Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa
File: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (raw, json)
Hash identifier: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=
Subject key identifier: 84:7B:A8:1A:17:F6:13:CD:4B:06:00:05:E4:EE:10:26:18:C1:C9:4B
Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Certificate serial: 1CFA6799F01BA9563D164FF8716B91DCBF28A819
Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa
Signing time: Mon 03 Mar 2025 11:00:01 +0000
ROA not before: Mon 03 Mar 2025 10:55:01 +0000
ROA not after: Mon 02 Mar 2026 11:00:01 +0000
asID: 141673
IP address blocks: 103.163.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fa:67:99:f0:1b:a9:56:3d:16:4f:f8:71:6b:91:dc:bf:28:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Validity
Not Before: Mar 3 10:55:01 2025 GMT
Not After : Mar 2 11:00:01 2026 GMT
Subject: CN=847BA81A17F613CD4B060005E4EE102618C1C94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:72:1f:eb:8a:7e:86:eb:ab:0d:d5:07:f8:
9f:c6:d6:c6:1d:ee:55:b0:59:0d:63:36:23:af:f0:
d9:23:68:21:0a:f4:ce:9f:04:15:28:d2:2b:81:ea:
05:4a:27:82:68:b5:15:4c:e4:16:e5:5c:87:02:65:
a9:1d:16:64:3f:24:27:47:d3:05:5a:b0:d8:65:98:
3b:99:ae:c1:ec:69:83:4b:2a:c5:10:74:5c:5f:03:
d8:af:e9:ef:25:25:42:be:88:68:e3:2e:c9:d5:d6:
ff:d3:7f:85:32:90:5a:77:28:8b:c0:8d:89:3a:bd:
63:ac:d0:f3:f8:7c:b2:e4:7d:fc:72:24:42:73:4e:
8a:be:df:38:e1:26:48:5f:28:b3:06:68:eb:27:6a:
39:6b:95:4e:b8:8f:28:f4:f6:68:9e:97:53:7d:00:
73:5b:01:76:58:9d:fe:15:05:9d:38:18:0e:f6:41:
3f:d8:3c:f0:95:ac:7a:a3:38:c2:2f:9f:09:db:73:
a5:3c:8b:91:ae:71:d6:a5:b8:db:9b:17:8e:8a:63:
60:60:98:84:2c:f6:d2:cf:62:2a:f9:99:8c:ff:35:
cb:dd:ed:af:f5:a9:64:a4:bc:0c:f3:a1:36:27:8e:
37:87:ba:a7:7e:01:5c:27:33:82:39:cc:4c:2f:8c:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:A8:1A:17:F6:13:CD:4B:06:00:05:E4:EE:10:26:18:C1:C9:4B
X509v3 Authority Key Identifier:
keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.103.0/24
Signature Algorithm: sha256WithRSAEncryption
85:57:26:ce:52:4d:19:66:e1:5a:2c:09:b2:5c:7c:92:7e:ce:
18:e5:dc:52:ac:4f:5a:fe:2f:11:9f:27:16:37:d7:85:38:f9:
90:4a:62:71:35:ad:6b:af:99:da:67:11:8a:84:49:8c:6a:f8:
03:5b:d9:31:e1:f8:99:a3:76:ff:63:65:2f:67:8b:49:75:6a:
98:c2:a5:51:f2:40:e3:3b:82:ba:91:8b:d6:a5:2d:ce:93:88:
05:64:7d:c1:75:6e:28:43:15:7f:93:90:49:e8:65:e1:4d:8f:
a9:de:90:6b:e7:b7:2f:14:9c:fe:59:01:bb:c3:b7:27:69:3a:
f4:e5:e7:f4:8e:89:45:97:b2:bb:cf:3b:5c:3b:4e:81:6a:a3:
8a:ea:1d:e6:91:3b:a2:50:bd:bb:0b:49:13:cc:6d:dc:ee:0b:
56:61:52:67:d5:a3:37:5d:6c:09:df:c1:ff:7e:fd:d5:82:e8:
0f:7a:df:0a:d1:37:97:f3:2e:03:79:16:21:f8:30:bc:71:4d:
bb:8a:ef:b1:b9:e3:49:a7:27:d3:b0:5e:7c:8b:74:5d:00:a0:
1c:aa:44:3f:4d:79:06:4d:5b:88:8f:0d:57:7f:bd:1d:e0:95:
24:00:41:3c:1a:98:67:dc:b0:36:90:2b:91:d3:8b:6f:91:0c:
b6:cb:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:29 2025 by rpki-client