Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
File: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=
Subject key identifier: E5:D0:1F:44:12:A1:A0:62:78:38:62:69:56:A9:CE:0B:30:FC:DC:82
Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial: 2F2BCAB6CA54AFC0051248F3F139574C667822C1
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
Signing time: Sun 19 Jan 2025 16:00:01 +0000
ROA not before: Sun 19 Jan 2025 15:55:01 +0000
ROA not after: Sun 18 Jan 2026 16:00:01 +0000
asID: 139952
IP address blocks: 103.162.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2b:ca:b6:ca:54:af:c0:05:12:48:f3:f1:39:57:4c:66:78:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Validity
Not Before: Jan 19 15:55:01 2025 GMT
Not After : Jan 18 16:00:01 2026 GMT
Subject: CN=E5D01F4412A1A0627838626956A9CE0B30FCDC82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:54:d2:9c:f8:aa:81:f6:fd:1b:07:bd:9a:
59:25:d3:67:45:7a:ab:fb:9e:30:0a:bb:89:16:90:
06:ad:1f:b1:d7:74:a6:81:fc:a6:83:f5:f5:00:49:
d9:df:38:e2:22:6e:ac:bb:8c:10:21:43:9a:6a:0d:
e0:83:c2:26:6c:34:db:f2:c3:77:04:31:df:6b:93:
de:e7:24:31:d5:cc:be:90:b9:cb:0d:30:ba:ee:39:
3c:92:a7:53:cb:5f:0e:33:d6:81:a7:8f:14:4f:fd:
91:d9:6c:18:b6:46:5b:a0:57:95:c1:c1:74:c2:55:
f2:57:45:d9:65:6e:6e:0e:78:d6:e9:a2:6e:35:88:
82:29:20:35:a8:13:80:23:5f:f4:d7:7c:ea:0c:c9:
02:a1:4a:db:09:4d:2d:8d:64:df:8d:0c:33:73:9a:
9b:68:2a:7c:bc:7a:8b:ca:19:c4:de:e8:50:ea:2e:
9a:28:fe:bd:0b:66:f6:d7:c6:60:f8:01:e9:d6:bd:
da:ca:4b:02:47:d6:fc:64:62:26:d3:8d:ea:ef:5a:
f0:3d:5a:c2:10:f2:53:7d:93:f1:31:94:24:85:bd:
30:db:e2:35:73:ea:3e:4d:07:d0:e2:83:34:ce:fe:
f1:e7:87:82:8c:bc:47:95:66:b2:f5:11:31:bb:8d:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:1F:44:12:A1:A0:62:78:38:62:69:56:A9:CE:0B:30:FC:DC:82
X509v3 Authority Key Identifier:
keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3e:88:8f:0b:01:23:7b:70:c9:87:59:19:d8:b9:e7:cf:e9:
b4:21:54:2b:5c:ef:35:b3:18:74:76:05:55:f5:53:56:ba:53:
23:c0:82:5e:c9:2f:6e:35:f7:90:45:c4:47:7b:09:25:82:28:
1c:35:1c:a2:3b:57:a6:a6:2d:22:56:6d:0e:9a:33:2c:0a:e5:
58:0a:70:d7:9e:5d:56:36:99:68:ff:4f:30:f6:43:ff:29:e1:
6c:a2:4b:dd:f6:af:0e:20:8e:67:89:a0:b6:76:8b:ed:79:4d:
d1:0e:9a:8d:7c:68:22:27:c5:34:3a:0a:3d:5d:1e:da:69:43:
51:a2:2d:91:0c:37:6c:5f:a1:fb:a7:4f:cf:e8:45:ef:bb:c2:
4d:25:2e:59:03:50:a9:f0:dd:40:64:01:c5:8f:ea:ec:04:22:
8d:72:7e:db:cd:fc:e1:5d:b2:14:8e:6a:52:45:4d:e5:53:5b:
af:42:f9:2b:1c:7d:c8:58:35:c9:78:b3:f4:78:66:cc:ef:71:
06:6e:d3:48:9e:5d:36:55:c8:ba:8c:27:dd:df:35:e8:c7:54:
e3:4e:d1:4d:7b:75:fd:3d:f3:3a:d7:cf:51:7f:fa:2d:63:eb:
39:58:d5:50:88:46:c5:01:46:13:8c:83:53:ea:46:0f:8c:73:
f0:73:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:23 2025 by rpki-client