Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa
File: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=
Subject key identifier: 01:5F:51:CF:2C:A8:62:A0:28:67:3E:32:00:77:3F:E1:42:96:E9:FB
Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial: 18BEEC6C37B5E25DB7B7225C24062125E0789831
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa
Signing time: Sun 12 Jan 2025 09:00:03 +0000
ROA not before: Sun 12 Jan 2025 08:55:03 +0000
ROA not after: Sun 11 Jan 2026 09:00:03 +0000
asID: 9341
IP address blocks: 103.179.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:be:ec:6c:37:b5:e2:5d:b7:b7:22:5c:24:06:21:25:e0:78:98:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
Validity
Not Before: Jan 12 08:55:03 2025 GMT
Not After : Jan 11 09:00:03 2026 GMT
Subject: CN=015F51CF2CA862A028673E3200773FE14296E9FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:0c:14:ef:28:8a:66:67:96:d0:fb:93:c9:
54:53:49:e6:f3:29:f8:f8:03:d8:7d:25:8d:61:e9:
5b:3a:8b:ed:86:9a:3a:d4:26:e1:0a:23:6f:57:63:
ae:22:bb:09:c2:df:e6:fa:33:5e:0e:c1:48:45:17:
92:49:87:53:53:e3:31:d4:25:35:c8:f3:30:f2:0e:
2b:38:aa:7a:06:2d:19:89:01:0b:ef:79:5c:53:e8:
7d:95:9c:2e:9c:10:69:df:14:ee:5e:3a:0d:f7:0f:
3c:2f:2b:49:ca:15:a5:dd:22:13:56:d9:58:69:99:
2c:44:b4:8d:c6:be:58:7b:8b:de:65:9c:75:23:f3:
93:cf:eb:e9:a2:67:14:27:e0:79:de:d6:33:fc:26:
99:cb:0b:25:5a:5f:55:e4:9f:c7:a7:c4:6a:3e:6f:
f3:e4:5b:22:aa:ae:0c:6a:ba:4d:d1:66:89:68:14:
81:22:9a:41:a3:cb:de:76:5e:89:e3:79:a9:cf:5c:
c1:3c:a2:29:1f:e6:b0:83:f9:74:c3:a3:39:c1:d9:
a7:42:ab:96:97:20:cb:23:07:e7:2f:05:ea:b6:b2:
19:1a:81:74:bf:ef:53:67:f0:77:53:bc:a5:b3:2c:
77:00:2c:b1:e5:7a:f0:80:02:6b:57:b0:9c:41:73:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:51:CF:2C:A8:62:A0:28:67:3E:32:00:77:3F:E1:42:96:E9:FB
X509v3 Authority Key Identifier:
keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.248.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d7:c4:ed:be:c9:eb:be:4d:1d:3a:4f:2d:c8:2f:de:2e:4f:
80:73:4c:01:5f:3b:5a:e4:ad:d2:74:0a:9e:bf:82:4b:2a:80:
db:54:1b:b8:e7:85:54:bb:0a:db:2b:5f:d8:d3:72:db:94:2e:
ba:f7:77:36:85:97:f2:e0:e6:1f:e2:23:5e:d0:e2:68:5c:92:
5a:e7:5c:16:41:a6:10:65:a5:7c:d8:d2:aa:d5:e6:35:a9:56:
19:9c:eb:7f:8f:38:97:d6:4e:19:0a:ed:9b:6a:19:d7:23:8e:
11:8d:9f:da:bf:97:30:17:35:f8:0e:66:72:ba:87:34:1a:6f:
48:a8:12:bc:d5:cb:ba:46:a2:ac:9d:48:ea:ac:a1:dd:d2:fe:
9b:c9:ed:bb:3c:dc:4e:84:1f:c3:55:d9:aa:b1:64:e7:e3:10:
3d:34:82:8e:c4:e8:d3:c4:b4:cf:0c:75:26:04:1c:51:52:47:
c1:24:e2:fd:cf:1a:5e:81:e0:b8:ba:cc:d7:71:53:a8:d3:8f:
81:e6:21:ad:25:b2:17:dc:51:32:c2:6b:a0:7f:80:47:2c:99:
6f:ca:87:55:6e:d4:22:45:27:cc:46:43:24:00:94:67:90:c4:
ff:17:90:17:75:cb:35:07:69:02:a0:e3:38:71:1f:82:d8:fb:
11:49:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:30 2025 by rpki-client