Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa
File: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=
Subject key identifier: 70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02
Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Certificate serial: 7CB1368DFD29B87005FB525E4C09B4F8F0B4ACFF
Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa
Signing time: Thu 30 May 2024 05:00:01 +0000
ROA not before: Thu 30 May 2024 04:55:01 +0000
ROA not after: Thu 29 May 2025 05:00:01 +0000
asID: 142375
IP address blocks: 103.171.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b1:36:8d:fd:29:b8:70:05:fb:52:5e:4c:09:b4:f8:f0:b4:ac:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Validity
Not Before: May 30 04:55:01 2024 GMT
Not After : May 29 05:00:01 2025 GMT
Subject: CN=70DBC8B3F4A1100B9A14A9DA2E5A04FE595F7802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:bb:cc:e6:72:13:86:0c:f4:4b:21:8e:d2:
84:c7:94:5b:94:72:0f:94:ad:fd:8a:29:74:de:a4:
56:52:f5:16:57:ef:05:96:97:83:7c:16:d5:f7:9d:
50:e4:21:33:ed:91:08:26:57:6a:6e:20:de:95:65:
2b:c5:38:ed:82:6f:53:7f:52:9b:1c:0c:1a:c2:a5:
4a:21:d9:d9:bf:2c:da:59:c5:71:fc:8b:a6:98:7e:
fe:82:85:aa:98:38:f5:73:37:ce:72:80:b7:2e:55:
60:db:78:4b:38:f7:23:8f:89:3e:b3:d6:11:2d:51:
fb:7c:18:55:3e:5d:fc:06:8a:cf:69:3f:f7:2f:67:
d3:4c:d0:79:7c:dc:8a:b5:a0:20:ee:4f:15:f9:9b:
78:db:c7:1a:d3:78:bf:81:49:ac:8b:33:59:95:41:
e2:66:89:7b:03:76:c7:05:3e:ed:5f:b5:ad:f3:1a:
a9:50:0c:dd:60:cd:45:30:35:bb:85:e2:df:cd:b0:
22:be:47:31:a3:79:6d:0c:20:4d:5c:46:11:8b:f3:
69:e9:fb:05:0e:84:4e:c8:bf:5e:ce:a4:9b:e5:90:
fc:f1:6b:dc:49:c9:9b:0a:7e:c4:5e:f2:99:e9:3f:
dc:4b:84:23:b2:88:b2:89:75:95:72:ab:2c:55:c0:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02
X509v3 Authority Key Identifier:
keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bd:70:84:da:23:ea:af:50:1a:2e:d5:b2:69:85:f9:18:ef:
12:b7:8e:c1:d8:f9:4c:03:e7:e4:78:6c:b6:00:c0:e4:37:f0:
0d:c2:2f:16:06:24:1a:ed:21:e9:53:f2:6c:5c:c7:13:b6:a2:
9f:8f:00:8f:1a:5b:3c:53:19:07:e5:25:90:f3:5e:a9:b9:9f:
ed:19:35:d3:d1:ce:55:cf:ca:4f:b4:a1:69:3b:50:10:95:4c:
ef:86:47:72:3e:98:bf:a3:bc:55:b6:ee:98:6e:a4:e5:0e:d1:
af:26:86:de:fe:cf:ef:3d:53:51:ed:45:f0:78:90:1b:8e:54:
64:3e:19:36:09:77:d8:2b:8f:6c:00:e1:c2:b1:bb:1a:13:7f:
c0:fa:cb:33:37:fe:38:57:19:ad:df:57:48:58:3a:c4:40:56:
2d:d9:76:0c:2b:60:18:43:14:70:02:d6:48:f2:59:02:ea:be:
52:05:23:18:4d:95:14:93:c5:fe:a9:95:c0:a9:58:df:ed:fb:
b5:63:10:f4:0b:73:fe:14:49:a1:25:ef:65:35:61:23:bc:a8:
56:a0:a0:28:78:ab:04:21:37:01:1f:e0:ca:66:60:54:a4:a2:
0a:f2:9c:52:60:a4:1c:e6:aa:23:0d:0c:d0:e6:4d:45:57:b5:
a0:60:62:70
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUfLE2jf0puHAF+1JeTAm0+PC0rP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG
NjUxQkFBQTAeFw0yNDA1MzAwNDU1MDFaFw0yNTA1MjkwNTAwMDFaMDMxMTAvBgNV
BAMTKDcwREJDOEIzRjRBMTEwMEI5QTE0QTlEQTJFNUEwNEZFNTk1Rjc4MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitLvM5nIThgz0SyGO0oTHlFuU
cg+Urf2KKXTepFZS9RZX7wWWl4N8FtX3nVDkITPtkQgmV2puIN6VZSvFOO2Cb1N/
UpscDBrCpUoh2dm/LNpZxXH8i6aYfv6ChaqYOPVzN85ygLcuVWDbeEs49yOPiT6z
1hEtUft8GFU+XfwGis9pP/cvZ9NM0Hl83Iq1oCDuTxX5m3jbxxrTeL+BSayLM1mV
QeJmiXsDdscFPu1fta3zGqlQDN1gzUUwNbuF4t/NsCK+RzGjeW0MIE1cRhGL82np
+wUOhE7Iv17OpJvlkPzxa9xJyZsKfsRe8pnpP9xLhCOyiLKJdZVyqyxVwG5FAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUcNvIs/ShEAuaFKnaLloE/llfeAIwHwYDVR0j
BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD
MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx
QkFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzNTA1Y2IzLWI1NWUtNDBlNC1h
Yzc5LTYzNjU2MDZmNGVmOS8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq7cwDQYJ
KoZIhvcNAQELBQADggEBAF69cITaI+qvUBou1bJphfkY7xK3jsHY+UwD5+R4bLYA
wOQ38A3CLxYGJBrtIelT8mxcxxO2op+PAI8aWzxTGQflJZDzXqm5n+0ZNdPRzlXP
yk+0oWk7UBCVTO+GR3I+mL+jvFW27phupOUO0a8mht7+z+89U1HtRfB4kBuOVGQ+
GTYJd9grj2wA4cKxuxoTf8D6yzM3/jhXGa3fV0hYOsRAVi3ZdgwrYBhDFHAC1kjy
WQLqvlIFIxhNlRSTxf6plcCpWN/t+7VjEPQLc/4USaEl72U1YSO8qFagoCh4qwQh
NwEf4MpmYFSkogrynFJgpBzmqiMNDNDmTUVXtaBgYnA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:41 2025 by rpki-client