Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
File: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (raw, json)
Hash identifier: R97ZMvJGq3wevnUFZa7iCAAm+25aeK+jt1k66UcmeGs=
Subject key identifier: C3:56:16:8D:EF:93:AD:FC:E6:32:37:EB:4D:5F:27:27:22:37:7C:EA
Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F
Certificate serial: 66214BA7A14F2DA73E38E80E8979CD62631BEAF5
Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
Signing time: Tue 16 Apr 2024 09:07:04 +0000
ROA not before: Tue 16 Apr 2024 09:02:04 +0000
ROA not after: Tue 15 Apr 2025 09:07:04 +0000
asID: 141920
IP address blocks: 103.165.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:21:4b:a7:a1:4f:2d:a7:3e:38:e8:0e:89:79:cd:62:63:1b:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F
Validity
Not Before: Apr 16 09:02:04 2024 GMT
Not After : Apr 15 09:07:04 2025 GMT
Subject: CN=C356168DEF93ADFCE63237EB4D5F272722377CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:e2:a7:ef:73:03:78:28:5b:87:5c:5d:58:
99:32:71:df:4d:e8:89:3f:07:e5:87:e5:6f:35:d4:
37:d4:8c:a0:54:53:b4:be:f9:fe:f0:9a:46:fe:a4:
3a:4a:7d:b3:7f:0b:9d:7b:e3:5a:dc:90:4c:64:ca:
a8:12:e4:64:98:b2:8e:94:01:14:65:3d:01:8c:f8:
f2:26:c4:69:51:a0:a5:88:29:44:f5:64:58:21:87:
76:9a:21:ce:f7:7b:ee:4d:1c:ec:59:a4:19:f0:72:
ee:9a:71:e9:e0:ae:c2:b7:7c:d2:05:22:5e:79:c4:
7a:e8:9d:58:9b:66:db:cc:a6:57:48:90:1e:f4:f0:
45:91:0e:f7:85:51:d1:68:75:b6:ea:da:7c:ed:29:
63:c6:c3:99:a0:03:95:8a:57:51:4c:7c:e1:97:c1:
fd:38:d9:87:d5:db:48:2a:3a:72:9d:da:91:3d:1f:
0e:8b:af:b7:c7:52:03:da:e4:0a:a1:b8:0b:e7:e4:
29:fc:5f:22:69:0f:16:b8:c0:b7:f8:98:02:03:b9:
11:47:4d:57:7d:f4:30:ef:eb:23:5e:25:e0:71:6b:
0a:5d:d4:8e:e8:51:20:e2:be:c8:6a:15:95:de:3e:
fe:08:b6:b2:9b:68:7d:a3:09:e3:cd:b0:f4:81:ef:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:16:8D:EF:93:AD:FC:E6:32:37:EB:4D:5F:27:27:22:37:7C:EA
X509v3 Authority Key Identifier:
keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.149.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4d:e5:a0:4b:05:a8:42:e9:84:3a:07:d3:b9:7e:b1:1d:b1:
98:5b:d4:bc:c1:4b:5b:f8:a0:11:32:b4:ed:74:9d:32:8c:be:
70:0a:8a:89:a6:75:c3:2e:6a:be:7d:ae:86:90:a5:c7:2e:38:
37:8a:32:63:d2:3c:71:a1:13:08:9e:0e:12:fb:2c:14:54:41:
9e:5f:5f:54:98:b3:52:7c:61:62:3f:cf:be:c9:50:34:24:e2:
41:af:49:df:e1:83:87:41:3b:33:f7:8b:18:a8:fc:5f:31:96:
7a:da:e9:54:90:d8:57:29:2e:76:8c:04:dc:7c:1e:6d:f8:d8:
37:ab:26:86:f1:29:33:75:56:7e:48:6f:7f:0c:e2:01:85:de:
4f:1f:d5:b6:a8:19:42:27:53:f9:37:30:cd:18:ba:32:f7:5c:
ef:7c:44:85:0c:00:12:34:24:e8:09:d2:bd:98:89:7a:b4:48:
e2:8e:1a:99:78:80:aa:bb:9e:33:18:73:4a:b4:76:0f:af:13:
d6:bb:41:17:82:5d:f1:33:de:5e:43:a3:36:3f:e3:c7:e6:1a:
31:c1:46:a6:03:bb:ce:9a:74:83:ed:d6:2b:c7:10:a2:cb:49:
2b:13:94:29:e7:f1:e0:3a:50:4d:4e:50:86:43:87:6a:c6:60:
c1:ab:a9:0d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZiFLp6FPLac+OOgOiXnNYmMb6vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy
REJCRUQwRjAeFw0yNDA0MTYwOTAyMDRaFw0yNTA0MTUwOTA3MDRaMDMxMTAvBgNV
BAMTKEMzNTYxNjhERUY5M0FERkNFNjMyMzdFQjRENUYyNzI3MjIzNzdDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoB+Kn73MDeChbh1xdWJkycd9N
6Ik/B+WH5W811DfUjKBUU7S++f7wmkb+pDpKfbN/C51741rckExkyqgS5GSYso6U
ARRlPQGM+PImxGlRoKWIKUT1ZFghh3aaIc73e+5NHOxZpBnwcu6acengrsK3fNIF
Il55xHronVibZtvMpldIkB708EWRDveFUdFodbbq2nztKWPGw5mgA5WKV1FMfOGX
wf042YfV20gqOnKd2pE9Hw6Lr7fHUgPa5AqhuAvn5Cn8XyJpDxa4wLf4mAIDuRFH
TVd99DDv6yNeJeBxawpd1I7oUSDivshqFZXePv4ItrKbaH2jCePNsPSB78cnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUw1YWje+TrfzmMjfrTV8nJyI3fOowHwYDVR0j
BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0
NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC
RUQwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyZjNmNWQ5LWNmYjgtNDEyMy1h
MmIxLWIwYjUyOTlmOWM2ZS8wLzMxMzAzMzJlMzEzNjM1MmUzMTM0MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZUwDQYJ
KoZIhvcNAQELBQADggEBACBN5aBLBahC6YQ6B9O5frEdsZhb1LzBS1v4oBEytO10
nTKMvnAKiommdcMuar59roaQpccuODeKMmPSPHGhEwieDhL7LBRUQZ5fX1SYs1J8
YWI/z77JUDQk4kGvSd/hg4dBOzP3ixio/F8xlnra6VSQ2FcpLnaMBNx8Hm342Der
JobxKTN1Vn5Ib38M4gGF3k8f1baoGUInU/k3MM0YujL3XO98RIUMABI0JOgJ0r2Y
iXq0SOKOGpl4gKq7njMYc0q0dg+vE9a7QReCXfEz3l5DozY/48fmGjHBRqYDu86a
dIPt1ivHEKLLSSsTlCnn8eA6UE1OUIZDh2rGYMGrqQ0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:50 2025 by rpki-client