Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
File: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (raw, json)
Hash identifier: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=
Subject key identifier: B1:B5:85:33:49:E7:CB:8A:99:44:B3:D1:7E:87:9C:8D:BB:09:72:4A
Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
Certificate serial: 7F2EFD820E69F31317B8EBE53ABA2DB11226EC4A
Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
Signing time: Sat 11 Jan 2025 19:00:02 +0000
ROA not before: Sat 11 Jan 2025 18:55:02 +0000
ROA not after: Sat 10 Jan 2026 19:00:02 +0000
asID: 147165
IP address blocks: 103.178.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2e:fd:82:0e:69:f3:13:17:b8:eb:e5:3a:ba:2d:b1:12:26:ec:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
Validity
Not Before: Jan 11 18:55:02 2025 GMT
Not After : Jan 10 19:00:02 2026 GMT
Subject: CN=B1B5853349E7CB8A9944B3D17E879C8DBB09724A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:27:84:bc:6e:a9:75:7a:54:d5:60:25:60:
8d:fc:61:9d:ce:27:6c:8d:e6:cc:13:85:f0:b0:4b:
89:94:15:d8:cd:29:c9:4d:bd:b9:c2:32:87:93:19:
47:9d:62:a4:6d:ba:9d:f9:74:1e:73:cb:1a:35:f6:
e6:80:16:66:c0:f1:7a:d2:ba:64:75:b6:d1:6f:e7:
fd:b3:38:b4:05:9b:cd:1d:eb:bf:fd:b7:3f:f2:b0:
0a:10:5b:5c:22:f9:1b:23:14:20:10:c7:1d:8c:7a:
18:70:9b:e4:ac:d5:97:63:51:78:0d:61:ef:bb:2c:
78:3c:65:87:7b:48:a4:03:ee:a8:51:0d:10:6a:09:
60:aa:12:fe:50:e6:f5:ed:c4:bd:f8:12:be:f9:ea:
ca:0c:47:1a:12:c9:10:c5:cc:49:f4:ce:9f:6a:dd:
ad:cc:dc:5a:ff:d2:c3:e3:10:ec:c1:3f:36:0a:96:
1e:ed:ce:12:e2:61:28:ae:bf:04:a4:69:4a:f3:59:
64:91:7f:5c:06:27:08:2c:9c:ce:08:67:36:0c:63:
81:05:c2:75:2d:9c:4e:87:1a:94:8f:a3:84:8b:11:
d7:dd:6d:dc:96:2d:6c:12:89:d9:55:7d:db:22:8c:
ba:d8:02:e5:5b:7a:d7:9c:a5:e0:b9:cc:f1:28:f7:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B5:85:33:49:E7:CB:8A:99:44:B3:D1:7E:87:9C:8D:BB:09:72:4A
X509v3 Authority Key Identifier:
keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c2:86:d9:e8:39:5b:82:41:c3:8c:c1:00:d2:4d:36:ca:35:
2f:da:7c:00:7f:64:e3:d1:b2:9f:95:ad:2e:0c:c2:61:02:4b:
1f:28:ec:eb:11:1a:98:4b:ad:87:e1:f0:cb:ab:fd:90:6f:4e:
af:b0:f1:f6:02:98:30:09:b4:55:a9:06:ee:90:60:be:4f:ed:
f1:f4:92:fb:c2:46:8a:d4:53:a5:6d:f2:1e:ce:c8:66:e6:39:
83:fb:26:5f:3f:1d:d9:ed:80:df:dc:66:1d:4e:36:e1:76:c4:
fa:b2:25:46:67:c3:70:96:75:8b:a0:63:bf:93:c9:a5:dd:b0:
2f:25:fc:e0:59:97:06:2c:c1:17:2e:7d:da:19:9e:fd:23:17:
94:0e:51:58:f2:53:7e:06:32:0c:e0:04:1f:5b:10:f4:0b:f0:
19:6a:fd:e3:40:99:29:bf:1b:66:14:43:bb:c8:4e:7e:8c:a6:
94:1a:ba:4b:ad:a8:11:ce:ab:e4:15:e1:ba:8b:34:94:8b:7e:
ff:50:69:dc:ed:1a:1a:92:f2:69:95:80:ab:c5:6b:75:68:5a:
ad:9a:da:bb:30:0e:3e:82:2e:56:5a:69:5d:b1:c0:b4:e6:5f:
ef:67:8b:4a:b6:74:5e:ac:f0:5c:bc:03:10:fc:f5:fb:6a:6f:
b2:df:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:00:01 2025 by rpki-client