Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
File: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (raw, json)
Hash identifier: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=
Subject key identifier: E2:D3:2D:0C:FD:01:A9:C7:B0:C8:FC:A7:F6:E3:68:DA:19:60:B4:99
Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5
Certificate serial: 27A304735DB739E84EFF89543B7176EDCA0AC0A3
Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
Signing time: Tue 11 Mar 2025 10:22:11 +0000
ROA not before: Tue 11 Mar 2025 10:17:11 +0000
ROA not after: Tue 10 Mar 2026 10:22:11 +0000
asID: 151584
IP address blocks: 103.216.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a3:04:73:5d:b7:39:e8:4e:ff:89:54:3b:71:76:ed:ca:0a:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5
Validity
Not Before: Mar 11 10:17:11 2025 GMT
Not After : Mar 10 10:22:11 2026 GMT
Subject: CN=E2D32D0CFD01A9C7B0C8FCA7F6E368DA1960B499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:c5:78:8c:f9:42:0c:25:4d:c8:b1:79:92:
0f:c5:6f:fa:8b:94:38:c3:44:9e:f9:0e:e3:e9:97:
12:b8:c3:42:fb:5e:30:a1:80:70:23:5f:2b:f0:50:
86:82:5a:da:99:b5:78:d2:04:7b:e0:c3:be:cd:bf:
d3:7b:98:3c:68:5b:de:9e:65:f5:82:4d:8c:5a:7a:
0f:6e:1e:7c:3a:ee:f5:62:2f:38:9b:2f:e0:e2:f8:
e6:83:9e:47:b6:25:21:62:12:c7:89:b2:45:6b:ab:
c3:41:ce:23:89:f3:11:9a:6f:3a:ad:81:a0:72:40:
18:ca:a5:ea:6d:0c:6f:22:f5:bc:5d:8f:2a:aa:37:
b2:33:44:53:a0:f4:a8:d6:c6:f7:54:eb:a7:60:b9:
84:71:1a:62:4a:8a:7a:7f:b9:71:a5:41:f0:b2:82:
e8:b7:60:4e:3e:6d:6e:9a:1e:b0:cf:4d:c9:4b:44:
38:81:e4:d5:7b:bf:49:0e:72:70:6b:f9:8c:8f:9a:
d1:38:65:45:a3:5b:e8:b6:82:fb:86:fd:24:1f:36:
6a:7d:0f:b6:a9:cd:3e:22:47:ee:b7:b6:4f:f8:ed:
a4:64:1e:46:7b:21:64:9f:73:52:e1:f0:5f:1b:cf:
a5:6b:17:0e:07:83:5b:e6:c9:5c:dc:10:b6:7c:b2:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:2D:0C:FD:01:A9:C7:B0:C8:FC:A7:F6:E3:68:DA:19:60:B4:99
X509v3 Authority Key Identifier:
keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:61:26:d8:4f:78:90:8a:85:7c:47:db:c8:f5:b6:fd:60:6f:
44:42:cb:48:58:39:21:ef:fa:e5:ce:6f:e1:38:55:22:69:07:
2a:fb:04:d9:87:c3:a1:92:d2:14:33:da:23:38:d4:79:ca:1c:
33:d7:43:ee:68:e8:b7:34:69:dc:59:03:0c:69:98:95:03:f1:
4e:39:f6:4e:fb:f9:ea:dc:37:57:88:21:5e:c1:4d:ec:a0:a0:
2c:e1:26:1d:ac:3b:64:39:ff:5c:a8:58:ab:ca:fe:5a:e0:03:
62:52:7e:a7:cb:30:c2:dc:db:1a:18:5f:57:c6:2d:e7:25:ab:
47:88:9a:9d:f3:96:6b:94:24:14:0f:ad:57:74:6c:ef:e5:48:
19:7f:7f:5b:7f:4b:12:ea:50:95:c1:6f:fb:a4:49:97:c9:d9:
61:ec:d8:e9:61:4b:da:34:62:9a:2f:03:b7:68:e4:5f:99:e8:
a0:7d:1d:1c:9c:fe:18:86:7b:ce:c6:f5:91:a8:a6:0b:58:01:
1d:ff:f4:0f:5e:5a:9d:ee:2f:10:3f:c4:4e:6a:8f:c2:16:d2:
75:e3:73:08:00:00:11:03:fe:83:6f:5a:96:8b:93:40:f1:1b:
71:1f:94:2b:c3:cb:09:fb:3d:5a:98:ea:a6:77:88:55:6e:20:
d1:d2:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:18 2025 by rpki-client