Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa
File: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier: BJ2aY0LbswsacLKabgAGEft2mjxk7WoNhBc4Llw2ciI=
Subject key identifier: 8A:E6:0B:46:40:BC:95:B2:C1:10:9A:FB:A3:9D:AC:50:86:B1:F5:52
Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial: 3F6B3ABFA600CFB80795A0F06E146D7E943A652F
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa
Signing time: Mon 20 May 2024 13:00:00 +0000
ROA not before: Mon 20 May 2024 12:55:00 +0000
ROA not after: Mon 19 May 2025 13:00:00 +0000
asID: 136075
IP address blocks: 103.84.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6b:3a:bf:a6:00:cf:b8:07:95:a0:f0:6e:14:6d:7e:94:3a:65:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Validity
Not Before: May 20 12:55:00 2024 GMT
Not After : May 19 13:00:00 2025 GMT
Subject: CN=8AE60B4640BC95B2C1109AFBA39DAC5086B1F552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:46:4a:00:a2:1d:7e:86:1a:1f:46:1f:eb:
8a:cb:05:0a:74:68:7f:8f:ba:e1:e6:3f:63:ea:3d:
36:67:af:84:c7:5f:8d:4e:db:19:db:52:3e:1e:1d:
18:41:1d:71:98:54:d6:ed:03:e1:47:6e:0b:bf:e5:
d3:d6:4e:53:a0:d3:74:c3:fa:e6:5b:0e:8b:bd:65:
e3:f6:99:45:13:d2:7b:ce:b6:b7:77:5b:11:f8:fa:
12:28:7a:bc:ec:d3:e4:13:1c:d5:4c:e3:f3:8f:be:
a5:a5:24:78:28:00:0b:64:f5:00:b1:eb:b2:d4:65:
ef:86:65:a6:26:a9:84:9d:43:f4:03:10:8f:5a:03:
e6:36:dd:2e:ca:2d:2c:f4:83:94:ec:b7:42:87:61:
31:be:e5:e4:6b:01:09:df:19:5d:22:e5:90:92:bf:
21:4b:ad:7d:80:f3:8e:e3:10:b9:69:3e:30:66:35:
1c:0a:63:ed:a1:d3:9c:b2:90:53:c4:b1:56:6e:f0:
55:7f:ff:df:a2:fa:01:96:16:5e:77:c8:e0:20:bf:
8d:03:e2:2c:50:64:d8:8a:4a:35:78:e1:bd:a4:64:
26:20:ee:ad:eb:2c:5b:c4:69:35:c6:bb:27:f2:a4:
ce:aa:73:c2:24:d0:10:26:ca:ed:4d:b9:80:50:c2:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:0B:46:40:BC:95:B2:C1:10:9A:FB:A3:9D:AC:50:86:B1:F5:52
X509v3 Authority Key Identifier:
keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2b:80:8f:97:35:bf:1c:2e:57:19:84:04:db:23:ea:01:56:
f0:8e:d2:4c:c0:cc:65:e5:46:22:ff:c9:f2:32:d5:34:04:7e:
a0:1e:1f:73:3c:af:5e:8a:09:56:15:5d:5f:c4:cb:94:3e:26:
26:06:78:bd:ba:cc:a0:28:1e:79:d7:8e:e9:1f:9e:e9:86:75:
1a:f5:94:cc:f0:fd:20:92:70:3c:64:be:1e:74:81:3d:64:1e:
6d:e6:90:44:a1:db:17:7a:66:02:07:38:b4:84:e7:15:ea:0f:
63:f5:fa:03:6e:f6:e4:0f:28:af:ba:39:ad:ce:b2:00:4b:32:
bc:a8:fa:91:4e:eb:eb:43:11:44:19:36:2e:f2:b1:54:65:ff:
86:b6:2c:ab:44:d5:9f:d0:ab:0b:92:52:e9:cf:f1:d5:5b:22:
e6:b4:03:c1:0d:e6:be:43:d8:95:f8:2d:01:89:15:ca:d8:37:
7d:15:c8:bf:6c:66:c8:ef:f0:e2:c1:6f:da:aa:89:c7:1b:c1:
77:32:0a:a3:03:5b:6a:55:71:fd:09:a0:a3:bf:15:2e:fc:07:
5f:27:c2:2e:24:c4:9a:71:78:32:ab:5e:6b:80:1c:f2:36:c5:
68:a9:68:33:4f:d2:b5:4b:0e:2b:e6:04:fd:c5:c9:69:5c:39:
dd:09:8c:37
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUP2s6v6YAz7gHlaDwbhRtfpQ6ZS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD
QUVBREM5NjAeFw0yNDA1MjAxMjU1MDBaFw0yNTA1MTkxMzAwMDBaMDMxMTAvBgNV
BAMTKDhBRTYwQjQ2NDBCQzk1QjJDMTEwOUFGQkEzOURBQzUwODZCMUY1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtc0ZKAKIdfoYaH0Yf64rLBQp0
aH+PuuHmP2PqPTZnr4THX41O2xnbUj4eHRhBHXGYVNbtA+FHbgu/5dPWTlOg03TD
+uZbDou9ZeP2mUUT0nvOtrd3WxH4+hIoerzs0+QTHNVM4/OPvqWlJHgoAAtk9QCx
67LUZe+GZaYmqYSdQ/QDEI9aA+Y23S7KLSz0g5Tst0KHYTG+5eRrAQnfGV0i5ZCS
vyFLrX2A847jELlpPjBmNRwKY+2h05yykFPEsVZu8FV//9+i+gGWFl53yOAgv40D
4ixQZNiKSjV44b2kZCYg7q3rLFvEaTXGuyfypM6qc8Ik0BAmyu1NuYBQwsKXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUiuYLRkC8lbLBEJr7o52sUIax9VIwHwYDVR0j
BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx
NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB
REM5Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMGU1YWMyLWI2YmItNGJlYy05
ZGM5LWU0MzBhNjczMzIxNi8wLzMxMzAzMzJlMzgzNDJlMzIzMDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TQMA0GCSqG
SIb3DQEBCwUAA4IBAQBKK4CPlzW/HC5XGYQE2yPqAVbwjtJMwMxl5UYi/8nyMtU0
BH6gHh9zPK9eiglWFV1fxMuUPiYmBni9usygKB55147pH57phnUa9ZTM8P0gknA8
ZL4edIE9ZB5t5pBEodsXemYCBzi0hOcV6g9j9foDbvbkDyivujmtzrIASzK8qPqR
TuvrQxFEGTYu8rFUZf+GtiyrRNWf0KsLklLpz/HVWyLmtAPBDea+Q9iV+C0BiRXK
2Dd9Fci/bGbI7/DiwW/aqonHG8F3MgqjA1tqVXH9CaCjvxUu/AdfJ8IuJMSacXgy
q15rgBzyNsVoqWgzT9K1Sw4r5gT9xclpXDndCYw3
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:54 2025 by rpki-client