Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa
File: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier: W4wsYAuXt6fIXte/bBdwjcmKLXnkv0E1ZhxzpI8yqoI=
Subject key identifier: E3:EA:50:6F:49:09:C2:66:CD:A0:53:95:F6:AA:38:38:06:20:8C:E4
Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial: 1429E4BA6EC10D982F6E8A32A40560D642C18823
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa
Signing time: Mon 01 Jul 2024 01:03:47 +0000
ROA not before: Mon 01 Jul 2024 00:58:47 +0000
ROA not after: Mon 30 Jun 2025 01:03:47 +0000
asID: 131775
IP address blocks: 103.16.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:29:e4:ba:6e:c1:0d:98:2f:6e:8a:32:a4:05:60:d6:42:c1:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Validity
Not Before: Jul 1 00:58:47 2024 GMT
Not After : Jun 30 01:03:47 2025 GMT
Subject: CN=E3EA506F4909C266CDA05395F6AA383806208CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:df:51:0c:43:c0:b4:05:ae:a3:c3:25:fb:
7d:d4:f6:24:ac:f9:f8:fc:0a:ab:9a:c1:5a:e1:1c:
54:cf:a2:08:4d:bb:5c:21:d9:e6:39:87:4a:ed:b1:
2d:bc:4b:94:11:4a:d6:36:32:62:7d:02:6b:c3:c1:
0e:49:e9:be:b8:31:cc:59:8a:35:18:18:21:61:50:
1d:bc:5d:20:c9:84:cb:f5:c7:ce:b3:18:ab:67:e5:
22:16:8d:2e:3e:1c:b8:f0:16:dc:ea:2c:e6:3b:17:
6b:ed:0d:be:84:aa:0e:3e:27:8e:cd:d4:d3:c9:4b:
54:bc:c6:91:83:7f:c8:2e:86:45:b7:45:ea:93:a9:
c8:7e:0c:ae:3c:dc:ec:bd:34:cf:e0:8a:eb:0d:5c:
2d:1b:14:28:4b:19:91:4f:3b:f0:0e:28:9a:e0:23:
68:6a:b8:4f:d9:e6:b0:9f:31:7e:1a:fb:1f:45:22:
40:e1:50:67:11:46:62:7b:b4:74:b8:f5:7c:89:15:
93:8f:94:6b:fb:33:3d:22:45:93:86:b5:30:3b:88:
2f:78:f5:ef:76:20:42:0a:e1:64:f7:43:80:99:31:
d7:2d:8f:d3:bc:20:45:33:69:47:22:fe:7e:4c:e3:
f0:f4:07:48:cd:e9:a8:07:6f:57:fa:e3:e4:4f:dd:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:50:6F:49:09:C2:66:CD:A0:53:95:F6:AA:38:38:06:20:8C:E4
X509v3 Authority Key Identifier:
keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:60:53:9f:f6:3f:fe:1f:ba:66:23:aa:7e:1c:2f:57:a4:28:
7e:3c:aa:95:f7:9b:62:20:cd:fb:86:76:33:24:b5:bb:f8:03:
dd:93:72:a0:f6:8a:17:28:bd:9d:30:50:b9:85:7f:56:c5:49:
bd:12:42:6d:c2:fd:91:a7:c3:5b:f3:16:84:ef:b5:29:e2:54:
9c:86:30:8e:da:73:02:90:7e:ef:e3:25:1c:4d:e4:d3:54:23:
ae:d2:fd:2c:50:7d:ae:28:d7:12:bf:54:87:2b:48:77:e4:a9:
57:e5:4c:90:06:02:e2:5c:b7:30:b6:b4:3a:ef:8a:5a:5b:96:
f3:a3:86:17:aa:b3:44:c9:b1:a2:99:8a:27:70:fb:bc:a6:f4:
2f:c3:4c:8a:33:ea:9c:b5:34:4b:2e:e7:a4:b4:fb:84:e4:51:
d7:2b:7e:6d:c8:74:4f:49:fd:d9:1c:ab:07:2d:80:b4:62:b4:
bb:d8:82:5b:0d:b4:32:02:d2:36:08:89:59:0c:50:3a:b4:ca:
02:1d:8e:a3:e7:11:fb:17:a4:6b:b9:52:8e:53:42:23:73:e0:
3e:8e:86:91:ba:69:9a:a7:47:db:92:fd:b8:aa:52:e2:bf:2f:
f7:b6:58:84:fb:5b:8e:7a:16:75:ff:84:97:ea:03:ca:a3:e1:
d4:7d:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:29 2025 by rpki-client