Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
File: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (raw, json)
Hash identifier: zlcqvXi587wSr/o8I+yN+EXScv0fIyPxOx7WTfCRPMY=
Subject key identifier: 15:77:3D:F3:E5:F2:CE:CA:6B:EA:1E:AC:70:F0:76:81:A5:B3:BE:BF
Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial: 549F3DB9933BF6E129279D289CFE15E32DE602BD
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
Signing time: Tue 27 Aug 2024 12:00:00 +0000
ROA not before: Tue 27 Aug 2024 11:55:00 +0000
ROA not after: Tue 26 Aug 2025 12:00:00 +0000
asID: 141978
IP address blocks: 103.166.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9f:3d:b9:93:3b:f6:e1:29:27:9d:28:9c:fe:15:e3:2d:e6:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Validity
Not Before: Aug 27 11:55:00 2024 GMT
Not After : Aug 26 12:00:00 2025 GMT
Subject: CN=15773DF3E5F2CECA6BEA1EAC70F07681A5B3BEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:3c:c8:5b:4c:63:be:e3:09:c6:c5:d8:40:
54:1d:49:6d:52:e4:66:b1:be:75:ab:e1:b4:b7:5b:
f3:ee:48:98:ff:a7:0d:7f:54:1b:38:71:d0:91:57:
8c:0e:5c:0c:0f:6a:d8:c2:33:5f:ba:28:9c:5c:56:
19:de:df:24:55:8a:94:d4:13:ba:f4:20:e3:bc:f2:
c3:4f:cd:0f:bc:64:d5:79:f1:8d:2b:13:d0:19:0f:
31:43:1a:1b:c5:60:bd:4c:d0:63:79:74:63:f4:88:
f8:b9:87:dc:87:1f:42:50:8e:f1:bb:3b:70:86:82:
67:08:97:19:80:4c:3a:34:ff:78:a0:11:31:f2:cb:
f8:64:3f:d2:3d:b2:4b:5e:46:93:d6:e3:49:69:21:
0a:5b:27:30:97:a1:88:b6:f7:ec:8c:f8:22:4d:50:
ee:55:54:4c:57:b9:a4:5a:05:92:25:7a:30:9a:83:
d8:a6:a5:f7:6f:78:03:a3:1f:49:c6:e8:67:57:0b:
3f:e6:c7:37:4b:6e:bd:8d:c0:36:1b:40:75:0f:4b:
81:25:ca:71:0e:63:ee:02:84:0c:dd:81:9d:36:8a:
fd:9d:c2:9f:c0:00:01:ff:7a:1a:0a:f4:db:a0:1c:
fb:b0:78:3c:5a:13:03:7a:22:6d:52:39:ba:d7:82:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:3D:F3:E5:F2:CE:CA:6B:EA:1E:AC:70:F0:76:81:A5:B3:BE:BF
X509v3 Authority Key Identifier:
keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.9.0/24
Signature Algorithm: sha256WithRSAEncryption
58:02:ad:a1:19:62:ad:91:05:7b:ff:0e:1d:d8:1f:67:03:d7:
68:93:fe:d0:60:21:aa:7a:22:7f:eb:f2:96:fb:7e:08:c4:6c:
43:4b:64:94:37:63:cf:92:19:20:92:e2:20:79:5c:00:73:42:
b9:86:87:f6:fa:dd:c2:50:ab:3b:42:1a:8e:ea:d0:97:15:4c:
b8:29:9a:91:31:35:31:a3:fc:f7:83:f4:14:f0:46:30:7c:f3:
53:bc:4d:10:3b:66:f8:03:9f:29:c7:9e:60:eb:ce:5f:69:43:
eb:b8:a9:2f:46:79:d7:2c:30:90:1a:cb:95:c7:b9:27:ec:50:
31:93:fc:c8:bd:b8:6b:65:f4:8a:06:44:7c:ac:ad:bf:24:cb:
de:07:aa:3a:3b:75:5e:e1:ba:66:6c:99:71:b9:7a:ed:88:8e:
ef:6d:c1:c3:0f:a9:6a:1a:fb:d6:4a:ca:e4:16:d6:26:94:d3:
8f:a4:e3:66:bc:ab:57:9d:ec:cc:d4:a2:37:69:4f:05:36:59:
40:2e:f3:f6:c9:cf:32:02:03:63:3f:93:88:38:2a:d3:f6:80:
ac:2a:97:e1:fe:5c:f4:0f:e3:dd:39:bc:06:28:d5:79:b0:d0:
cc:18:68:9d:5d:2a:6e:c7:14:b4:10:5f:15:6a:ad:ab:59:d8:
f5:00:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:53 2025 by rpki-client