Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa
File: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (raw, json)
Hash identifier: EujBjxRJYNH/sI1Xc4HHljSrMpppuOLQjoCrFaHP+ps=
Subject key identifier: EF:2D:35:D1:41:FA:B5:F6:97:7F:CD:6B:EF:57:35:23:2E:68:AA:C8
Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial: 566893E02596E8A7B4B0497AE7301992BA421DF5
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa
Signing time: Wed 01 May 2024 07:01:50 +0000
ROA not before: Wed 01 May 2024 06:56:50 +0000
ROA not after: Wed 30 Apr 2025 07:01:50 +0000
asID: 142315
IP address blocks: 103.168.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:68:93:e0:25:96:e8:a7:b4:b0:49:7a:e7:30:19:92:ba:42:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Validity
Not Before: May 1 06:56:50 2024 GMT
Not After : Apr 30 07:01:50 2025 GMT
Subject: CN=EF2D35D141FAB5F6977FCD6BEF5735232E68AAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:d1:1d:29:33:7a:44:e6:55:11:6e:6e:71:
e0:cb:62:a9:7b:be:60:44:22:45:88:60:f0:f3:12:
ea:74:f9:58:7f:23:f2:c7:bd:26:5d:31:71:a6:8e:
40:2b:9b:21:eb:9f:87:0f:7b:d6:c4:f1:74:df:27:
57:c7:9e:3a:15:52:b3:1c:a6:3c:6e:a2:6d:70:2a:
c2:98:5a:4e:c8:88:9a:41:35:20:f0:2d:c5:e1:41:
b0:14:06:0b:7e:ca:e8:17:3d:24:3e:fd:61:4d:07:
43:c5:5c:84:78:c4:87:4f:99:3d:d9:f2:fa:7e:f8:
22:1c:1f:64:b5:09:d2:5e:24:87:55:7b:49:66:3f:
d7:5d:21:08:6f:96:05:6b:21:e1:b9:19:ae:43:d1:
81:37:bc:d1:89:c7:d2:06:3b:06:f5:96:30:a3:04:
ef:17:35:74:54:81:cb:30:3b:ff:0c:4e:ce:3f:84:
d3:b5:f5:1b:cc:13:b9:45:1f:7d:14:2b:34:26:9f:
45:00:bb:c9:7f:46:fc:28:81:e0:54:60:48:98:b6:
59:9a:f5:e7:fb:e7:97:f1:0c:a0:75:7f:6b:00:84:
10:d2:70:f8:6b:66:0c:ba:a4:70:98:03:00:8f:9a:
41:ab:22:73:99:17:78:3c:45:80:ac:6b:06:66:5a:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:35:D1:41:FA:B5:F6:97:7F:CD:6B:EF:57:35:23:2E:68:AA:C8
X509v3 Authority Key Identifier:
keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.149.0/24
Signature Algorithm: sha256WithRSAEncryption
91:79:fc:ab:4c:b1:72:9e:f3:ff:64:8c:cd:bc:28:79:e2:ac:
32:09:a5:1f:97:24:b8:2e:ee:2a:d6:9a:9e:4f:ec:dc:5e:8b:
4d:86:5f:c7:5c:d9:f1:3a:d3:a4:fa:f0:05:14:9d:27:a9:0d:
2e:ca:18:24:e4:98:0f:f0:6e:69:c3:9a:fe:56:a1:18:a4:81:
94:4d:5a:f8:bf:54:e2:7c:a0:98:8b:f0:b0:75:09:18:4f:f2:
c7:2a:0b:9f:c4:66:01:ec:06:aa:01:f8:e8:50:9d:d3:c8:27:
50:da:ad:3c:00:0d:ad:6c:82:5b:d4:36:ab:4a:6a:ff:d3:0f:
33:60:fc:7d:0c:b4:42:80:ef:90:9e:a9:6f:7d:7d:9a:63:43:
21:0e:89:42:d0:56:2b:f0:3c:63:81:a6:71:6d:19:e3:73:fb:
90:e6:44:db:8f:c3:55:b6:a5:68:46:c4:41:55:48:14:94:6e:
f7:d0:14:58:e3:f0:76:29:78:cc:ae:e5:92:26:49:5e:b8:bf:
3f:e3:c1:75:be:9e:85:0f:a2:b3:e3:ea:67:50:d2:53:af:06:
47:02:2e:0b:7d:d7:20:9f:b8:68:f3:af:32:c5:79:ff:9d:a0:
fd:49:47:18:38:d1:70:ae:54:5e:36:ff:dd:d4:8a:69:fb:cf:
c3:3e:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:44 2025 by rpki-client