78:a3:41:70:5b:eb:19:ee:4f:f5:75:13:
fa:9f:2b:7a:e4:3e:fc:93:08:a1:81:eb:2b:2c:fa:42:ab:30:
5c:ad:d6:b2:08:37:f5:03:d4:a7:95:09:1e:8e:a8:20:2b:30:
f4:e2:d5:bf:6a:c1:9a:ea:ba:00:91:be:95:e5:64:42:b2:10:
45:16:8d:87:e4:db:42:24:78:41:c4:87:cc:76:a4:c0:db:e0:
ac:4f:40:4d:f5:fc:40:ba:74:01:74:06:0a:d7:25:9f:5a:f6:
d3:c1:80:ce:87:01:51:c4:20:99:72:e3:aa:9f:a1:56:86:9f:
fb:ff:19:d1:96:77:92:e9:cf:71:54:8a:4c:d6:b0:ca:e7:3d:
a4:82:ce:42:07:23:9d:e6:8e:a6:67:c4:41:3b:58:fc:90:d4:
d0:ff:95:22:86:b7:a7:45:76:f3:42:78:07:71:94:ab:11:f5:
7d:03:aa:c6:e6:4d:ee:bc:e6:00:08:02:3c:da:54:d1:4b:ad:
7f:8f:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:54 2025 by rpki-client