Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa
File: 3130332e34372e3232382e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: Qti+oTUYFollYnIQYzbp3wVuMoMl1nGK5wRKkzqBask=
Subject key identifier: CF:82:3B:3F:33:26:46:01:6D:0B:4C:9C:91:1A:90:E5:E9:0C:0E:4B
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 5D03C9C74AED59F71FCD8146A29F0C2CADABAD18
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa
Signing time: Thu 29 Aug 2024 14:00:01 +0000
ROA not before: Thu 29 Aug 2024 13:55:01 +0000
ROA not after: Thu 28 Aug 2025 14:00:01 +0000
asID: 9341
IP address blocks: 103.47.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:03:c9:c7:4a:ed:59:f7:1f:cd:81:46:a2:9f:0c:2c:ad:ab:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Aug 29 13:55:01 2024 GMT
Not After : Aug 28 14:00:01 2025 GMT
Subject: CN=CF823B3F332646016D0B4C9C911A90E5E90C0E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:75:2e:7a:58:c0:45:ea:f0:05:8e:99:6a:
95:c1:a5:f5:ec:0f:4e:b6:66:ba:62:63:02:93:26:
cf:c7:91:c7:9f:05:05:0f:0e:f4:76:b9:e9:8c:83:
7e:b9:5c:ab:49:4b:26:34:0b:80:05:cb:fb:ab:94:
25:89:66:6f:66:a0:94:31:d4:1c:aa:38:be:b4:03:
d6:fe:e6:1e:b9:b7:06:c0:e6:2b:6e:67:6a:ea:d1:
a4:00:d2:a0:47:bf:07:04:48:8f:31:43:4e:79:fb:
3a:13:54:85:bc:4f:92:bd:b5:3e:fb:fb:4f:e9:bd:
5e:6c:3c:f3:ed:16:4c:c0:c2:ae:2b:b4:b8:e2:57:
72:b5:41:ee:8e:a0:ec:6b:1e:83:ba:31:c1:3d:25:
a6:62:33:16:71:6a:6b:0c:ae:fc:44:59:77:a8:70:
36:d2:a0:f2:a3:a6:a1:67:a1:2e:94:d3:5c:54:65:
e4:0b:e2:0b:f7:7d:68:52:49:31:8a:9d:ac:1c:46:
94:3b:43:ce:ec:78:0a:8e:66:1e:4d:34:82:2b:87:
f3:13:2f:01:e7:3a:e9:9e:b8:f9:ef:7f:fa:d3:ef:
21:c1:0f:2c:08:88:26:47:50:27:20:e1:98:89:35:
5d:0b:b7:f4:47:8c:da:04:d3:eb:90:41:47:f4:05:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:3B:3F:33:26:46:01:6D:0B:4C:9C:91:1A:90:E5:E9:0C:0E:4B
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.228.0/23
Signature Algorithm: sha256WithRSAEncryption
58:28:2c:07:fb:f4:98:ec:1c:22:99:13:da:02:e5:0d:af:33:
f3:cc:38:b9:84:89:22:ff:fa:7d:c3:a0:d2:19:bf:ec:e2:2e:
a8:07:2f:1d:c6:56:a9:4b:b1:6e:49:81:48:3b:67:a0:34:f1:
53:1b:df:e8:77:e2:c5:9c:60:d4:36:a9:ed:97:29:38:e0:58:
e1:96:78:ff:9d:ec:a2:a8:20:24:94:6f:92:d8:6d:4b:df:79:
24:0f:5e:4f:d9:63:95:6b:4b:80:5c:5f:e8:2b:e5:21:1e:2d:
6a:0f:82:65:7b:5c:3c:d9:a7:3d:98:05:ce:cd:bf:c2:bb:c8:
a3:86:88:43:89:20:06:01:bc:53:0d:03:72:30:29:4f:ab:55:
bb:93:3c:37:bb:50:05:db:f5:f1:4c:68:e5:5d:e7:42:95:3a:
b8:4d:ac:9b:60:aa:13:d7:d9:62:1e:06:98:53:ae:5b:28:e1:
2a:a4:82:76:3c:da:14:f5:72:fb:06:e2:4d:2b:cb:c1:d1:b9:
17:0a:33:27:6a:6b:a2:36:1c:43:ea:5d:bd:35:ff:94:d5:30:
5d:46:eb:82:4e:e6:cc:7e:df:eb:a8:a3:da:2d:60:f2:76:90:
52:6b:06:34:9a:1f:0d:d0:06:84:fb:ca:05:67:56:5e:8b:6b:
3c:af:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:39 2025 by rpki-client