Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa
File: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: g0U/Ihh+zRyGBAnYDDRdbB6ZVxIvYplQ7RdHhisSTAI=
Subject key identifier: AC:43:93:33:9C:32:9C:7D:FD:24:D0:34:39:11:94:55:1F:96:36:25
Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Certificate serial: 21458E4D0A75DA501BDFA8C8E4E90377020ADA0F
Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa
Signing time: Thu 12 Dec 2024 04:02:37 +0000
ROA not before: Thu 12 Dec 2024 03:57:37 +0000
ROA not after: Thu 11 Dec 2025 04:02:37 +0000
asID: 140443
IP address blocks: 103.79.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:45:8e:4d:0a:75:da:50:1b:df:a8:c8:e4:e9:03:77:02:0a:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Validity
Not Before: Dec 12 03:57:37 2024 GMT
Not After : Dec 11 04:02:37 2025 GMT
Subject: CN=AC4393339C329C7DFD24D034391194551F963625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:60:fc:3f:83:80:59:49:cc:7e:8a:80:5f:
d3:c7:c8:d5:50:a4:37:50:29:2f:69:99:ef:c6:7b:
6f:a5:40:30:da:35:56:58:b0:53:bf:e6:6a:eb:0c:
fc:3b:58:eb:49:0a:32:c4:e4:0e:16:44:c9:07:50:
56:bb:6a:22:2f:1d:e9:00:f2:b0:f6:fb:5c:ca:58:
41:29:52:c3:5b:b2:b8:0c:da:06:58:d0:e6:c6:28:
c8:0b:22:76:b8:a2:53:4c:cd:03:d8:85:fd:7b:85:
a4:82:b1:09:1a:a2:68:d3:af:98:f9:e0:06:df:e4:
24:52:77:5e:7b:9f:40:90:82:d8:a4:1f:81:44:a9:
50:07:3b:e1:e1:89:0d:48:26:e2:04:fe:0e:86:c6:
0f:55:67:cb:66:2c:a9:6b:f3:90:e2:fb:d2:9c:05:
75:93:a0:b9:9e:af:b8:56:5b:a6:ce:9b:5b:9a:4b:
62:b8:99:fe:0c:e0:f4:af:e3:ac:10:5b:64:8e:1e:
8d:20:29:45:80:d7:8a:e4:b9:75:17:ff:c0:e9:c4:
08:ae:22:6a:18:12:89:d4:5d:af:c1:25:df:f5:6c:
a6:9b:fc:82:ba:ef:6c:ad:4d:ce:29:26:00:29:5c:
af:01:f2:be:57:f1:19:45:be:1d:b7:d8:a7:63:06:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:93:33:9C:32:9C:7D:FD:24:D0:34:39:11:94:55:1F:96:36:25
X509v3 Authority Key Identifier:
keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.130.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bc:8f:d4:b6:aa:a0:3f:72:90:95:3f:f3:b8:27:fa:d4:0b:
ae:03:49:26:d6:6d:e9:dc:96:7d:ec:70:2e:b8:91:0c:ae:6c:
b9:da:ab:8f:79:7a:f6:b8:a2:4c:c2:86:25:e1:c0:dc:e5:86:
ad:5f:09:fc:64:60:92:75:0e:30:ee:d1:f3:b6:16:dd:92:0a:
23:15:57:8f:d3:5d:83:01:b9:3b:31:f7:81:f3:be:2e:67:63:
3e:7b:58:6d:14:b8:51:54:78:4e:77:17:e9:85:72:57:8e:77:
7d:74:04:31:dd:b1:e9:5c:45:9c:6a:32:f6:fd:45:63:b4:5b:
8b:30:b0:4a:56:c3:e9:2a:0f:40:38:41:77:be:fd:d5:78:37:
97:0b:ec:af:de:da:96:ef:5a:da:53:c3:16:26:2d:40:0d:51:
1d:d5:fe:26:53:d2:ca:e9:4c:54:82:14:e4:78:28:d2:ad:e6:
fa:83:c3:a6:1a:5d:cd:c9:83:69:a7:66:de:f1:31:5b:e2:68:
c1:23:4c:49:0e:cc:97:e9:74:b4:c6:80:b8:bd:5f:f1:62:47:
7f:3f:b4:83:97:49:ac:80:23:37:54:0e:75:30:0a:3a:c8:05:
86:e2:2a:0c:84:d8:92:c2:1e:6b:b5:67:1b:5c:78:76:d1:cf:
f3:c0:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:42 2025 by rpki-client