Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
File: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json)
Hash identifier: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=
Subject key identifier: E5:39:E2:6F:A2:CE:70:24:B6:4F:AC:69:20:0F:80:F8:A5:8B:89:8B
Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Certificate serial: 41097853B22CD71715757572993C00857CB67412
Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
Signing time: Sat 14 Dec 2024 04:00:02 +0000
ROA not before: Sat 14 Dec 2024 03:55:02 +0000
ROA not after: Sat 13 Dec 2025 04:00:02 +0000
asID: 132634
IP address blocks: 103.16.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:09:78:53:b2:2c:d7:17:15:75:75:72:99:3c:00:85:7c:b6:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Validity
Not Before: Dec 14 03:55:02 2024 GMT
Not After : Dec 13 04:00:02 2025 GMT
Subject: CN=E539E26FA2CE7024B64FAC69200F80F8A58B898B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:26:71:be:10:65:34:b1:53:4b:fe:e7:1d:
3e:37:b0:21:17:db:71:ba:e9:81:62:9b:dd:99:d6:
fd:de:84:10:1e:81:1a:ec:fb:4c:98:c7:31:d5:6d:
32:2c:75:5f:37:50:02:10:dc:46:6b:c3:ca:5f:64:
af:07:43:1d:8f:95:0a:c1:5d:f1:62:5c:97:3a:9f:
12:c6:ef:71:84:9e:f2:3a:bc:22:cf:60:48:09:36:
5a:2c:29:12:38:c1:19:f2:0c:ae:63:84:5e:24:d9:
9e:71:a8:a3:c8:29:1a:55:ec:ee:5e:6d:da:f4:09:
d7:02:4d:60:96:9e:95:62:9e:25:5a:3b:49:11:24:
f9:bd:cf:1b:aa:97:2a:c8:ac:bf:b1:30:96:cf:67:
47:ed:a1:0d:d2:ec:12:1a:de:4a:11:0f:2d:52:8c:
74:82:f1:9d:3d:4b:90:7b:d7:0d:57:d4:3d:10:3b:
e9:5b:54:a7:f5:bb:6a:ee:4b:c8:21:d0:6e:c8:f9:
27:e3:d9:3b:c6:29:85:9d:06:85:b8:79:4d:26:83:
96:54:3d:f3:92:4b:12:3d:65:6c:2e:80:88:1b:e9:
69:bd:17:c1:80:da:82:fe:e7:89:65:a0:66:27:5b:
83:01:0f:18:d3:fc:f1:4e:f6:87:56:56:e8:34:dc:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:E2:6F:A2:CE:70:24:B6:4F:AC:69:20:0F:80:F8:A5:8B:89:8B
X509v3 Authority Key Identifier:
keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.48.0/23
Signature Algorithm: sha256WithRSAEncryption
61:50:31:3a:f4:3e:c9:05:9c:97:54:8f:28:3b:1e:98:26:4e:
cc:2e:a5:3b:f4:50:52:0e:b0:a9:68:01:0d:50:37:f8:1a:b0:
07:f3:7f:e0:cf:cd:1d:9f:a9:ba:e6:0b:01:13:49:78:38:ce:
1b:c2:c3:20:53:b1:70:31:a6:6d:ac:1b:48:45:aa:fa:3c:bf:
e0:c1:b5:99:77:39:fe:63:c4:ba:55:99:d5:bf:1e:12:13:17:
9e:4a:a6:4c:4f:c1:21:3a:ab:fb:0c:37:a8:62:27:9a:b2:c2:
f0:72:57:3c:21:47:ba:b5:b1:3f:69:ee:ba:84:58:89:6a:75:
37:73:2e:88:30:8f:67:78:10:2e:7d:c8:24:9c:88:df:0b:bb:
6c:18:b8:0f:db:c0:3c:e3:60:6e:76:60:e6:06:8e:4b:f3:2c:
b3:ed:25:d2:57:12:1d:21:de:d2:0d:82:6c:d4:c4:01:c7:eb:
04:b8:fe:63:a5:6f:70:29:a1:c4:c1:a5:58:5b:8e:de:f2:d7:
1d:b4:a3:25:dd:cc:ae:3b:67:fa:95:5b:79:f1:50:a3:7f:11:
66:9b:15:7d:ff:1c:65:7c:01:b5:7f:2b:59:11:23:bf:d6:49:
3b:59:2c:47:08:24:e6:0d:54:3e:7a:41:9c:03:19:3b:d6:4b:
e5:b3:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:27 2025 by rpki-client