Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa
File: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (raw, json)
Hash identifier: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=
Subject key identifier: 0F:32:3A:21:70:2D:5D:0F:A3:8E:58:FA:85:81:63:60:B5:DC:E1:41
Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
Certificate serial: 176FC716FC524B6D723FD5EC57AF30297EC1F7DD
Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa
Signing time: Thu 30 Jan 2025 16:00:02 +0000
ROA not before: Thu 30 Jan 2025 15:55:02 +0000
ROA not after: Thu 29 Jan 2026 16:00:02 +0000
asID: 150920
IP address blocks: 103.204.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6f:c7:16:fc:52:4b:6d:72:3f:d5:ec:57:af:30:29:7e:c1:f7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
Validity
Not Before: Jan 30 15:55:02 2025 GMT
Not After : Jan 29 16:00:02 2026 GMT
Subject: CN=0F323A21702D5D0FA38E58FA85816360B5DCE141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:6e:c4:9e:f2:1c:32:f3:50:d7:52:89:a1:
ff:96:61:48:f3:21:9d:08:e7:73:14:ce:54:23:86:
d0:2c:25:43:28:1f:1b:cb:70:e3:d0:f4:a0:40:a4:
1c:e6:5e:fd:df:a7:34:dd:d3:20:b5:72:cd:77:3d:
9a:73:12:f0:b6:6a:47:e6:53:b7:1f:95:4c:38:97:
da:a8:db:c4:88:7f:86:97:92:1a:8d:76:90:ff:59:
08:a5:a6:06:c5:64:49:b8:0f:bf:31:9c:9b:82:b8:
86:a4:fe:bd:54:ef:09:e2:80:b9:07:fb:54:4b:b8:
be:59:69:f8:0f:d6:4c:c1:7e:51:46:9d:c1:76:93:
4f:bd:45:4a:50:3c:a0:b0:09:c3:a1:11:de:0e:ce:
68:e4:3f:8a:d5:e5:e0:b7:0c:02:50:90:54:7b:b2:
89:56:8b:b3:d3:57:95:dc:23:e4:7c:b9:86:5d:73:
95:a8:8f:6b:ef:39:c5:0e:58:b8:a4:78:69:06:7d:
9f:18:4e:c0:92:c5:48:23:b5:88:99:6c:07:15:71:
88:e9:e3:46:86:3d:72:8d:3b:78:a3:ba:2a:d2:9f:
fd:47:a7:1d:23:18:8e:3f:98:be:57:31:98:67:39:
2a:a9:d3:87:43:85:45:ca:05:5a:d0:c3:4d:a6:e8:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:3A:21:70:2D:5D:0F:A3:8E:58:FA:85:81:63:60:B5:DC:E1:41
X509v3 Authority Key Identifier:
keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.15.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d2:31:42:5a:f9:3e:0e:75:8e:65:5a:cc:d4:39:e5:ec:95:
28:64:86:bb:97:2a:26:76:8a:ef:48:e3:8d:3f:18:cf:2d:f4:
1d:6b:b1:06:6b:f6:b6:16:7a:32:f9:7a:8b:ac:55:49:ab:dd:
6f:8b:f3:a9:c7:6f:3a:ae:50:51:1a:51:df:3d:ae:0f:25:a0:
5f:81:14:34:79:8b:a2:39:fc:68:94:fb:76:b3:5b:fe:23:6d:
e1:79:b1:3e:95:de:9b:fc:90:5b:dc:22:d6:ce:fa:df:56:a0:
f9:bb:0d:66:73:e8:e0:36:5f:c7:ef:40:c5:da:8c:fb:5b:2a:
af:cf:ef:f1:ec:43:67:01:6e:56:b2:bd:07:b3:81:6a:8d:45:
47:aa:2a:45:5c:ce:4e:6b:38:db:df:39:d3:e2:c1:b3:3e:b1:
34:34:00:67:e8:27:b9:2a:87:68:38:02:2c:6d:41:27:88:0f:
c3:b8:2a:0e:18:9d:bc:cc:6c:27:95:20:c4:33:e4:e2:9e:51:
7e:42:76:c3:d8:9b:57:a9:2a:0b:4e:2e:63:f8:f2:ab:9d:dc:
b3:9a:b8:9f:52:46:82:82:01:7b:66:c5:23:cd:7a:c1:c0:ae:
e2:b1:70:cd:cb:ab:10:02:28:24:69:4b:97:81:63:25:b6:0f:
4d:f7:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:48 2025 by rpki-client