Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31362e302f32342d3234203d3e2030.roa
File: 3130332e3137342e31362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: R+Xsj942oVIU56vgb7MBSOwNXGuK6EmVsnXWJ+Njpjw=
Subject key identifier: 96:98:46:6E:58:BC:54:FE:7E:6A:3E:5B:97:4B:D2:4D:4D:E6:2E:78
Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4
Certificate serial: 20C82CCB7FDB390A40379205E1A115BAFF473D0D
Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31362e302f32342d3234203d3e2030.roa
Signing time: Fri 14 Mar 2025 13:38:11 +0000
ROA not before: Fri 14 Mar 2025 13:33:11 +0000
ROA not after: Fri 13 Mar 2026 13:38:11 +0000
asID: 0
IP address blocks: 103.174.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c8:2c:cb:7f:db:39:0a:40:37:92:05:e1:a1:15:ba:ff:47:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4
Validity
Not Before: Mar 14 13:33:11 2025 GMT
Not After : Mar 13 13:38:11 2026 GMT
Subject: CN=9698466E58BC54FE7E6A3E5B974BD24D4DE62E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:99:14:84:b5:8f:7d:bf:3c:e3:f4:2b:bc:
1e:68:91:db:d5:cc:49:63:b0:04:6d:76:bf:da:29:
64:a5:49:4f:d1:68:11:10:31:3b:f5:87:75:8f:b1:
43:f3:32:e8:0c:96:e2:67:5e:47:92:ed:4e:0e:0d:
cf:1c:1e:36:2c:86:6b:84:b4:94:03:36:1c:f1:bf:
f7:f7:1b:b1:0a:55:0c:f9:2a:7f:60:cd:e0:df:6d:
e2:93:89:fb:57:d2:73:c5:1c:3e:b8:5d:b9:59:6c:
69:e8:92:cd:6e:d5:55:05:2c:c2:59:88:b5:5a:a4:
d1:c6:f1:f7:8c:7e:e8:e9:71:27:2a:6b:df:f6:bb:
ae:81:24:6e:0f:ef:f0:7c:9c:b2:87:89:29:41:42:
02:bb:45:b5:e1:91:d8:2c:3b:b4:76:ba:2d:6c:11:
2a:38:1e:89:a4:8a:75:35:79:cb:7d:71:81:51:03:
a2:c7:52:16:cc:59:a3:e7:79:3c:24:d0:00:82:d2:
60:f0:81:a3:60:9e:f4:15:35:7a:95:04:da:de:c1:
2f:8d:0e:8d:4c:8c:d4:45:6b:8e:8a:72:b9:d1:b7:
38:7b:e4:15:e1:54:14:08:67:19:be:a2:21:3f:86:
05:17:80:b4:8b:ab:b5:c8:a5:d6:60:a9:e7:ca:52:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:46:6E:58:BC:54:FE:7E:6A:3E:5B:97:4B:D2:4D:4D:E6:2E:78
X509v3 Authority Key Identifier:
keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e2:22:3b:08:f4:94:68:a8:b7:d7:b7:73:5d:81:cf:27:8f:
57:3f:28:00:5d:02:b4:e5:7c:2a:fc:c7:d9:15:13:51:ef:25:
88:13:bf:1a:b3:10:9c:f5:17:83:93:d9:44:07:9a:c1:53:2c:
9a:ba:2a:4c:d6:c8:19:cd:a2:6e:3a:9e:a6:a2:f5:44:4d:ec:
4b:03:9c:0e:a7:fb:bb:c4:f9:ac:bc:c2:7d:90:b3:dc:4f:0f:
0d:8e:0e:46:a5:91:1a:c2:c1:7c:7a:a6:07:60:42:5b:93:85:
44:3d:89:f5:ef:27:f7:19:ba:57:e2:c2:7b:f4:3d:df:98:f6:
45:a8:3a:ef:8f:9d:0c:3e:47:59:0d:b4:26:f7:54:2a:09:21:
2d:92:ed:a0:af:9d:00:54:34:2f:15:71:9d:db:7d:d7:72:6d:
ff:87:39:11:03:63:d3:b7:90:96:76:20:ca:4d:03:23:5b:03:
ba:83:18:81:e2:45:b3:ec:88:a1:e5:66:64:d2:b7:6b:ab:b6:
c1:a4:65:9b:08:d4:8e:4e:7f:6e:16:ac:58:76:80:c6:6a:26:
5f:15:7d:d6:7b:99:b8:11:07:d6:50:70:32:01:56:77:aa:fa:
57:c7:74:59:8a:32:fb:f9:6c:43:5e:e9:98:d6:8c:fb:df:df:
3b:47:3d:fc
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUIMgsy3/bOQpAN5IF4aEVuv9HPQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG
RTVCRTVGNDAeFw0yNTAzMTQxMzMzMTFaFw0yNjAzMTMxMzM4MTFaMDMxMTAvBgNV
BAMTKDk2OTg0NjZFNThCQzU0RkU3RTZBM0U1Qjk3NEJEMjRENERFNjJFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzB5kUhLWPfb884/QrvB5okdvV
zEljsARtdr/aKWSlSU/RaBEQMTv1h3WPsUPzMugMluJnXkeS7U4ODc8cHjYshmuE
tJQDNhzxv/f3G7EKVQz5Kn9gzeDfbeKTiftX0nPFHD64XblZbGnoks1u1VUFLMJZ
iLVapNHG8feMfujpcScqa9/2u66BJG4P7/B8nLKHiSlBQgK7RbXhkdgsO7R2ui1s
ESo4HomkinU1ect9cYFRA6LHUhbMWaPneTwk0ACC0mDwgaNgnvQVNXqVBNrewS+N
Do1MjNRFa46KcrnRtzh75BXhVBQIZxm+oiE/hgUXgLSLq7XIpdZgqefKUv3HAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUlphGbli8VP5+aj5bl0vSTU3mLngwHwYDVR0j
BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF
MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC
RTVGNC5jZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw
MDctODUxOTQ4OWNiMWM0LzAvMzEzMDMzMmUzMTM3MzQyZTMxMzYyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeuEDANBgkqhkiG9w0BAQsFAAOC
AQEAtuIiOwj0lGiot9e3c12BzyePVz8oAF0CtOV8KvzH2RUTUe8liBO/GrMQnPUX
g5PZRAeawVMsmroqTNbIGc2ibjqepqL1RE3sSwOcDqf7u8T5rLzCfZCz3E8PDY4O
RqWRGsLBfHqmB2BCW5OFRD2J9e8n9xm6V+LCe/Q935j2Rag674+dDD5HWQ20JvdU
KgkhLZLtoK+dAFQ0LxVxndt913Jt/4c5EQNj07eQlnYgyk0DI1sDuoMYgeJFs+yI
oeVmZNK3a6u2waRlmwjUjk5/bhasWHaAxmomXxV91nuZuBEH1lBwMgFWd6r6V8d0
WYoy+/lsQ17pmNaM+9/fO0c9/A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:48:28 2025 by rpki-client