Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa
File: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (raw, json)
Hash identifier: 3rPKYUZalojIRm9OVoB6zRFi27r01gp3XfIoDBOCPmk=
Subject key identifier: 65:86:E0:2C:82:DF:35:92:4E:A2:4D:E5:70:A6:BE:ED:0A:A5:AC:DE
Certificate issuer: /CN=F1F25C19AB419E370912452242B8B55038581157
Certificate serial: 67198887532E0C8121911887E2A11856FE09D251
Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa
Signing time: Fri 14 Mar 2025 06:00:00 +0000
ROA not before: Fri 14 Mar 2025 05:55:00 +0000
ROA not after: Fri 13 Mar 2026 06:00:00 +0000
asID: 150483
IP address blocks: 103.54.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:19:88:87:53:2e:0c:81:21:91:18:87:e2:a1:18:56:fe:09:d2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F25C19AB419E370912452242B8B55038581157
Validity
Not Before: Mar 14 05:55:00 2025 GMT
Not After : Mar 13 06:00:00 2026 GMT
Subject: CN=6586E02C82DF35924EA24DE570A6BEED0AA5ACDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:94:66:5d:7c:95:aa:86:b5:15:bf:f3:b1:
b6:22:17:97:c6:bc:c8:ad:bd:10:9b:d7:8d:85:36:
8d:02:80:f3:d7:48:59:a1:3b:2b:91:7d:0f:7f:49:
3c:40:f8:0f:f7:00:05:8f:b9:e8:71:e5:62:f7:04:
c0:4e:11:b2:06:b4:60:9f:49:e2:ca:67:f0:88:6c:
aa:85:5f:1d:0d:89:1c:3b:ac:a9:3b:80:e8:c2:fb:
5b:76:4e:11:7b:ae:ec:4b:9b:3e:c4:2b:36:8f:d7:
80:a8:19:25:6b:59:42:43:d2:73:10:36:c9:fa:71:
e9:f7:5a:b0:cd:b6:34:02:ad:b4:c3:ba:1a:6e:5b:
86:aa:93:fd:13:74:b8:cd:cd:1e:80:10:44:6c:f1:
ef:98:d9:01:c0:cb:ee:38:4b:8d:3a:2a:23:d7:94:
fc:c0:46:83:18:72:fd:21:15:bf:6d:aa:31:76:19:
c8:8c:79:67:87:fa:02:3c:21:ca:d2:ea:38:7f:53:
ea:bb:85:e3:26:fe:6b:ec:ec:0f:a7:f8:b9:ba:80:
5d:ad:67:f3:43:fb:65:17:43:f6:2d:8f:cb:dd:07:
e5:64:d5:49:7f:2f:78:3f:bc:2d:57:18:25:b2:db:
f6:08:4c:89:d1:de:8c:8c:b9:ab:6f:4d:92:82:01:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:E0:2C:82:DF:35:92:4E:A2:4D:E5:70:A6:BE:ED:0A:A5:AC:DE
X509v3 Authority Key Identifier:
keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.168.0/24
Signature Algorithm: sha256WithRSAEncryption
10:06:92:32:df:50:2f:78:3a:cf:4a:a1:b6:d1:07:30:8b:da:
5b:8f:bf:5a:68:55:0d:c0:f0:d2:4d:c4:56:d3:7e:53:0e:30:
5a:25:ba:84:83:14:b8:c4:25:9b:6d:2e:de:5d:0b:4a:c6:5d:
d1:b6:68:d9:a2:51:24:f5:9f:6e:ac:d9:9e:4f:c7:f6:04:1b:
99:b8:3c:0c:b7:2f:76:b6:2e:5f:ac:c9:a9:cc:36:6a:a8:6b:
c3:e3:28:37:95:31:37:52:35:05:92:1a:f3:a1:e5:03:cb:cc:
af:6e:f7:1c:c3:60:60:05:f4:81:0a:42:6c:81:5e:03:34:50:
96:c4:cc:c8:c9:e4:ff:b0:20:8c:fb:99:d3:8f:36:72:81:60:
4a:39:b2:78:a2:27:4a:76:ae:38:04:7f:98:06:05:7f:4f:ef:
9c:63:6e:96:92:ab:6e:c9:35:9b:02:02:66:57:31:e6:d1:ce:
05:1d:9b:3e:b3:8c:db:55:e2:4b:fa:a2:26:06:7e:d0:13:e7:
9c:0a:38:64:90:24:d8:1d:b7:85:04:92:5d:ee:83:d2:1e:23:
f1:26:5a:5c:51:e3:3c:c0:01:6d:a8:05:69:38:70:e1:0e:de:
c2:90:d6:0e:cb:47:2e:84:2c:5d:c2:90:99:43:d8:f6:bc:11:
7b:11:66:bd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZxmIh1MuDIEhkRiH4qEYVv4J0lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAz
ODU4MTE1NzAeFw0yNTAzMTQwNTU1MDBaFw0yNjAzMTMwNjAwMDBaMDMxMTAvBgNV
BAMTKDY1ODZFMDJDODJERjM1OTI0RUEyNERFNTcwQTZCRUVEMEFBNUFDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjZRmXXyVqoa1Fb/zsbYiF5fG
vMitvRCb142FNo0CgPPXSFmhOyuRfQ9/STxA+A/3AAWPuehx5WL3BMBOEbIGtGCf
SeLKZ/CIbKqFXx0NiRw7rKk7gOjC+1t2ThF7ruxLmz7EKzaP14CoGSVrWUJD0nMQ
Nsn6cen3WrDNtjQCrbTDuhpuW4aqk/0TdLjNzR6AEERs8e+Y2QHAy+44S406KiPX
lPzARoMYcv0hFb9tqjF2GciMeWeH+gI8IcrS6jh/U+q7heMm/mvs7A+n+Lm6gF2t
Z/ND+2UXQ/Ytj8vdB+Vk1Ul/L3g/vC1XGCWy2/YITInR3oyMuatvTZKCAcYvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZYbgLILfNZJOok3lcKa+7QqlrN4wHwYDVR0j
BBgwFoAU8fJcGatBnjcJEkUiQri1UDhYEVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZTMzMDYzMy1hN2QxLTRkMGEtYTFjYy1iNmMzZWVkZmJjMTcvMC9GMUYyNUMxOUFC
NDE5RTM3MDkxMjQ1MjI0MkI4QjU1MDM4NTgxMTU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAzODU4
MTE1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZlMzMwNjMzLWE3ZDEtNGQwYS1h
MWNjLWI2YzNlZWRmYmMxNy8wLzMxMzAzMzJlMzUzNDJlMzEzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzaoMA0GCSqG
SIb3DQEBCwUAA4IBAQAQBpIy31AveDrPSqG20Qcwi9pbj79aaFUNwPDSTcRW035T
DjBaJbqEgxS4xCWbbS7eXQtKxl3RtmjZolEk9Z9urNmeT8f2BBuZuDwMty92ti5f
rMmpzDZqqGvD4yg3lTE3UjUFkhrzoeUDy8yvbvccw2BgBfSBCkJsgV4DNFCWxMzI
yeT/sCCM+5nTjzZygWBKObJ4oidKdq44BH+YBgV/T++cY26WkqtuyTWbAgJmVzHm
0c4FHZs+s4zbVeJL+qImBn7QE+ecCjhkkCTYHbeFBJJd7oPSHiPxJlpcUeM8wAFt
qAVpOHDhDt7CkNYOy0cuhCxdwpCZQ9j2vBF7EWa9
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:21 2025 by rpki-client