Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
File: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier: 307XyhPIW2QI2y7N9VTV4M9xxs3dAQ81kE7zvvnzKPY=
Subject key identifier: EB:F4:D9:0E:8E:96:50:24:40:C4:6B:68:CF:0A:F8:D2:C6:17:98:CB
Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial: 32663FF3B09D8F329A7D61C03F945BCF06BC3EF7
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
Signing time: Sat 18 May 2024 20:00:00 +0000
ROA not before: Sat 18 May 2024 19:55:00 +0000
ROA not after: Sat 17 May 2025 20:00:00 +0000
asID: 136075
IP address blocks: 103.84.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:66:3f:f3:b0:9d:8f:32:9a:7d:61:c0:3f:94:5b:cf:06:bc:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Validity
Not Before: May 18 19:55:00 2024 GMT
Not After : May 17 20:00:00 2025 GMT
Subject: CN=EBF4D90E8E96502440C46B68CF0AF8D2C61798CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:17:5f:12:a4:40:0b:0b:bc:5f:4b:87:f9:
5f:5b:d7:c5:dd:cb:2f:ad:b7:2a:01:fd:f8:7e:8c:
bd:80:39:1a:44:8d:1d:5b:71:50:20:35:19:76:5f:
09:dd:46:27:71:07:c8:27:27:b1:b7:f8:50:c6:cf:
63:03:8d:56:d6:b6:ce:87:ac:7d:8f:08:fb:15:96:
e9:f5:d5:ea:13:12:af:40:d9:01:e4:44:5f:67:55:
c9:61:8c:8a:bf:32:be:1d:4b:cf:05:e1:f2:85:21:
6d:d3:84:c4:01:a8:c4:96:9a:b2:4b:ac:26:4f:d5:
70:4e:de:39:1c:41:18:24:ad:83:16:d3:0f:c3:23:
4d:ed:71:31:79:9a:30:95:a8:5f:d3:fb:8d:89:e9:
8b:20:41:14:8f:c0:72:dc:e7:9a:43:3d:bd:af:4a:
a0:0e:78:92:8d:c8:ef:6f:08:24:e8:68:08:eb:21:
e9:35:5b:77:dc:78:a6:c4:cd:e2:d3:87:a8:e9:1e:
44:cc:89:a2:12:ce:c8:1b:9a:a3:f7:4a:fb:3c:9f:
25:58:83:19:dc:18:62:04:5f:39:38:ea:d7:6e:bb:
2c:f2:cb:34:bf:96:53:cb:d2:0a:2c:ad:c2:b1:49:
c5:14:65:d6:d0:42:2e:0f:74:7f:cf:39:fe:da:17:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:D9:0E:8E:96:50:24:40:C4:6B:68:CF:0A:F8:D2:C6:17:98:CB
X509v3 Authority Key Identifier:
keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.209.0/24
Signature Algorithm: sha256WithRSAEncryption
28:34:36:6a:ee:ef:da:ce:d7:d5:e1:bc:45:90:1c:a9:02:3e:
33:d1:1a:8c:9e:0c:8a:a4:02:e5:c0:5f:0e:1d:b7:6f:6f:d8:
31:6d:a3:ba:84:11:8a:b0:e1:5c:7b:2a:c7:9e:c5:da:33:20:
09:1d:39:21:fb:35:11:45:bd:ad:e8:f3:e8:3f:90:9c:f4:83:
48:6a:1e:67:14:1a:34:11:6d:98:22:47:16:e1:06:31:96:bf:
68:00:cc:fe:7f:51:f0:0a:e2:c3:84:84:20:c7:f4:1f:e9:7b:
f3:8e:2c:55:f4:25:d3:42:66:18:c9:73:23:69:4f:ce:29:83:
56:49:d0:0d:8f:59:8a:e6:41:51:39:21:59:61:22:54:13:e4:
58:15:7d:13:d5:18:d0:d8:f9:6d:f4:01:78:04:e5:7f:24:ab:
76:25:12:89:86:59:1c:fe:da:ac:0e:c3:73:20:86:98:56:2e:
b8:2e:3e:13:1c:31:da:72:04:f9:24:09:67:9f:aa:a4:03:01:
67:93:3f:98:7c:fb:ab:e0:08:7f:32:e9:f6:fc:ac:0b:ff:fa:
51:c8:57:2e:54:24:10:f5:f3:9b:47:0f:b4:76:ca:09:8a:c9:
f7:1f:75:9f:de:15:d5:87:3e:ed:13:85:3c:35:3b:46:bf:4f:
ce:90:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:40:05 2025 by rpki-client