Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
File: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=
Subject key identifier: 54:AF:14:FC:8F:FA:56:D0:AB:8C:65:46:98:94:CE:5A:E6:C0:DB:54
Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial: 7DE32032B06497AABF68395CA8E223A5ABDD33EE
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
Signing time: Wed 16 Oct 2024 04:02:05 +0000
ROA not before: Wed 16 Oct 2024 03:57:05 +0000
ROA not after: Wed 15 Oct 2025 04:02:05 +0000
asID: 38148
IP address blocks: 103.30.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e3:20:32:b0:64:97:aa:bf:68:39:5c:a8:e2:23:a5:ab:dd:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Validity
Not Before: Oct 16 03:57:05 2024 GMT
Not After : Oct 15 04:02:05 2025 GMT
Subject: CN=54AF14FC8FFA56D0AB8C65469894CE5AE6C0DB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:a9:1f:3d:0f:da:3c:46:16:1d:19:dc:55:
1e:f7:47:41:7f:90:f4:af:c0:c6:43:6f:47:09:88:
be:32:67:a4:d0:71:55:06:7a:c9:78:03:72:44:c3:
5d:ca:db:8a:64:1a:b5:91:31:93:d1:8b:ff:49:fe:
a8:96:03:58:3d:fa:3e:43:a8:7b:ac:ae:90:2e:e2:
52:a9:5d:db:3b:53:30:a7:d3:40:02:f2:f1:95:b2:
0d:70:42:a6:88:8b:a4:e6:4b:47:a2:6a:89:14:bf:
24:bb:35:2f:ab:26:20:7d:c7:36:b5:38:98:6a:e2:
86:29:fe:36:36:00:e0:2c:6d:df:71:aa:0c:76:7d:
e9:ef:23:6b:0e:0a:2c:9d:a0:43:61:b8:8e:13:8d:
40:31:87:0a:98:e5:ad:b1:c4:5f:bd:82:15:bf:d2:
ce:33:4e:fb:c0:7e:c1:b8:f7:5d:e9:b4:9b:f9:f7:
c7:e1:9c:28:36:4b:59:0e:ce:dd:69:e4:76:73:6b:
a0:3c:71:9d:66:8a:52:54:76:fc:98:8a:88:17:6c:
ae:7c:48:34:96:3a:6c:a0:3a:0b:01:da:e7:e9:4e:
ab:3d:c1:50:d3:ee:81:f5:78:87:5c:3b:80:e2:e4:
31:fc:83:df:0d:db:99:c5:33:0c:80:22:35:9e:fc:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:14:FC:8F:FA:56:D0:AB:8C:65:46:98:94:CE:5A:E6:C0:DB:54
X509v3 Authority Key Identifier:
keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.220.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ae:9e:24:f7:fa:12:3d:2e:13:0b:ba:1e:76:96:59:c5:43:
0f:a5:2d:5a:8a:91:7f:08:74:fe:b2:03:54:8e:f2:9b:0c:7f:
de:15:9e:b4:17:5d:8e:16:eb:93:3f:1d:05:87:9d:a9:8c:09:
b4:96:d7:33:ea:00:8c:1b:8f:a1:81:4e:5b:f6:e7:7b:ed:7b:
4c:0a:8e:d8:b7:c3:81:c3:6c:5b:17:7e:7d:d2:f8:e8:e6:a8:
f1:94:cc:43:bb:c6:c7:c8:d7:89:39:b2:32:2e:3d:e2:da:32:
f8:40:d2:ec:db:6c:95:2c:3c:7d:3c:80:2d:63:cc:9b:73:a4:
44:cb:42:c8:f6:d2:9c:a8:e8:ae:7f:50:22:cf:f5:7a:86:e5:
23:81:6b:dc:c9:b6:c7:9a:52:15:0d:4c:db:15:c9:31:64:f0:
ba:61:33:21:bf:1a:53:b2:c9:e8:ec:25:53:b5:b9:49:ed:e8:
30:4d:1e:ae:df:c5:d8:4c:1b:40:f6:34:7f:4c:f7:49:f3:b3:
83:b6:68:34:79:35:9a:c3:10:7a:a5:4f:2b:41:c5:5b:82:b0:
34:9e:51:b5:55:00:49:80:d5:f3:20:bb:81:dc:c5:e8:99:93:
21:f0:6e:f7:5d:73:38:4b:39:28:ea:a6:18:ad:b7:07:1e:6c:
ac:a4:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:49 2025 by rpki-client