Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa
File: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=
Subject key identifier: 3E:1D:A1:52:92:21:09:F4:8B:68:FA:A8:A1:63:C6:07:98:4C:F3:8F
Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial: 40BCFDA1F83EC660CE528B6E3A609FED94863DB9
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa
Signing time: Wed 11 Dec 2024 19:02:33 +0000
ROA not before: Wed 11 Dec 2024 18:57:33 +0000
ROA not after: Wed 10 Dec 2025 19:02:33 +0000
asID: 9341
IP address blocks: 103.182.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bc:fd:a1:f8:3e:c6:60:ce:52:8b:6e:3a:60:9f:ed:94:86:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Validity
Not Before: Dec 11 18:57:33 2024 GMT
Not After : Dec 10 19:02:33 2025 GMT
Subject: CN=3E1DA152922109F48B68FAA8A163C607984CF38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:56:88:95:ab:f2:ca:2d:ac:c7:34:06:9b:
09:29:f8:7b:a9:8d:c8:fb:d9:56:84:89:12:cb:7d:
21:28:e1:4c:7e:40:c9:0f:3b:88:cd:00:c0:ed:11:
38:38:39:99:cf:64:93:81:6b:00:63:8a:52:20:a2:
cf:49:92:ac:ef:35:ad:9e:44:a6:ca:0f:4b:9b:4a:
c1:2b:57:51:e5:6e:dc:9b:dd:0d:34:1f:1b:1e:d1:
22:f3:4e:09:11:ac:c4:f6:80:e1:db:90:4e:04:2f:
4d:d1:83:14:60:39:f2:46:14:b3:2a:36:f5:f9:7a:
c1:20:db:c1:96:5b:06:05:3e:41:ad:49:2d:b8:c3:
46:6b:b7:ec:63:32:4c:96:2d:cf:e4:cc:a1:87:83:
cf:86:74:25:27:49:13:4c:75:e2:99:c8:5a:f8:fd:
dc:d5:b1:a2:ab:aa:8f:9c:20:63:70:e9:17:4b:bb:
c5:5e:19:a2:72:d6:ce:ad:c9:1c:ae:2b:21:c0:d6:
e5:a6:d8:5a:74:d1:75:44:f8:bb:ee:62:38:b6:73:
6a:d1:7b:1f:d8:08:05:f8:1b:45:f1:0e:66:b2:b2:
c5:07:74:af:b6:fc:45:b1:40:11:8d:20:1a:97:2f:
13:a1:d1:7f:07:a8:73:1f:ea:c3:72:c6:d5:ac:5e:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:A1:52:92:21:09:F4:8B:68:FA:A8:A1:63:C6:07:98:4C:F3:8F
X509v3 Authority Key Identifier:
keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0b:73:a9:28:05:93:43:69:86:e0:e5:6f:93:f7:54:36:26:
58:f2:59:eb:f6:68:9d:eb:c7:0b:ee:ff:a0:d4:a7:b6:2a:3c:
0c:bc:68:33:00:8d:4f:9c:eb:5a:5d:2e:9a:83:5b:45:14:e6:
de:02:f4:4f:98:d6:89:f7:ce:8f:43:77:5c:b0:55:e1:62:a3:
1a:b2:13:e0:5c:37:db:0b:13:c7:ce:f6:c0:cb:f9:51:c4:8e:
53:2e:bf:b6:bd:fa:d1:91:2d:db:df:19:45:3e:d8:4c:f5:3e:
a1:bd:ac:fd:78:6b:5f:06:36:f5:9e:4a:f1:2d:9b:91:cc:b2:
6f:2f:51:12:2b:85:0f:a5:8b:e4:30:2d:e8:12:97:79:0b:09:
3e:01:b5:1e:7e:af:0a:3e:a3:92:4e:71:8b:9a:25:76:1a:5e:
48:c8:70:0d:59:6f:33:5a:cf:91:40:2c:f5:0e:cb:6e:2e:b0:
c6:46:77:22:05:0d:8a:cc:c0:50:11:f1:0f:ce:44:2d:0d:fc:
e4:2e:67:e7:59:1d:b9:d6:c8:af:5c:8e:5d:43:f9:25:b2:b4:
aa:4d:98:02:04:4e:ce:4e:53:fc:fa:29:ca:ba:99:c9:20:08:
a1:b8:cb:1a:43:ff:40:ae:53:c9:91:7b:c7:1f:a6:2c:87:a7:
1c:84:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:50 2025 by rpki-client