Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa
File: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=
Subject key identifier: 2E:49:CF:70:10:9F:90:3A:4C:A2:2E:E8:4B:26:F3:D0:6E:BA:81:CF
Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Certificate serial: 1E9B4655508267DEBFD74DE600D39DEF6F06F5AB
Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa
Signing time: Tue 24 Dec 2024 11:00:02 +0000
ROA not before: Tue 24 Dec 2024 10:55:02 +0000
ROA not after: Tue 23 Dec 2025 11:00:02 +0000
asID: 58487
IP address blocks: 103.84.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9b:46:55:50:82:67:de:bf:d7:4d:e6:00:d3:9d:ef:6f:06:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Validity
Not Before: Dec 24 10:55:02 2024 GMT
Not After : Dec 23 11:00:02 2025 GMT
Subject: CN=2E49CF70109F903A4CA22EE84B26F3D06EBA81CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:f3:18:64:7b:9a:58:d6:1d:16:ea:33:8a:
76:5a:50:18:38:2c:aa:54:a5:63:70:37:a4:f6:85:
83:5b:14:85:54:c1:3c:7d:2b:06:7a:02:80:4e:fa:
f2:97:a5:5d:59:54:e7:2f:d4:46:72:58:91:90:d0:
6c:25:cc:9f:58:8f:ae:77:9d:15:49:47:44:df:97:
9e:5f:41:9c:88:eb:55:bb:d6:01:f7:66:35:6d:6b:
b2:33:cd:8f:c4:80:e2:77:f4:bd:b4:5b:20:d4:73:
83:63:36:90:30:71:46:0c:70:8b:23:a2:49:2f:3d:
3c:0a:a2:31:25:f0:42:45:9c:0c:8a:4e:7a:5e:d4:
41:56:5d:63:9e:bf:3f:4e:1f:4d:8e:b8:a5:49:bd:
af:1f:19:c2:9f:ac:1b:c8:19:33:50:1b:70:f8:51:
d3:18:56:8c:b3:40:11:0f:9f:cb:44:bf:9c:20:cd:
6f:7a:72:36:4d:45:8f:5d:16:99:8e:dc:da:ad:f0:
38:86:91:9e:01:c4:f3:76:52:c1:63:f2:f0:82:5a:
8e:97:e0:f4:a2:f3:65:10:05:68:d4:b8:64:5f:80:
39:4d:66:81:11:54:b1:d1:2b:0c:8a:e0:b3:25:64:
6b:0a:43:3e:86:6a:bc:17:28:e6:b1:46:1a:a5:44:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:CF:70:10:9F:90:3A:4C:A2:2E:E8:4B:26:F3:D0:6E:BA:81:CF
X509v3 Authority Key Identifier:
keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.206.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e6:fd:be:31:cd:f2:4b:f5:e5:c6:25:b3:43:e9:8f:a3:9d:
1b:85:b1:71:66:95:1a:54:47:63:dd:03:9f:4b:90:3f:ec:1c:
04:30:e8:2f:73:f8:e7:bc:78:b4:d2:6b:9e:31:41:12:52:c6:
37:33:19:17:e2:6a:0a:01:6b:66:ad:ff:0d:d3:26:5a:0a:7b:
5a:44:c9:25:dc:36:4b:98:b0:21:5d:67:c7:9f:4b:8e:0b:1e:
8e:da:d0:2d:a6:3f:56:e8:06:0f:06:c3:76:13:df:a0:3b:cf:
13:8e:63:a1:be:ac:ce:5c:be:16:5b:6c:81:e5:1d:80:a2:e5:
fa:4c:d6:71:ec:3c:3b:8b:04:f6:0a:37:5f:0f:07:16:a1:45:
66:b6:f3:e3:52:e1:ac:32:8c:46:22:e8:47:d6:0f:0c:9b:36:
74:54:89:f3:3e:e2:4e:0c:32:d8:b9:36:52:6e:bd:ad:ff:fa:
dd:6a:bd:ad:a3:5c:93:17:fc:70:b2:46:e6:84:cf:95:ea:84:
6b:3b:f0:61:35:19:b4:ca:7d:0b:3f:fb:ea:eb:81:b4:0e:72:
36:1d:8e:d7:fa:c5:2f:c4:77:ea:c3:26:94:48:88:03:36:92:
02:69:62:8a:bc:fa:c0:e7:a3:53:ab:66:fe:8b:76:20:b0:f1:
be:b5:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:25 2025 by rpki-client