Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
File: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: 67RaJO0BVjwL2QvHGTiy37df+7Wryiq/JiMgePF6ZjA=
Subject key identifier: 00:FF:02:A7:5F:3A:0E:B8:D8:CE:52:C1:28:FE:D6:E2:E1:32:EC:C3
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 0CD31EF67514161178D9AFF31EFC653F7D5C84F1
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
Signing time: Tue 02 Apr 2024 05:01:32 +0000
ROA not before: Tue 02 Apr 2024 04:56:32 +0000
ROA not after: Tue 01 Apr 2025 05:01:32 +0000
asID: 38496
IP address blocks: 103.90.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d3:1e:f6:75:14:16:11:78:d9:af:f3:1e:fc:65:3f:7d:5c:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Apr 2 04:56:32 2024 GMT
Not After : Apr 1 05:01:32 2025 GMT
Subject: CN=00FF02A75F3A0EB8D8CE52C128FED6E2E132ECC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:3f:5b:75:d8:fa:98:5e:70:a5:58:eb:48:
5f:9b:5d:df:c6:17:21:10:c1:dc:93:e1:3a:bb:24:
42:d1:82:cc:aa:83:7e:0e:00:47:cf:83:c4:55:aa:
97:60:92:34:0d:a2:38:89:2d:b5:a4:38:da:ac:7e:
e0:ca:af:c4:8e:7e:55:70:80:cc:29:ee:50:4b:fa:
65:6c:01:60:bc:1c:fd:a8:e8:e5:cf:f7:60:78:57:
f6:b4:f6:aa:86:c7:4f:91:8d:a4:77:c9:af:f7:af:
c3:6d:0f:05:55:f9:d2:fd:71:c6:4e:a7:9e:8c:fd:
ed:ec:0e:94:d5:ce:29:fd:b0:5b:04:4b:ae:f0:a5:
9e:a9:f4:94:e0:80:e9:61:88:cf:e7:d9:2b:29:e6:
96:8a:58:5f:f5:90:18:26:22:1f:99:ac:53:b4:4a:
86:9a:bc:32:e7:a7:6b:3d:e0:b9:3b:de:33:5c:95:
15:cd:b8:02:7e:ad:5a:62:ed:57:b5:ae:05:73:a0:
ed:a8:2f:af:85:5d:67:9c:6f:c0:a8:42:56:58:b5:
0d:40:b3:32:99:75:24:8c:4d:de:4d:bd:f1:5f:81:
29:65:0e:96:2f:c0:05:7e:e0:7e:88:4c:63:f2:9d:
40:c5:64:43:bc:1b:fd:4c:39:c6:f2:ff:c8:3e:31:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:02:A7:5F:3A:0E:B8:D8:CE:52:C1:28:FE:D6:E2:E1:32:EC:C3
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:52:4c:aa:3c:11:51:7e:70:4d:5d:13:d5:48:4a:a4:39:10:
94:d2:bf:73:66:97:3f:10:cc:d1:ab:16:0c:2a:3e:6f:3c:6b:
63:91:91:7d:07:c6:c7:d8:96:d5:33:25:d2:8d:c0:e3:c1:4a:
c3:f9:36:dc:1e:5d:e9:2f:55:e7:83:7e:26:41:76:0b:91:4e:
97:ca:af:bc:ed:9e:a2:9d:a2:c7:c6:aa:28:9f:be:36:e9:e5:
f2:0c:bb:68:b0:51:fd:34:37:2f:82:f5:98:2e:a1:e1:bf:d1:
d0:4d:1e:49:f8:61:6c:f3:e2:12:6a:51:c4:46:23:e6:30:b2:
6c:32:67:85:55:ed:2d:bc:09:7e:61:96:40:30:39:3f:c2:c2:
94:6d:1d:d2:9f:83:f8:e1:cc:a7:28:ad:93:dc:79:d3:d6:21:
e3:da:3f:2e:40:06:89:19:ca:37:15:d5:bd:86:1a:07:62:f3:
36:c3:23:d4:29:08:f6:29:f3:1e:c9:3f:2f:ef:57:1c:40:f9:
b8:d0:1b:93:38:b1:90:04:ea:5a:16:12:97:c8:11:37:bd:49:
0e:56:b8:52:53:24:6b:40:4d:fa:89:01:6c:5d:48:5f:23:19:
37:60:44:ac:a1:16:bc:eb:b8:f1:c3:61:cb:fd:86:51:f9:dd:
9c:75:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:11 2025 by rpki-client