Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230372e302f32342d3234203d3e203538343837.roa
File: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=
Subject key identifier: 0E:51:55:DB:D8:BF:64:1E:5A:EA:26:29:29:92:BF:1F:51:93:80:10
Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Certificate serial: 44A1FD421CB5822471ECAEBD95AA7DBE6432F875
Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230372e302f32342d3234203d3e203538343837.roa
Signing time: Tue 24 Dec 2024 11:00:02 +0000
ROA not before: Tue 24 Dec 2024 10:55:02 +0000
ROA not after: Tue 23 Dec 2025 11:00:02 +0000
asID: 58487
IP address blocks: 103.84.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a1:fd:42:1c:b5:82:24:71:ec:ae:bd:95:aa:7d:be:64:32:f8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Validity
Not Before: Dec 24 10:55:02 2024 GMT
Not After : Dec 23 11:00:02 2025 GMT
Subject: CN=0E5155DBD8BF641E5AEA26292992BF1F51938010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:8e:39:08:b1:09:2d:65:98:d9:30:f1:2b:
7b:da:78:fb:9c:d4:95:c9:e6:de:89:7e:06:60:df:
f2:58:0a:19:73:b5:0e:ed:61:26:54:9b:ab:09:1a:
ba:58:80:f4:be:17:ce:62:5c:c2:e5:7f:a2:2a:14:
cc:91:1c:01:72:49:d5:75:3d:95:77:4b:64:87:48:
6f:af:4a:18:bb:f0:2b:d2:8c:71:8c:97:6e:b4:8b:
f9:81:16:d5:0c:91:e7:a2:73:27:3b:6a:94:d4:f5:
b1:9b:65:9b:79:5d:59:80:07:20:f0:3c:23:13:fb:
2f:78:49:25:ee:94:b6:36:f0:5c:9c:47:13:e2:42:
5c:dd:74:f8:b7:e1:8a:13:3a:88:eb:80:7e:58:e3:
57:24:c1:1a:b8:e8:72:5d:cf:3d:d2:2e:89:09:b7:
0c:e5:6a:f7:c0:52:3e:e7:c0:80:9b:33:a6:f7:d4:
66:b4:05:a6:2c:1f:99:5b:2d:61:96:92:65:fe:2a:
31:1b:93:b7:1d:6b:14:9f:ec:16:b4:71:67:1b:dd:
56:4e:7b:10:87:30:f0:3a:12:69:34:74:e1:8b:ca:
a0:49:32:97:db:6e:d6:45:e2:4b:85:29:81:6c:89:
27:49:d2:90:0f:41:93:60:f2:34:9e:7e:2f:25:ff:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:55:DB:D8:BF:64:1E:5A:EA:26:29:29:92:BF:1F:51:93:80:10
X509v3 Authority Key Identifier:
keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230372e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:71:f0:fc:0b:fa:ef:f0:56:e2:1d:a7:f8:64:f0:ca:e2:2a:
01:13:d5:f3:75:f7:63:3c:28:8c:00:66:b3:38:4b:a7:fd:d7:
8c:a8:53:dd:ae:05:b4:8c:97:56:8e:0d:26:51:e7:3e:9a:9f:
84:7a:00:eb:dd:f3:4e:64:94:0c:52:10:f4:8a:0a:7d:37:0a:
d3:4e:bf:d4:0d:7a:a5:7c:9a:bb:0d:fb:33:93:af:07:69:6b:
58:3e:fb:ef:1f:c6:f2:bb:1b:7a:68:96:c5:5c:3a:21:17:3d:
78:42:b0:99:67:e3:e0:65:b0:b7:7e:f0:23:b0:c9:cb:b5:ca:
39:e2:e8:ab:60:18:23:aa:0b:34:f7:32:c4:6f:70:c3:b1:67:
52:e7:b5:7e:4b:33:ec:f5:a6:67:b4:6d:e6:25:99:a3:7b:d2:
74:76:c8:a2:9e:b1:f5:fb:8f:f0:9a:c4:ac:d9:b5:94:01:ca:
50:99:e4:7c:f5:2c:b3:78:3d:d5:90:34:6e:7d:e3:f0:fd:b2:
54:5b:5c:cb:74:2a:b3:04:59:b4:9e:93:a9:e9:91:a7:62:72:
5f:e3:6b:a4:fa:1e:5d:e7:f9:96:1e:9c:78:98:25:8d:60:ce:
3f:8f:d9:7c:32:7b:12:3e:a4:d2:eb:a0:1a:94:fd:04:17:4f:
76:30:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:25 2025 by rpki-client