Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
File: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (raw, json)
Hash identifier: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=
Subject key identifier: E6:E2:44:BA:33:07:52:3D:F1:DA:1C:76:BB:70:DD:45:59:8A:F8:EF
Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
Certificate serial: 782121162150F4F011FA1443EA557D04C9FCC314
Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
Signing time: Fri 28 Mar 2025 10:00:00 +0000
ROA not before: Fri 28 Mar 2025 09:55:00 +0000
ROA not after: Fri 27 Mar 2026 10:00:00 +0000
asID: 141611
IP address blocks: 103.161.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:21:21:16:21:50:f4:f0:11:fa:14:43:ea:55:7d:04:c9:fc:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
Validity
Not Before: Mar 28 09:55:00 2025 GMT
Not After : Mar 27 10:00:00 2026 GMT
Subject: CN=E6E244BA3307523DF1DA1C76BB70DD45598AF8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:0c:bb:8a:21:bc:82:0d:a7:dd:f0:e9:2b:
e7:82:f2:07:94:98:4c:1c:95:f8:48:38:cf:41:f6:
55:0d:0b:2e:c2:3d:17:ee:c9:b0:bf:3c:b4:a4:41:
92:3f:e8:20:11:db:6e:6b:af:3b:09:3b:03:cc:8a:
68:ef:f5:4e:fd:d2:86:a0:7e:f4:5b:8a:d9:1b:18:
79:d3:64:ad:35:7a:d6:83:e5:01:eb:c3:15:31:10:
c8:eb:da:0c:55:8b:29:8d:2f:24:77:19:52:9d:eb:
b2:06:61:bf:d0:01:85:81:66:b7:8f:76:89:6c:5d:
a2:8b:f8:cd:d4:ab:d0:44:3e:bb:fc:17:23:b8:9d:
b5:24:9e:9e:27:ea:00:b9:cd:4e:e1:a4:a5:0b:55:
20:2a:14:fb:b8:6b:0c:05:95:51:e0:7d:4f:57:8d:
b1:40:40:8b:e3:de:b4:38:51:b0:c5:33:7d:19:f1:
3d:4b:a6:1f:2d:15:65:04:71:82:dd:ab:df:5d:af:
d1:3a:c5:3e:db:b8:8a:b8:5b:5a:4c:23:59:1a:89:
3d:93:24:31:2e:46:3e:c5:1e:ff:77:7b:13:a0:cf:
dd:ae:3c:72:d7:a5:69:9f:ba:68:d9:5e:ef:13:d0:
a7:6c:76:71:da:60:c4:71:38:2a:f9:d7:c1:ea:44:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:44:BA:33:07:52:3D:F1:DA:1C:76:BB:70:DD:45:59:8A:F8:EF
X509v3 Authority Key Identifier:
keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.76.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bb:5a:50:78:fa:50:c2:e5:68:ac:6b:7a:7b:83:db:00:ec:
db:9f:d9:b8:8c:b0:50:cd:41:8c:e2:d2:e0:cb:d6:2e:89:63:
0f:36:a3:eb:bb:ec:d2:32:d6:a9:67:d0:43:2c:e9:ad:32:b9:
06:c4:de:06:bb:3e:b4:99:3c:33:36:8c:e9:c3:02:0d:ad:c9:
5a:94:8c:a8:f8:3c:cb:5d:94:11:55:b8:7c:5a:88:d3:84:13:
e2:74:ad:b1:f3:e3:68:ee:e5:02:9c:5f:6c:2a:6f:5f:64:77:
07:df:1d:ed:7b:a8:ee:ee:d0:e5:fe:6f:37:37:e6:64:19:49:
d2:0f:6c:d8:f2:bb:0d:dd:73:c9:b5:c5:4b:aa:b0:37:bf:68:
8d:1f:48:01:e9:4c:85:2e:5c:43:5f:aa:58:6a:51:5d:12:02:
d9:22:a2:72:81:52:58:2f:77:6a:b8:bf:14:7f:f2:8b:d7:29:
59:b7:c4:c0:7f:e9:a7:6e:53:94:35:84:fa:e4:42:94:05:89:
59:1a:ac:3e:99:ed:56:8f:8e:6a:6f:8f:aa:ac:93:70:07:80:
05:61:1b:1a:d7:db:a1:92:fe:15:da:1f:26:3c:b7:b5:79:50:
83:63:53:5f:44:cc:96:33:49:57:6e:31:45:85:cf:76:43:b0:
b6:b5:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:14 2025 by rpki-client