Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa
File: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (raw, json)
Hash identifier: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=
Subject key identifier: A3:57:67:E0:5B:E0:9C:39:68:10:15:62:DD:40:E6:A5:33:19:A9:4E
Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Certificate serial: 67AE5CCFA1A60CAA14B71B5402AD1CE88F279333
Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa
Signing time: Sun 12 Jan 2025 04:00:01 +0000
ROA not before: Sun 12 Jan 2025 03:55:01 +0000
ROA not after: Sun 11 Jan 2026 04:00:01 +0000
asID: 140459
IP address blocks: 103.153.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ae:5c:cf:a1:a6:0c:aa:14:b7:1b:54:02:ad:1c:e8:8f:27:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Validity
Not Before: Jan 12 03:55:01 2025 GMT
Not After : Jan 11 04:00:01 2026 GMT
Subject: CN=A35767E05BE09C3968101562DD40E6A53319A94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:9e:7f:ac:72:47:26:f7:aa:02:a3:fc:22:
f5:06:38:48:23:18:6c:78:8d:c9:0a:d4:db:7a:32:
b1:a2:97:7e:f6:4c:20:52:17:1d:9e:6f:a1:62:5a:
2f:b4:92:2f:c5:46:95:51:c5:44:01:c4:9b:a0:b8:
73:18:65:c5:7d:12:a3:51:d2:02:7c:e0:c6:7e:a8:
03:5e:f7:f1:80:0a:f7:56:c5:62:eb:4e:e7:ea:40:
99:08:3e:a6:10:82:84:26:35:70:3f:60:a0:4e:a6:
89:4a:3b:49:e5:97:78:55:0f:91:ed:13:b3:eb:b9:
78:39:f0:c7:39:c4:7b:3a:27:c9:3f:c6:78:88:6e:
cd:fb:9c:52:7f:57:46:84:ff:06:54:83:17:d5:cc:
e0:88:05:da:85:72:af:3b:1f:e9:bf:eb:76:4e:c9:
d3:06:73:36:71:e4:50:5b:73:ee:5f:7b:1a:45:35:
0f:22:10:70:43:b8:8c:43:2a:de:49:20:df:8c:31:
3a:3d:6a:3f:73:a6:43:e5:4a:2d:15:d2:65:d3:9f:
ec:38:56:a2:da:c1:66:47:c7:c2:54:50:8d:f2:49:
09:15:5b:88:29:a6:db:16:fe:e5:88:ba:9f:fc:21:
58:d5:06:cc:5b:70:d8:df:8e:8b:b2:3d:c9:ab:6f:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:57:67:E0:5B:E0:9C:39:68:10:15:62:DD:40:E6:A5:33:19:A9:4E
X509v3 Authority Key Identifier:
keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a2:62:4d:dc:a3:5a:cf:cb:d3:e4:7e:54:60:9d:36:79:ed:
4b:0f:eb:29:a4:7a:7a:8a:26:52:40:24:77:e2:2b:88:21:ab:
62:44:52:b2:48:c9:87:89:29:89:4b:c2:ff:b7:ef:07:17:86:
f5:37:20:0d:f2:d7:fe:9b:7d:f8:1c:d5:c0:5f:e3:72:8c:a1:
7f:6d:e2:bd:6c:12:72:3e:f8:2a:46:5f:5c:70:08:1c:4f:4b:
e1:df:d2:01:3a:12:5d:ad:54:22:75:26:5f:b1:36:1d:87:4e:
c1:a2:53:31:9f:a1:63:db:07:2c:7b:29:e7:36:34:d0:d4:0c:
21:96:c0:0b:84:69:64:3e:5f:6a:f3:0e:90:c6:d7:bc:3c:28:
89:39:91:0d:b9:7e:10:d1:10:44:99:bd:a6:4f:2f:d9:f1:06:
01:ff:9d:b8:c4:d0:41:f5:67:72:b9:b6:8a:0f:42:4b:83:03:
f9:68:ee:27:13:fd:2d:bd:1a:d1:9e:65:e4:b4:a8:b2:7d:55:
be:cb:11:a8:ec:34:56:33:22:42:a8:24:c9:72:32:88:18:41:
22:3f:67:7f:31:fc:a6:1f:c8:a3:b5:7c:dc:f0:63:a1:19:dd:
ca:00:51:f9:70:cf:c4:80:9c:ff:e3:65:06:d4:36:5d:6b:dc:
05:5f:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:10 2025 by rpki-client