Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa
File: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (raw, json)
Hash identifier: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=
Subject key identifier: 1E:60:E9:6E:78:4A:97:38:43:D8:40:64:44:A6:F1:A8:C0:EC:A1:2E
Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E
Certificate serial: 3934654B0266775905684AD166711D3C9B6FFDEE
Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa
Signing time: Thu 02 Jan 2025 08:52:56 +0000
ROA not before: Thu 02 Jan 2025 08:47:56 +0000
ROA not after: Thu 01 Jan 2026 08:52:56 +0000
asID: 64030
IP address blocks: 103.214.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:34:65:4b:02:66:77:59:05:68:4a:d1:66:71:1d:3c:9b:6f:fd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E
Validity
Not Before: Jan 2 08:47:56 2025 GMT
Not After : Jan 1 08:52:56 2026 GMT
Subject: CN=1E60E96E784A973843D8406444A6F1A8C0ECA12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:1b:07:53:bc:5a:2b:99:87:e9:4d:4e:bf:
85:bd:19:5d:af:40:5f:bc:b1:f4:95:e5:39:86:fc:
cf:c0:5b:81:ad:f1:07:30:fa:ea:83:2b:f8:dc:9e:
d7:a4:70:30:0a:da:bd:c1:58:c5:03:df:70:78:ae:
a5:09:fe:21:8f:0b:5c:70:de:cc:f0:a5:cf:03:5a:
41:be:b3:9e:3e:e7:44:3c:ae:2d:38:1f:50:ba:f5:
a1:1c:8a:5f:63:54:65:b4:ef:48:93:5e:c9:c1:0c:
b3:d6:a1:82:09:2d:6a:70:2a:d4:71:6f:37:0f:95:
cd:af:bc:36:8f:5d:ba:6c:9e:e3:14:14:c8:31:75:
8f:f6:39:13:4c:38:9f:f5:87:dd:61:1c:c9:d3:bb:
70:4d:dc:fd:c7:dd:20:85:7e:f8:6e:bb:05:9f:9b:
e1:78:ee:d8:9d:d1:31:e9:95:da:ac:de:a4:be:78:
ea:e1:e0:4c:0a:40:f6:b3:cd:60:12:7a:91:69:81:
5b:2e:d5:14:96:77:da:66:bb:e9:01:82:b4:96:d4:
2f:10:0b:4a:e9:3c:74:8e:4c:5d:33:f3:46:ba:e0:
b1:b8:82:d3:86:ce:b8:46:5e:55:b9:29:2d:1b:92:
5e:4c:54:bf:ca:da:b5:24:f4:a4:d3:b7:80:e0:5b:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:E9:6E:78:4A:97:38:43:D8:40:64:44:A6:F1:A8:C0:EC:A1:2E
X509v3 Authority Key Identifier:
keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.229.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f7:63:52:2d:e0:2e:ec:19:99:27:ef:33:c6:0a:4a:19:2e:
96:09:3d:24:0e:6f:a8:a8:ac:97:82:ae:71:27:6f:12:e7:98:
62:ed:0b:68:c3:8e:7d:d6:a1:12:a0:cc:00:05:c7:1d:b5:2f:
c8:4e:e2:bd:30:7e:d7:53:ca:c1:77:56:35:3d:02:9b:42:e6:
73:ef:6a:f3:48:90:2a:60:db:23:71:cc:32:28:b3:68:86:c1:
09:c9:ad:89:72:2e:9c:81:ab:b8:26:a2:48:03:5d:89:94:dd:
9e:f0:c7:ea:28:53:f3:b3:3d:10:a6:b7:bd:fe:c8:03:7d:7c:
bd:13:08:eb:b7:f4:7f:81:f8:32:1c:04:e9:32:f4:41:8b:f3:
77:f6:99:74:e5:0f:7c:02:58:1d:c8:42:f2:ba:3c:a9:1d:9a:
16:4c:e1:49:5d:7a:8c:f7:01:75:e2:89:a0:cb:3f:2e:79:18:
63:9d:54:d0:2c:e6:62:f6:f3:37:de:de:77:db:8f:c1:b6:bf:
53:87:0c:7f:ca:95:98:d3:6e:12:91:bf:81:4e:36:97:da:5a:
1a:03:3c:42:3d:1f:7c:b3:ee:4a:a9:a8:0f:2f:d0:08:ac:09:
ba:22:37:ef:ce:89:17:cc:35:c5:03:38:ed:cd:17:a7:e1:ad:
73:a4:f4:24
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOTRlSwJmd1kFaErRZnEdPJtv/e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5
MzZEQjkxRTAeFw0yNTAxMDIwODQ3NTZaFw0yNjAxMDEwODUyNTZaMDMxMTAvBgNV
BAMTKDFFNjBFOTZFNzg0QTk3Mzg0M0Q4NDA2NDQ0QTZGMUE4QzBFQ0ExMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vRsHU7xaK5mH6U1Ov4W9GV2v
QF+8sfSV5TmG/M/AW4Gt8Qcw+uqDK/jcntekcDAK2r3BWMUD33B4rqUJ/iGPC1xw
3szwpc8DWkG+s54+50Q8ri04H1C69aEcil9jVGW070iTXsnBDLPWoYIJLWpwKtRx
bzcPlc2vvDaPXbpsnuMUFMgxdY/2ORNMOJ/1h91hHMnTu3BN3P3H3SCFfvhuuwWf
m+F47tid0THpldqs3qS+eOrh4EwKQPazzWASepFpgVsu1RSWd9pmu+kBgrSW1C8Q
C0rpPHSOTF0z80a64LG4gtOGzrhGXlW5KS0bkl5MVL/K2rUk9KTTt4DgW3fNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHmDpbnhKlzhD2EBkRKbxqMDsoS4wHwYDVR0j
BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw
OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE
QjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjA1NTZkLWNjMjEtNGU1Ny1h
NWJhLWEyMTExZTA1OWI3YS8wLzMxMzAzMzJlMzIzMTM0MmUzMjMyMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzAzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9blMA0GCSqG
SIb3DQEBCwUAA4IBAQAE92NSLeAu7BmZJ+8zxgpKGS6WCT0kDm+oqKyXgq5xJ28S
55hi7Qtow4591qESoMwABccdtS/ITuK9MH7XU8rBd1Y1PQKbQuZz72rzSJAqYNsj
ccwyKLNohsEJya2Jci6cgau4JqJIA12JlN2e8MfqKFPzsz0Qpre9/sgDfXy9Ewjr
t/R/gfgyHATpMvRBi/N39pl05Q98AlgdyELyujypHZoWTOFJXXqM9wF14omgyz8u
eRhjnVTQLOZi9vM33t5324/Btr9Thwx/ypWY024Skb+BTjaX2loaAzxCPR98s+5K
qagPL9AIrAm6IjfvzokXzDXFAzjtzRen4a1zpPQk
-----END CERTIFICATE-----
Generated at Sat Feb 22 06:06:45 2025 by rpki-client