Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
File: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier: kMTgFhm7y8+vUOnTIGuYD/xnygQP3IJ+v4/uEIrSv/M=
Subject key identifier: 42:FB:26:F2:10:21:C1:64:E8:A0:A9:B3:17:BE:9D:07:BB:BB:95:05
Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial: 730D445387F417A83596D2388535D68B2056FE60
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
Signing time: Thu 06 Jun 2024 15:00:02 +0000
ROA not before: Thu 06 Jun 2024 14:55:02 +0000
ROA not after: Thu 05 Jun 2025 15:00:02 +0000
asID: 142364
IP address blocks: 103.170.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0d:44:53:87:f4:17:a8:35:96:d2:38:85:35:d6:8b:20:56:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Validity
Not Before: Jun 6 14:55:02 2024 GMT
Not After : Jun 5 15:00:02 2025 GMT
Subject: CN=42FB26F21021C164E8A0A9B317BE9D07BBBB9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:80:ee:80:21:69:56:09:dd:ab:61:55:38:
08:a1:c8:eb:ca:7d:34:b6:98:f7:8c:98:1a:76:f8:
dd:5b:53:2e:01:ce:ba:1b:41:2a:eb:e7:a0:17:3d:
b8:1a:bd:ba:0a:89:a6:83:bc:e3:bb:f1:36:8d:f7:
d7:64:37:e4:58:bb:cd:61:35:01:8d:68:9d:09:9f:
b4:47:e6:78:5b:c8:47:65:41:d6:30:55:bd:b7:e3:
87:38:a4:d8:fa:08:df:f3:af:c9:c5:6a:69:26:33:
f7:ae:95:26:2f:4a:dc:76:46:80:1f:00:57:32:f8:
0f:be:15:bc:7f:fb:fe:88:3a:67:a5:49:78:1b:d1:
5d:d1:60:81:5c:0b:8d:a3:bc:0f:79:ee:8a:b4:11:
de:2e:5b:d4:64:b4:0c:db:74:13:72:15:0c:23:e3:
a0:9f:c2:36:a9:a3:ef:38:3e:51:b5:b2:e6:84:01:
90:dc:79:b8:24:52:09:23:75:86:51:fb:3d:c6:11:
88:aa:22:f9:21:a8:76:02:69:71:ee:99:7c:74:e6:
47:3c:5a:c7:0f:8b:f2:4d:da:da:23:ce:36:92:a4:
bc:ef:b1:09:b5:2b:73:05:e0:ea:81:74:b7:29:16:
7b:1c:b5:e4:76:04:6a:af:86:4b:1f:f3:17:cd:ab:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:26:F2:10:21:C1:64:E8:A0:A9:B3:17:BE:9D:07:BB:BB:95:05
X509v3 Authority Key Identifier:
keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.101.0/24
Signature Algorithm: sha256WithRSAEncryption
51:55:73:1e:f1:27:5d:c4:1d:c3:8c:2f:9f:4c:b9:9a:12:2c:
0c:1d:f2:50:2f:13:5f:0f:59:0f:cc:4b:98:b2:6c:6c:4d:8c:
22:a4:85:87:db:5a:e8:eb:d3:59:3b:0c:ec:1d:00:a3:1c:b1:
c5:d0:64:95:ea:2d:7b:20:26:6c:6d:f6:03:34:51:76:c2:73:
80:ef:d2:9a:22:a3:cc:bb:2b:b9:f7:84:f7:85:3b:6a:0e:6a:
97:63:38:cf:35:51:39:98:fe:57:5b:15:2b:5a:0b:0e:69:66:
a4:64:94:4f:cb:8d:a2:a1:d6:86:27:0a:c4:5a:60:a1:9c:76:
42:f3:60:03:81:f7:b6:2c:24:e7:e1:2c:cd:b3:d7:dd:ee:3f:
74:ec:08:66:4c:65:68:67:9a:64:03:04:1a:4e:db:e0:28:e4:
2c:1e:02:52:c4:fe:b8:35:52:04:06:fc:c9:ed:7a:46:54:cb:
2b:21:71:98:9e:8c:2c:ea:ec:d1:57:55:d6:28:eb:3d:69:cf:
e1:9a:b4:fa:14:08:b0:8a:81:2b:87:e0:02:f5:51:f8:78:3b:
a5:90:7c:1a:6a:43:c0:1c:67:eb:7a:91:ff:47:c6:28:ee:44:
18:7f:12:05:a9:99:ac:87:ac:2d:7d:f6:c8:4d:eb:94:84:15:
b2:59:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:29 2025 by rpki-client