Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa
File: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (raw, json)
Hash identifier: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=
Subject key identifier: 69:34:70:B3:64:C4:28:20:A1:62:21:D6:06:D3:37:E9:CE:86:FD:48
Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Certificate serial: 2363F39438D4FAF1F9BE107B11B9021D253F5F8F
Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa
Signing time: Thu 05 Dec 2024 14:00:02 +0000
ROA not before: Thu 05 Dec 2024 13:55:02 +0000
ROA not after: Thu 04 Dec 2025 14:00:02 +0000
asID: 142375
IP address blocks: 103.171.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:63:f3:94:38:d4:fa:f1:f9:be:10:7b:11:b9:02:1d:25:3f:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Validity
Not Before: Dec 5 13:55:02 2024 GMT
Not After : Dec 4 14:00:02 2025 GMT
Subject: CN=693470B364C42820A16221D606D337E9CE86FD48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:71:42:85:c2:a8:8b:6e:2f:f2:89:5a:72:
ea:99:31:60:4f:6d:da:a6:c8:42:dc:aa:eb:cb:69:
31:f1:d4:cb:04:22:78:b0:a9:6a:e0:f3:69:36:a1:
89:9b:f4:94:ec:25:f7:ce:23:eb:f6:be:1d:84:8e:
e9:fb:4d:6f:3f:71:52:80:98:ea:11:00:88:84:cb:
47:69:5c:d4:20:9c:78:20:c0:97:02:7a:25:6d:4c:
ac:c2:b8:21:43:0c:ba:14:db:ad:fd:8e:a0:f3:a9:
58:61:7b:bb:ec:cf:e7:c6:18:89:2b:c6:c4:e9:a7:
ba:c5:d0:79:eb:4c:e5:b2:75:1d:c0:64:55:4d:69:
55:16:f7:ef:ad:a2:cb:e2:fc:b9:e2:55:21:e8:74:
23:72:3e:f7:ce:64:02:7d:11:25:da:84:00:5a:e8:
a1:dc:10:fb:42:5d:5d:68:f6:e9:17:9a:12:9c:ca:
56:34:a9:41:d5:04:0d:aa:4c:ee:02:bb:2a:49:f4:
a1:3d:42:6b:a8:3b:4c:db:d7:dc:8d:da:85:07:b6:
7a:8c:bd:6e:07:8d:df:7c:2e:3b:92:74:44:70:3b:
70:c7:8d:1a:1b:22:bf:f2:7c:e3:36:43:2c:2a:16:
74:98:81:b0:cd:b9:47:f7:8b:ce:af:a5:49:a9:43:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:70:B3:64:C4:28:20:A1:62:21:D6:06:D3:37:E9:CE:86:FD:48
X509v3 Authority Key Identifier:
keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.182.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:a4:f9:be:12:eb:ca:6b:86:6b:60:8f:88:a8:a8:ab:a0:1b:
a8:22:15:d2:9b:f8:b7:fa:d7:3e:b1:d3:84:d0:4d:4f:da:1a:
94:bd:fe:6b:94:0a:ff:2c:74:35:e5:04:8a:49:c7:eb:6b:6b:
c1:d8:16:ba:75:e5:c2:97:2b:ec:87:c4:e1:99:e7:dc:43:74:
ce:3c:f2:af:2a:f8:cc:87:01:f9:86:e7:8d:c5:bc:7a:dd:d9:
43:b7:aa:4c:23:11:b9:ec:f2:f7:15:13:32:8c:32:44:ee:7a:
e0:f7:7d:ce:15:93:5c:05:b6:e7:ab:f6:85:ab:f7:fc:5e:3c:
7e:e4:2c:01:76:ad:f6:04:34:90:7d:ac:dc:5b:ff:1f:7e:ff:
d1:79:07:1f:bd:cc:5e:3a:05:41:1a:66:dc:46:f3:1a:b7:be:
2f:94:0f:f3:af:f1:49:16:f2:4b:aa:cf:7c:fa:24:e7:da:81:
e2:d7:bf:b2:32:4d:e8:c3:72:fe:13:56:8b:1f:3c:36:65:78:
9c:90:f5:d4:a3:90:13:db:43:85:5a:33:b7:5f:77:25:00:29:
2d:59:bd:ad:fd:20:a7:38:9f:56:e4:a9:f6:e2:ee:a5:92:35:
d8:0b:a2:b2:1a:16:2d:a9:38:87:ec:90:93:b7:cc:21:b0:5b:
12:ae:52:70
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUI2PzlDjU+vH5vhB7EbkCHSU/X48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG
NjUxQkFBQTAeFw0yNDEyMDUxMzU1MDJaFw0yNTEyMDQxNDAwMDJaMDMxMTAvBgNV
BAMTKDY5MzQ3MEIzNjRDNDI4MjBBMTYyMjFENjA2RDMzN0U5Q0U4NkZENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAnFChcKoi24v8olacuqZMWBP
bdqmyELcquvLaTHx1MsEIniwqWrg82k2oYmb9JTsJffOI+v2vh2Ejun7TW8/cVKA
mOoRAIiEy0dpXNQgnHggwJcCeiVtTKzCuCFDDLoU2639jqDzqVhhe7vsz+fGGIkr
xsTpp7rF0HnrTOWydR3AZFVNaVUW9++tosvi/LniVSHodCNyPvfOZAJ9ESXahABa
6KHcEPtCXV1o9ukXmhKcylY0qUHVBA2qTO4CuypJ9KE9QmuoO0zb19yN2oUHtnqM
vW4Hjd98LjuSdERwO3DHjRobIr/yfOM2QywqFnSYgbDNuUf3i86vpUmpQzZpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUaTRws2TEKCChYiHWBtM36c6G/UgwHwYDVR0j
BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD
MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx
QkFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzNTA1Y2IzLWI1NWUtNDBlNC1h
Yzc5LTYzNjU2MDZmNGVmOS8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnq7YwDQYJ
KoZIhvcNAQELBQADggEBAJ2k+b4S68prhmtgj4ioqKugG6giFdKb+Lf61z6x04TQ
TU/aGpS9/muUCv8sdDXlBIpJx+tra8HYFrp15cKXK+yHxOGZ59xDdM488q8q+MyH
AfmG543FvHrd2UO3qkwjEbns8vcVEzKMMkTueuD3fc4Vk1wFtuer9oWr9/xePH7k
LAF2rfYENJB9rNxb/x9+/9F5Bx+9zF46BUEaZtxG8xq3vi+UD/Ov8UkW8kuqz3z6
JOfageLXv7IyTejDcv4TVosfPDZleJyQ9dSjkBPbQ4VaM7dfdyUAKS1Zva39IKc4
n1bkqfbi7qWSNdgLorIaFi2pOIfskJO3zCGwWxKuUnA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:25 2025 by rpki-client