Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa
File: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (raw, json)
Hash identifier: tQ4vZuhFeMHPG6Q4JsAfSDt09xj/628G92eqdEQqJxg=
Subject key identifier: 33:22:61:12:A9:D2:AC:DF:96:BC:C6:5D:52:48:84:21:4A:EB:50:B3
Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03
Certificate serial: 17E627F4A2878EE2A14F550DE8E54201C040AD80
Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa
Signing time: Mon 02 Sep 2024 19:00:00 +0000
ROA not before: Mon 02 Sep 2024 18:55:00 +0000
ROA not after: Mon 01 Sep 2025 19:00:00 +0000
asID: 142400
IP address blocks: 103.172.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e6:27:f4:a2:87:8e:e2:a1:4f:55:0d:e8:e5:42:01:c0:40:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03
Validity
Not Before: Sep 2 18:55:00 2024 GMT
Not After : Sep 1 19:00:00 2025 GMT
Subject: CN=33226112A9D2ACDF96BCC65D524884214AEB50B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:65:a5:76:3f:f0:b5:5c:41:d8:20:03:de:
be:0c:8e:0e:1a:83:7f:39:0a:5a:a3:92:ab:75:46:
54:1c:13:d1:b5:84:b3:ca:e7:39:52:16:ba:94:10:
d5:2b:db:d1:44:de:10:0b:76:a2:9f:ff:19:d5:e2:
82:38:d4:12:26:3a:b3:92:61:3b:49:10:f9:65:51:
e3:0a:03:55:6d:96:79:b2:2f:8e:b1:f0:d4:6a:5f:
96:10:0a:7e:cb:6c:a7:86:73:12:8f:23:a0:09:a6:
dd:3f:2f:94:28:69:f1:9d:9b:bd:81:9d:0f:6d:ef:
04:7a:cc:f3:eb:b0:ef:8b:11:ed:18:1a:d0:af:f8:
ac:fa:39:ea:1b:08:39:78:e8:ce:9c:71:9d:ac:6b:
1e:bf:0b:c6:e3:ce:e9:7d:ae:e3:3f:02:22:22:2e:
4c:df:65:ac:05:b1:e3:c5:19:2a:f4:47:61:1a:5c:
b2:49:74:16:22:89:7e:9f:d5:93:6b:7a:2e:c3:cb:
62:f1:48:53:47:be:51:7a:86:45:0d:35:b3:42:7e:
9d:5e:74:27:f8:c1:41:c1:80:88:fa:8d:47:a8:b1:
bf:5d:ee:91:7c:6b:f6:40:75:9e:24:53:f0:23:1f:
8b:ec:f2:ca:21:05:07:0a:6b:28:ce:b4:9a:8e:70:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:22:61:12:A9:D2:AC:DF:96:BC:C6:5D:52:48:84:21:4A:EB:50:B3
X509v3 Authority Key Identifier:
keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:56:e9:63:95:09:1a:6f:ee:2b:54:9e:fa:54:8d:42:1b:96:
ed:8c:b6:a7:f6:d3:a4:d3:92:3a:32:f9:c5:bd:69:d0:a6:bc:
84:a1:2c:c7:12:91:91:f4:7a:6d:9d:e3:46:e9:c4:34:9e:3c:
ee:06:10:e0:5d:8e:32:88:c2:e2:1b:94:d3:f7:72:b4:64:73:
38:ff:a3:4b:6c:9e:b3:6a:0b:d2:8e:21:a2:be:3f:20:65:02:
7a:8c:5f:16:1f:19:a2:28:1e:5f:a1:73:a8:bc:76:36:bb:82:
d7:fe:63:1c:af:b2:7b:bc:52:44:91:95:82:ff:03:b5:e3:0f:
a4:fd:48:12:24:40:f9:64:9e:3d:a1:1f:3b:5b:2a:88:c4:64:
f7:72:56:18:30:7b:f6:e6:09:da:b9:f8:7c:9d:79:46:e4:36:
23:3f:4e:6f:7e:4c:b5:5c:1d:f2:7b:31:5c:da:7f:77:fb:f4:
f2:80:a3:12:53:4c:7e:af:09:5d:85:5e:f0:89:55:14:ce:f2:
d5:10:5b:19:4c:1e:21:13:b5:71:54:1c:60:0c:96:9f:a1:8c:
4c:a0:e2:95:1b:70:b7:02:ed:5a:88:d5:f8:45:be:2d:a3:ec:
39:7b:b7:d2:57:59:0c:bc:3e:00:5b:53:b9:0d:d2:cb:7a:9d:
8b:ea:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:38 2025 by rpki-client