Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
File: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=
Subject key identifier: 04:6D:CE:1F:2E:A0:08:BF:FF:B4:D0:3B:D0:C1:8C:26:DA:5F:76:E5
Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial: 34809847E892B317D5F9358693FA27857BA3CD0A
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
Signing time: Mon 03 Mar 2025 09:15:19 +0000
ROA not before: Mon 03 Mar 2025 09:10:19 +0000
ROA not after: Mon 02 Mar 2026 09:15:19 +0000
asID: 138129
IP address blocks: 103.132.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:80:98:47:e8:92:b3:17:d5:f9:35:86:93:fa:27:85:7b:a3:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Validity
Not Before: Mar 3 09:10:19 2025 GMT
Not After : Mar 2 09:15:19 2026 GMT
Subject: CN=046DCE1F2EA008BFFFB4D03BD0C18C26DA5F76E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:f0:24:c0:b3:5d:ca:60:86:36:c5:28:ad:
ab:32:e2:51:b2:30:58:97:6e:91:a6:b3:d0:f1:01:
18:d5:c5:67:13:5e:31:ce:72:b9:f2:e8:a8:74:3e:
7f:fa:e6:67:90:ed:80:2b:37:32:f2:67:6b:31:21:
13:5a:0d:5f:b2:4b:91:48:80:e7:a8:54:5c:b8:20:
f6:33:d6:c7:01:21:6b:5d:64:58:d8:db:79:85:f6:
87:3a:eb:9b:fc:bf:f1:62:e4:d2:e2:7e:ef:4f:28:
e8:68:25:7f:f3:6e:41:bf:88:46:55:c5:ac:ba:5f:
b3:53:4d:65:32:e7:08:92:6f:77:c9:bd:9a:e5:23:
76:09:de:5a:62:46:8a:d9:04:45:1d:90:77:73:0a:
5e:1f:e9:6a:2c:b1:95:80:82:2d:cc:90:53:d3:74:
a5:23:55:22:a2:a8:73:6c:38:c3:b9:ad:1b:51:7b:
a1:46:be:e6:46:25:56:5b:27:7a:0a:00:21:26:bb:
da:5c:81:0f:55:98:d0:8a:61:ba:77:ee:f5:cf:2d:
b3:00:90:21:8f:af:9d:38:9f:4a:b6:73:3b:0b:75:
1f:b2:53:78:c2:86:79:89:54:cf:86:82:7c:af:38:
ef:7f:47:f5:01:7c:dc:52:56:1f:cf:93:fd:f1:3b:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:CE:1F:2E:A0:08:BF:FF:B4:D0:3B:D0:C1:8C:26:DA:5F:76:E5
X509v3 Authority Key Identifier:
keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:78:48:39:1d:3e:59:b9:e5:28:cb:d6:8f:5d:73:ae:31:
d0:56:44:74:06:7b:99:41:97:b1:0c:62:f3:bf:41:d3:a2:fc:
cc:a4:e2:8c:a7:4b:e3:23:11:b7:03:c8:7f:3e:18:17:bf:34:
48:10:49:be:69:8a:83:ed:ef:32:13:12:62:71:9e:83:11:59:
f1:b5:93:11:20:be:79:7e:a7:ed:4d:95:56:81:31:9a:86:b2:
aa:bf:72:3c:3e:96:37:81:5b:fe:d3:22:21:84:1a:73:a9:18:
25:b6:6a:7c:a8:99:2a:20:59:af:9a:40:7a:b4:51:d6:8a:b7:
f7:f5:86:4f:9f:bc:bc:4d:ee:d6:52:98:a8:47:d9:55:e8:4e:
ee:c3:f4:48:d2:1c:48:32:56:82:be:93:32:50:bc:02:e5:79:
e1:2d:d8:f5:46:10:88:9a:dd:ef:a5:a2:6c:49:ce:c0:9d:3c:
2b:ae:2d:9f:39:43:59:49:64:29:0f:c4:00:7d:a7:8a:96:93:
af:82:14:ff:cd:86:a8:fa:8c:43:a5:32:99:c6:98:d9:52:41:
38:e2:bc:50:c3:8c:b8:aa:03:12:f1:3b:da:0c:f8:16:15:7c:
d3:15:fc:bf:a2:10:8b:b2:a1:28:3b:19:0b:18:f5:53:3f:a2:
88:93:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:19 2025 by rpki-client