Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa
File: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (raw, json)
Hash identifier: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=
Subject key identifier: D9:FE:26:F8:53:06:F3:4F:A7:BF:4A:74:F7:E2:E5:FB:00:6A:9A:13
Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E
Certificate serial: 47335B7E9D0A61F5D53EF02113CF521587A4D29A
Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa
Signing time: Thu 08 Aug 2024 07:01:49 +0000
ROA not before: Thu 08 Aug 2024 06:56:49 +0000
ROA not after: Thu 07 Aug 2025 07:01:49 +0000
asID: 140465
IP address blocks: 103.35.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:33:5b:7e:9d:0a:61:f5:d5:3e:f0:21:13:cf:52:15:87:a4:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E
Validity
Not Before: Aug 8 06:56:49 2024 GMT
Not After : Aug 7 07:01:49 2025 GMT
Subject: CN=D9FE26F85306F34FA7BF4A74F7E2E5FB006A9A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:de:c9:db:d7:f2:51:e9:af:bd:1e:bd:81:
da:b5:b1:88:aa:21:91:75:c3:ba:c9:47:11:49:4c:
39:09:e2:27:db:20:fb:36:05:10:f0:e6:ad:1e:d0:
95:1f:6a:64:23:e7:1f:1f:17:22:ce:2a:a4:75:c5:
30:11:dc:da:04:9b:f1:54:25:c6:26:99:50:94:06:
e1:4e:2e:91:d5:f1:a4:11:14:e2:3d:99:da:f3:c5:
c3:e6:41:e7:95:46:ac:18:ec:1a:79:22:36:7a:af:
f5:87:4e:57:38:7b:2e:1c:91:d2:f7:b9:a0:38:c6:
75:79:f8:33:43:90:b7:5e:ae:47:92:de:e1:3c:75:
e7:99:01:1d:47:1b:e7:7c:61:e0:46:dd:00:00:86:
f8:25:89:22:d3:92:a4:1e:0e:9f:08:f2:c9:d4:db:
09:ca:db:c7:0e:c4:74:ff:7a:be:0a:24:fd:18:50:
c4:57:10:c4:3f:42:ba:7f:3b:8d:75:f8:af:97:b1:
a9:a4:1a:16:6a:d3:db:31:4b:09:4a:a7:c7:b5:9c:
d5:3b:a2:c3:4e:05:8e:93:d2:03:4e:9b:c8:10:6e:
b1:ff:66:48:40:2e:2c:59:4c:33:39:a0:48:5e:db:
f5:79:50:bd:0d:b4:e5:76:8e:ab:2b:b6:43:d8:c2:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FE:26:F8:53:06:F3:4F:A7:BF:4A:74:F7:E2:E5:FB:00:6A:9A:13
X509v3 Authority Key Identifier:
keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
35:23:a7:27:72:cf:bf:25:68:60:fb:c8:ec:21:d5:8e:e7:d3:
26:2d:7d:d9:fc:93:ea:9c:4d:9f:ee:f2:e1:5f:96:b1:10:34:
0e:06:80:50:c1:0e:ea:75:84:8f:60:1f:58:00:0b:22:75:20:
6b:7c:28:a7:02:4b:c7:fc:4a:c1:e4:c8:96:47:95:73:45:19:
0f:d6:5f:db:8c:57:68:96:b2:00:b3:22:5f:29:eb:80:53:18:
db:90:1b:4d:da:a7:5c:d1:06:1b:e4:9a:8b:06:72:99:39:1f:
01:27:df:7a:73:3b:22:63:1f:09:35:3e:7b:b7:14:ef:da:b3:
3e:05:7f:c0:a4:a2:68:e3:56:5a:e2:69:97:20:b6:cb:4f:11:
80:08:44:73:6b:59:53:0b:7e:e2:32:a0:1c:7c:ca:fb:44:ca:
15:87:32:4d:49:49:02:89:28:2d:5b:93:20:29:7f:1e:8e:77:
d3:ee:5d:ca:8b:ee:ec:30:33:53:73:ab:b6:17:27:8f:23:44:
87:11:9d:e9:d5:a8:1f:91:fd:eb:71:76:52:6d:07:38:d6:7b:
2b:97:7a:c6:16:d4:26:ee:ab:46:2a:72:0e:d0:92:13:59:7c:
88:bb:3f:06:04:23:b1:c3:f2:c2:af:51:a3:a3:32:37:57:6c:
b8:a0:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:26 2025 by rpki-client