Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa
File: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (raw, json)
Hash identifier: 7EctcIPxfFZPW1P5p9qAy089fiBQ6Wvhy3EiPuauiGc=
Subject key identifier: 39:AD:7E:E8:63:5C:2D:84:05:41:F2:BF:C2:BB:55:03:DC:33:66:2D
Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F
Certificate serial: 3C6DDBF1E52FBA50E8BC055CA74B5DA93587E5D6
Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa
Signing time: Thu 11 Jul 2024 10:00:01 +0000
ROA not before: Thu 11 Jul 2024 09:55:01 +0000
ROA not after: Thu 10 Jul 2025 10:00:01 +0000
asID: 140474
IP address blocks: 103.153.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6d:db:f1:e5:2f:ba:50:e8:bc:05:5c:a7:4b:5d:a9:35:87:e5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F
Validity
Not Before: Jul 11 09:55:01 2024 GMT
Not After : Jul 10 10:00:01 2025 GMT
Subject: CN=39AD7EE8635C2D840541F2BFC2BB5503DC33662D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:ba:fa:cb:31:72:04:0e:d1:99:75:f3:fc:
a7:67:0d:c6:7c:ef:c2:98:25:17:db:e4:a6:91:b9:
03:1d:fd:1f:d5:97:0b:b9:0f:7f:42:35:0d:3f:ca:
0a:b9:7f:e1:3e:97:d2:7e:25:1a:67:ae:4c:4e:fe:
ff:ef:4d:91:f8:6c:4b:8c:f1:0d:f8:b2:99:63:fd:
f7:2d:aa:0b:a7:63:84:15:11:a0:b1:c0:4c:a4:f7:
fa:e4:66:2b:3b:5e:03:be:1f:77:e5:c0:c7:f9:93:
6b:10:0e:b7:c3:e6:b7:dc:50:ac:59:e5:ef:ff:36:
33:4a:a6:b7:91:01:70:1c:ef:9f:83:44:71:31:f1:
16:b2:19:50:d7:53:26:6c:b7:37:20:2b:d5:a3:d3:
c8:0b:42:32:1f:c5:53:be:ca:b3:a6:ec:75:8c:2c:
01:9a:74:36:eb:1d:47:15:62:e9:41:a5:fe:9e:a7:
ae:e3:75:5d:dc:4c:51:bc:32:02:92:b2:ac:8d:ed:
10:0a:08:68:77:ab:72:19:c3:13:cf:54:f7:c6:41:
da:24:01:2c:cd:ab:b3:b9:40:87:43:a5:32:de:39:
47:b1:ed:ff:ff:fe:bc:be:a8:8d:41:16:3d:6d:20:
28:b2:44:e1:33:c3:96:c7:e2:64:1e:1a:13:e1:80:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:7E:E8:63:5C:2D:84:05:41:F2:BF:C2:BB:55:03:DC:33:66:2D
X509v3 Authority Key Identifier:
keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:66:40:10:c5:b0:60:a4:f7:06:7c:e4:58:83:35:a8:9d:ae:
c5:fc:45:58:4f:96:e1:8b:94:5a:10:20:d1:c5:fe:02:c1:b3:
0b:b7:02:b3:c8:c6:0b:43:6b:2c:7d:50:63:c5:da:16:12:00:
da:34:c3:41:06:3d:1c:aa:0b:9d:c9:30:7a:d5:c6:ab:95:a9:
7f:6b:bc:fc:c9:89:60:fb:33:44:92:bc:a7:a0:f1:05:c3:4b:
91:3a:45:da:56:2a:25:47:c8:2d:94:88:79:42:d8:32:8b:01:
78:7a:a7:95:33:3c:55:b5:4f:07:ac:32:7d:c5:81:c1:0d:7a:
c1:93:46:9b:7b:99:38:16:d5:0f:e6:8e:a1:1a:03:bb:90:3b:
2a:b4:b2:70:a6:b8:de:45:89:1f:67:50:1c:70:74:0a:66:da:
5f:71:31:f4:36:16:89:f6:2d:58:1b:ee:5f:16:fd:d8:f3:68:
39:03:30:62:de:12:4a:55:f3:31:54:f2:7e:8f:83:86:36:b2:
22:f7:af:5c:06:b7:7d:ac:38:4a:00:46:b0:a2:b2:89:ee:96:
4c:25:9b:cf:ac:60:84:88:9b:d9:82:ca:fb:ab:21:49:21:18:
9f:26:f5:61:fe:e6:2c:5d:3b:8b:12:5c:7b:21:45:91:7d:60:
de:43:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:51 2025 by rpki-client