Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa
File: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=
Subject key identifier: 9C:E6:5E:7F:D9:83:A2:8C:F3:44:F2:61:CC:8E:CD:C4:48:F6:C6:B6
Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial: 365FD04539B078CB54D4E1BF75E0112C060F2C13
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa
Signing time: Thu 06 Mar 2025 09:01:36 +0000
ROA not before: Thu 06 Mar 2025 08:56:36 +0000
ROA not after: Thu 05 Mar 2026 09:01:36 +0000
asID: 131773
IP address blocks: 103.134.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5f:d0:45:39:b0:78:cb:54:d4:e1:bf:75:e0:11:2c:06:0f:2c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
Validity
Not Before: Mar 6 08:56:36 2025 GMT
Not After : Mar 5 09:01:36 2026 GMT
Subject: CN=9CE65E7FD983A28CF344F261CC8ECDC448F6C6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:11:bf:76:bb:ee:f7:06:88:58:f7:1d:ce:
5e:8f:5f:53:3b:33:13:f2:d4:13:f0:79:49:ef:90:
01:f4:96:3d:ab:c7:a3:89:12:1a:65:fa:12:aa:1f:
64:5c:71:a1:fd:5d:a4:c2:a6:e3:00:4e:15:c3:3b:
01:8b:68:ff:10:7f:f6:05:a7:39:4d:1e:65:1c:b4:
a0:29:5f:d9:3b:9f:1a:41:c7:ca:0e:72:70:b1:71:
40:21:ff:d0:76:10:46:1d:16:b1:de:4d:ad:da:95:
5f:49:b4:0e:62:b2:a3:48:22:dd:9c:ea:12:ef:4f:
41:c4:fc:5a:06:cc:a8:d3:07:3d:6f:05:d1:ee:26:
9e:af:09:6b:af:17:09:b4:78:94:99:82:5a:9b:01:
c5:d3:90:f0:3f:1f:3d:10:da:e9:63:3e:0c:ed:e6:
ca:98:41:79:b0:84:f7:70:4d:cd:5b:1c:a1:a1:f3:
90:eb:b8:18:62:7d:d3:13:17:bf:8f:fa:44:c7:34:
23:90:35:49:69:95:d2:70:2e:aa:f7:0c:92:ac:34:
df:e8:63:f6:b3:41:05:f1:e5:4c:05:44:2c:16:65:
24:9d:4a:18:ef:15:f3:db:89:7a:a9:61:c8:ae:f7:
86:ea:ba:6a:82:c1:b8:db:11:5e:63:2c:bf:f8:f2:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:5E:7F:D9:83:A2:8C:F3:44:F2:61:CC:8E:CD:C4:48:F6:C6:B6
X509v3 Authority Key Identifier:
keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e1:c3:c4:b4:70:16:03:e6:f5:be:30:35:3a:31:6b:68:b5:
dc:d6:cb:41:ba:5c:25:8a:64:7e:3a:70:16:33:40:49:7f:92:
20:75:fc:1b:c5:d8:e3:69:b2:08:f2:bd:36:a1:d3:96:a3:67:
3b:31:a9:05:ac:ef:18:61:05:ee:79:66:85:54:9d:76:b4:9c:
8f:45:65:0e:07:62:b4:fd:63:b5:a0:01:1a:56:62:66:e9:1c:
70:da:79:89:92:e5:7e:48:8d:8c:ee:74:68:6f:e2:36:0b:a8:
f4:a6:c6:26:e6:03:eb:4c:96:08:59:cf:52:f1:b9:05:c7:e5:
09:fc:c0:37:6e:62:4f:e8:d7:e3:0f:63:14:b4:f4:cc:4a:54:
42:96:cd:bf:26:0f:dc:67:26:0c:5e:2a:e9:bf:bf:e8:08:96:
81:f1:84:a2:81:34:e5:64:e0:a2:64:bc:f6:02:ad:fa:cf:59:
ef:3a:d4:7f:1f:68:ec:8c:7f:3c:c1:99:9a:fe:e0:06:2a:f0:
b5:42:2e:9d:4c:ac:f7:62:6f:d2:93:e3:16:4a:f0:6d:82:bd:
4c:c7:1d:eb:0f:e8:79:35:fd:33:c9:77:21:3a:78:43:d9:ee:
a2:d3:d8:03:63:1a:c4:de:9f:a5:59:75:72:f9:aa:07:aa:6d:
9c:77:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:55 2025 by rpki-client