Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
File: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: r8z7bDbjNyHi7VzYSSCbno+5xl3u6VN0WnpOY+FTh0M=
Subject key identifier: DC:95:32:16:B7:53:CB:5A:78:9C:16:D2:BD:24:71:4D:13:54:13:07
Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial: 67F352DA9858F22C9C32F9EF7B79BB34AA933610
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
Signing time: Tue 25 Jun 2024 06:00:01 +0000
ROA not before: Tue 25 Jun 2024 05:55:01 +0000
ROA not after: Tue 24 Jun 2025 06:00:01 +0000
asID: 9341
IP address blocks: 103.117.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f3:52:da:98:58:f2:2c:9c:32:f9:ef:7b:79:bb:34:aa:93:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Validity
Not Before: Jun 25 05:55:01 2024 GMT
Not After : Jun 24 06:00:01 2025 GMT
Subject: CN=DC953216B753CB5A789C16D2BD24714D13541307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:bf:1f:47:5c:19:a3:ea:6c:f5:4e:43:e2:
a0:60:7e:69:3e:7e:67:41:8e:4b:b5:68:95:39:7e:
12:74:16:70:85:17:38:06:c9:94:90:53:43:b5:66:
e6:00:10:6b:e2:be:dd:d8:5f:f9:11:c1:e7:5d:bc:
d6:11:c4:49:60:93:6d:0c:13:a2:20:1a:49:c9:b2:
83:c9:d8:46:94:2c:9e:f6:5b:cc:e2:49:67:50:77:
a3:73:f7:88:24:66:80:a4:24:c9:3b:dd:4a:39:2c:
ad:d9:fa:52:46:29:e6:b0:5c:75:fd:19:00:86:1e:
38:be:10:47:7d:c9:06:fa:62:da:13:ce:d9:d0:05:
3b:74:28:d2:f5:90:6d:69:6b:58:b4:7a:cf:9c:94:
58:48:78:13:a2:45:ac:71:5c:b5:30:97:d5:95:da:
9a:f4:25:4a:36:03:74:cf:6d:b5:cd:1c:3d:37:4b:
76:11:11:50:c6:9d:66:21:77:c1:5a:29:84:e5:ef:
f6:63:8a:f4:02:9e:10:17:d8:41:b6:07:85:59:29:
72:1b:58:ba:41:fd:cc:cb:f9:04:28:a4:3b:00:a3:
c6:30:31:4b:0c:33:75:93:c6:27:a8:4d:fd:e5:f7:
a4:ae:aa:38:07:29:08:01:4b:1d:6c:ca:aa:ae:2a:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:32:16:B7:53:CB:5A:78:9C:16:D2:BD:24:71:4D:13:54:13:07
X509v3 Authority Key Identifier:
keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.30.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c3:9c:d8:75:c7:fe:74:ed:c7:1d:a3:9f:a5:90:f3:86:fd:
16:af:75:22:ec:c1:e8:45:0c:d1:62:b6:4f:7e:a5:78:0a:08:
5f:58:de:2b:42:94:d0:23:d2:01:b8:fc:84:d6:1a:df:e2:96:
42:4d:55:6e:b6:bb:c2:1d:83:1d:cd:90:fb:a4:14:82:f4:d6:
86:11:72:b2:fc:af:9a:99:8f:c1:26:ed:dd:8d:b6:88:e6:d4:
31:d1:a8:70:f5:27:a5:8b:23:e9:2c:7b:f8:04:71:5d:75:cd:
04:ba:86:ea:a5:29:e8:76:52:5e:a2:f3:57:43:a3:7c:a6:15:
31:a9:4c:73:c8:4f:b9:c8:1e:f5:86:f0:0d:c6:15:43:d1:f9:
20:90:40:02:f9:a9:a1:c3:1f:a1:f6:75:a1:53:79:63:0a:f4:
72:16:4c:0b:91:32:1b:a4:e6:94:16:7d:e7:63:fa:af:2d:36:
5c:17:49:00:f6:8c:b1:a9:78:70:fe:37:d1:fa:4a:c8:7d:17:
9c:c7:a6:60:b4:d8:46:b6:c0:1b:4c:f4:b5:07:7e:a9:da:89:
92:06:f8:9a:1a:79:3e:b9:f6:34:d2:53:73:b5:54:cb:d4:06:
f0:2e:90:72:d1:41:2c:8b:bc:ae:d8:80:17:25:72:64:1b:67:
34:74:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:38 2025 by rpki-client