Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa
File: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (raw, json)
Hash identifier: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=
Subject key identifier: FC:D5:2B:83:48:E9:38:96:DE:70:AB:4D:A1:C9:8E:B9:89:7F:4E:9A
Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66
Certificate serial: 57E3A8B0D2B1DAD28C60AC3246A28B3C3D2E2077
Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa
Signing time: Wed 26 Feb 2025 06:32:23 +0000
ROA not before: Wed 26 Feb 2025 06:27:23 +0000
ROA not after: Wed 25 Feb 2026 06:32:23 +0000
asID: 152373
IP address blocks: 103.176.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e3:a8:b0:d2:b1:da:d2:8c:60:ac:32:46:a2:8b:3c:3d:2e:20:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66
Validity
Not Before: Feb 26 06:27:23 2025 GMT
Not After : Feb 25 06:32:23 2026 GMT
Subject: CN=FCD52B8348E93896DE70AB4DA1C98EB9897F4E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:ec:13:41:eb:c2:3b:86:42:01:a5:94:88:
ef:7a:7f:e9:40:06:6e:fd:cd:68:ab:dd:67:64:fc:
05:db:ab:b5:fc:01:f6:6e:60:d1:78:e5:0c:53:a7:
9a:71:00:7e:c8:9f:65:e7:44:a8:74:4c:d5:d6:26:
85:dd:d1:db:8f:38:3c:d9:bb:81:3f:65:02:1d:88:
f6:12:3c:ab:73:bd:fa:6f:af:79:64:ab:d8:ab:ec:
bb:71:fa:9b:67:04:12:a6:7b:5d:62:c0:b7:84:00:
8b:13:75:98:1b:e0:06:22:26:0c:94:ad:17:32:64:
41:63:02:06:0f:a7:ca:00:a4:aa:dc:a8:44:77:3f:
a3:05:49:ad:ad:4a:a1:f1:f5:13:c1:37:76:87:5d:
09:59:87:40:40:9c:8b:e0:ad:fd:98:26:62:df:86:
a7:1d:2f:39:4a:3f:20:04:f9:66:28:a1:7d:8c:05:
6b:4b:e0:7d:bc:88:f2:b7:dc:62:f3:82:53:ff:55:
b2:5a:da:ee:c3:6e:16:47:2c:69:d3:30:4e:3c:b9:
2f:98:d4:e1:e9:4d:f8:d2:3a:50:7f:75:62:72:df:
c7:53:21:e6:34:4b:fe:d8:78:b9:4f:98:2e:c9:6e:
2b:76:c7:9f:fe:1d:08:7f:fc:f6:1a:d6:60:25:0f:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:2B:83:48:E9:38:96:DE:70:AB:4D:A1:C9:8E:B9:89:7F:4E:9A
X509v3 Authority Key Identifier:
keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.201.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f8:3a:8d:2b:71:d3:c5:75:97:b9:a5:3b:5a:9b:be:a1:ac:
e6:ba:85:50:1f:c8:d7:bb:b6:01:98:87:16:ac:70:e7:34:d9:
23:54:e8:18:f6:c3:8d:d2:cb:10:13:b8:8d:c5:bc:4f:b1:63:
f0:67:b4:53:49:97:8f:62:19:50:ce:22:94:5f:dc:91:ab:38:
2a:37:d2:69:6e:fd:81:94:1c:48:7a:43:74:b6:87:c7:95:ba:
14:22:13:2e:49:af:19:f2:a7:f5:59:1f:1e:ef:65:e1:a8:46:
ef:f1:a6:02:3a:22:06:b4:bd:20:4f:37:f7:72:3a:09:11:b9:
e7:e7:17:b7:db:25:9e:a4:8e:c1:5a:61:11:a6:ff:cf:ad:6a:
58:ec:84:64:31:9d:d2:0c:9d:24:dd:c5:19:79:75:bf:c5:5d:
dc:4f:4d:93:28:07:7c:e3:91:42:03:f6:e6:e4:8a:b9:be:0a:
8f:25:2a:c1:04:d0:04:4b:20:ad:40:02:d2:0c:e5:41:9f:bd:
ae:3a:e0:fa:41:4b:9e:ec:36:05:3e:19:09:ce:e0:2c:19:f1:
2b:43:85:11:10:69:58:b7:8e:7a:65:e5:fd:59:b1:67:fd:30:
ba:49:4c:78:b3:a5:af:d0:41:7d:1c:4c:1b:ef:2c:5e:9c:27:
c2:b8:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:47 2025 by rpki-client